Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: KmEMxNPf3IjtiUSOuN/pr2q46/i7evDfRj6oop/Yb4s=
Subject key identifier: 14:77:CE:DA:67:33:C0:D2:62:8A:78:88:42:4A:DB:0F:31:D0:FC:AD
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 0196BB5B0922D7A91F7D9E72944A6E9745A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0BAC
Signing time: Sat 10 May 2025 18:00:27 +0000
Manifest this update: Sat 10 May 2025 18:00:27 +0000
Manifest next update: Sun 11 May 2025 18:00:27 +0000
Files and hashes: 1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: 3O5UEFFAIKAj8TornTpeQpQLLLOuLba6LSPbYgeQfFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:09:22:d7:a9:1f:7d:9e:72:94:4a:6e:97:45:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: May 10 18:00:27 2025 GMT
Not After : May 11 18:00:27 2025 GMT
Subject: CN=1477ceda6733c0d2628a7888424adb0f31d0fcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:da:56:e7:12:00:74:6b:c9:ce:8c:29:87:0a:
ae:d7:39:d8:78:86:d0:7f:43:2c:85:70:4b:6c:9b:
dc:5c:ab:47:17:91:52:9b:2d:11:7e:bc:6a:2a:35:
b3:fa:9e:42:6b:47:d8:ae:36:59:f4:b2:df:f8:99:
ca:0d:f2:a6:74:89:ea:67:47:50:90:fb:fa:0d:49:
83:88:c7:76:f1:c2:e1:23:ea:e4:b6:ac:e7:6b:02:
45:71:76:2e:a8:1b:22:5f:76:57:c9:2b:62:8d:a1:
eb:d9:b7:6b:5c:46:5c:d1:b1:19:4f:1c:69:2a:8b:
95:31:3c:0f:32:42:bc:72:3a:42:8d:3e:86:fd:93:
c2:8b:3f:ea:5c:09:97:47:b8:0d:55:96:ec:19:d9:
a3:3c:83:4c:e3:28:fa:65:11:92:11:c1:b7:92:0c:
43:a7:da:20:5e:3b:b0:56:7b:97:9c:ee:a4:2f:5e:
0a:a7:49:53:09:6c:e9:88:f3:ca:d7:47:24:e0:ff:
b8:73:9e:ab:f5:e8:1d:a7:6f:20:9e:7f:35:56:13:
61:25:bf:9e:2d:a7:00:a7:4b:1a:f9:73:a4:99:ff:
38:e9:cf:60:b4:29:31:53:d3:8b:37:a4:f4:4b:03:
57:b1:32:a8:10:f1:a7:45:f4:8e:5b:6d:3e:57:4e:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:CE:DA:67:33:C0:D2:62:8A:78:88:42:4A:DB:0F:31:D0:FC:AD
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:32:de:bf:a7:20:d1:23:69:e7:27:33:16:49:b7:6a:55:67:
99:87:11:87:b3:36:a6:05:9c:a2:2b:0e:da:0f:f6:b7:1c:5d:
3a:5e:3f:02:ac:73:b7:ad:d3:42:26:7c:bb:8b:57:44:b2:ec:
84:9a:d3:e1:9c:e2:de:e5:c4:9c:cf:9c:80:5d:44:79:71:98:
40:53:cb:3c:68:6b:01:9c:13:44:39:69:15:cd:1b:45:13:e5:
f7:5b:38:b3:93:bf:c7:df:30:f6:8a:04:08:65:28:ae:c6:9b:
24:e8:bb:9c:57:3d:35:41:73:ea:9a:c2:e9:9e:36:ad:79:11:
ca:af:81:7f:68:f8:68:b7:45:98:4b:17:af:82:37:8f:a2:7c:
f5:82:e7:65:07:50:de:27:ae:58:e5:32:ed:c8:31:ae:1a:b6:
52:e0:d4:03:ec:77:91:0f:ad:ec:61:02:19:ea:db:29:e0:e7:
78:8d:aa:de:14:b3:86:c1:9f:38:f2:87:41:2b:a1:66:44:ba:
dd:0c:30:6b:89:22:a5:18:ca:64:d7:fe:9a:5d:c7:fe:e8:42:
32:f8:23:1f:49:49:fd:41:dd:28:3a:06:73:35:c6:a5:f3:25:
b7:52:dc:c9:11:49:df:fe:cb:ba:ba:38:0a:fb:29:d0:a7:2d:
f5:55:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:08:32 2025 by rpki-client