Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
File: Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft (raw, json)
Hash identifier: o2a5Su1GjRC838T8OJhxsch/G2owgFiPwfsOG90Ol3M=
Subject key identifier: 20:71:23:51:83:1F:2E:05:9D:F9:F7:02:C6:9E:B8:3F:AF:EF:CA:1B
Authority key identifier: 4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
Certificate issuer: /CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Certificate serial: 0196BB23F2403708E0EF05C2F183E01F147B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
Manifest number: 0457
Signing time: Sat 10 May 2025 17:00:17 +0000
Manifest this update: Sat 10 May 2025 17:00:17 +0000
Manifest next update: Sun 11 May 2025 17:00:17 +0000
Files and hashes: 1: Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl (hash: EzgkR6xjbfV91+d4v9APsiDzVqiWq4ijcGAyss8mX8E=)
2: VWcJP68R1iCD75ssSwFn6hz8CZY.roa (hash: 9It7diBDuI5/L54Ro2RJcj4yvJavFWDdkkIXSsptI6U=)
3: aSHknzRfo3ut4IdP4sDFiOtG6lo.roa (hash: P3VJRH2gCdGbd9jiYKekQElrMo005p0FNDq0qs/ZIaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:f2:40:37:08:e0:ef:05:c2:f1:83:e0:1f:14:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Validity
Not Before: May 10 17:00:17 2025 GMT
Not After : May 11 17:00:17 2025 GMT
Subject: CN=20712351831f2e059df9f702c69eb83fafefca1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:4e:26:65:65:5f:ec:bc:47:4f:e1:b1:90:
d9:ce:38:64:5d:5e:fa:bf:89:70:8a:2f:80:2f:f2:
b8:35:0f:d4:d9:67:7c:a6:16:12:22:e2:d1:74:4f:
1d:f2:3e:03:7b:1b:db:48:ac:ef:11:20:2f:d6:b6:
59:ad:a7:77:5f:76:f2:5d:f5:73:f9:e0:5b:98:d3:
40:cf:cf:9a:b5:96:3f:3c:64:dc:bc:d9:c5:fd:3a:
c8:fd:28:a7:24:f7:ce:28:71:55:19:8e:dc:0a:0a:
4c:71:4d:59:d8:1e:c7:a5:b6:1f:ab:a4:40:a9:da:
45:04:61:5f:05:98:78:cb:54:0c:aa:66:48:aa:a3:
bd:88:9d:94:51:fc:d9:7b:20:8c:be:08:ad:2f:a6:
77:88:db:bf:09:10:73:41:a8:1b:77:21:58:91:5c:
6a:d4:10:6a:75:3d:d7:cf:66:4e:7b:5b:3b:36:61:
65:a3:b4:47:33:82:41:fb:dc:e6:3e:d3:d7:12:73:
5c:06:03:6d:9d:ae:53:be:d2:56:20:35:fe:70:7f:
90:bf:54:81:c9:e8:2f:94:5b:93:77:5a:ac:5c:d9:
c4:a7:78:b8:d8:1a:48:e4:2a:f0:70:0f:58:82:3f:
5c:62:82:b2:95:16:1b:cc:10:be:fa:1d:3e:9a:49:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:23:51:83:1F:2E:05:9D:F9:F7:02:C6:9E:B8:3F:AF:EF:CA:1B
X509v3 Authority Key Identifier:
keyid:4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cd:c9:93:55:94:80:55:a7:4a:c2:b6:32:f4:d0:79:4d:39:
b9:ed:c6:97:91:be:18:21:e1:8a:fa:03:88:0e:a3:e6:58:3b:
09:f9:ae:6c:ba:e4:e5:e9:fe:1e:b7:f0:3d:28:32:2e:c7:eb:
f4:28:fe:8a:5c:29:33:ff:d5:c4:02:2b:d6:99:bd:70:e5:2e:
26:f2:3b:6a:59:1c:e6:2c:52:cd:5a:aa:6a:70:79:36:1c:78:
fd:b0:c6:83:7f:4b:be:e7:6a:e8:49:fa:0a:da:d3:5a:b7:42:
43:37:5c:8e:8f:e4:a8:c8:42:52:9e:fd:4e:79:51:be:0d:1a:
12:a9:d2:b3:8b:ab:e8:28:35:53:02:da:3b:fd:ff:b0:ec:a3:
71:8b:7d:dc:a5:b6:9d:76:05:92:96:fe:22:41:dd:e5:ec:72:
26:b8:f5:fd:07:ba:a4:96:32:ba:ff:3a:45:50:75:94:3d:23:
44:24:25:9b:3f:34:e3:cd:dd:c0:f8:64:f8:5b:6b:a2:f9:d1:
06:0a:94:30:a2:09:da:fe:3c:8f:93:c2:85:9d:05:62:67:fa:
68:f2:86:25:ca:91:e2:f6:c6:2f:af:61:86:f4:cd:27:19:04:
bc:bd:b7:94:0a:62:bf:42:aa:19:ea:f5:60:de:38:5c:7a:44:
50:f7:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:18:13 2025 by rpki-client