Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
File: TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft (raw, json)
Hash identifier: KIQf7QIfDQMMgG+2B3qV3OhXWZy6bN8qzXeFChOceAU=
Subject key identifier: F7:9B:2B:11:68:79:97:20:AB:A5:17:9F:56:58:79:4A:34:30:D8:C5
Authority key identifier: 4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
Certificate issuer: /CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Certificate serial: 0196BF6F016906A41A0734BC2034184307EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
Manifest number: 04F4
Signing time: Sun 11 May 2025 13:00:45 +0000
Manifest this update: Sun 11 May 2025 13:00:45 +0000
Manifest next update: Mon 12 May 2025 13:00:45 +0000
Files and hashes: 1: 4m_ZlqWE1YEBP4kWtbELic7ECzg.roa (hash: t8PO7dqvDfBV4dwcfBXHsLynSbU2oXoJqnNbzqZG81g=)
2: TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl (hash: 4RqVJC4CvCy+7dU/u2os+srAQpU4Rm78CvJgqAI9zhs=)
3: risExVobQciJpjckh7R5a6pHayQ.roa (hash: smtSJjRXs0E72dzCfhCCARBzkZPKWKCqhHgp8E/C6HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:01:69:06:a4:1a:07:34:bc:20:34:18:43:07:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Validity
Not Before: May 11 13:00:45 2025 GMT
Not After : May 12 13:00:45 2025 GMT
Subject: CN=f79b2b1168799720aba5179f5658794a3430d8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:5b:98:d7:0b:35:6f:db:bb:1a:1d:9e:c4:
f3:57:82:3d:95:ed:db:68:9d:2b:0e:53:c8:31:f7:
fc:33:89:64:21:86:89:bd:56:d3:62:60:29:5b:b9:
1a:2a:41:6c:18:3d:3b:7e:7b:4d:74:f5:d9:63:33:
cd:ac:b7:4a:d7:90:a5:13:b3:53:30:57:0a:1e:f2:
48:2a:eb:38:7f:e9:a8:a7:62:da:23:a5:13:3a:cb:
d1:be:5a:36:c7:7e:3c:fa:9d:ba:3e:dd:9b:68:f9:
47:57:18:b4:36:12:cd:56:74:93:10:2e:57:db:f7:
f1:52:28:4d:19:46:51:f9:87:d6:a8:11:95:89:c6:
50:d5:f5:44:88:03:7c:cf:f2:62:47:b8:be:ef:56:
58:12:3b:5c:89:8f:d5:0f:c1:e2:db:8a:9a:ce:c8:
9b:40:9a:af:26:97:12:03:6a:54:f4:7c:31:77:43:
5e:b8:e8:bf:6f:18:d2:ce:13:34:7d:8e:6f:aa:73:
87:e2:17:bc:8b:ab:9e:25:03:ec:a2:9f:4f:25:8c:
d4:b6:49:d6:34:19:65:9a:0c:28:55:c3:1d:13:e9:
94:5e:29:13:3c:a1:c1:32:8a:55:f4:85:0d:ca:94:
6f:31:ca:e6:ff:88:0d:4c:c0:23:25:1e:1e:19:b9:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9B:2B:11:68:79:97:20:AB:A5:17:9F:56:58:79:4A:34:30:D8:C5
X509v3 Authority Key Identifier:
keyid:4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b2:31:b4:a7:cc:45:d0:7e:e1:cb:63:a5:f0:92:dc:40:8f:
b7:3f:67:e9:16:bd:ff:7b:cb:eb:5e:08:f2:d2:75:93:99:30:
89:1a:65:3c:88:dd:12:9e:78:88:05:66:77:98:99:87:68:c8:
49:d5:d5:58:5a:46:19:77:06:b5:14:66:f8:c7:c6:71:31:bb:
a5:fe:16:f9:f2:a3:b8:03:53:76:a9:71:11:27:93:0e:06:04:
49:cc:ec:73:4e:c2:26:71:46:38:1d:63:c1:13:a7:92:41:44:
fa:11:28:68:a4:ea:a4:fd:1f:d1:0f:0d:ab:5b:a7:b4:9d:2f:
9d:a4:2f:d5:63:f7:ad:01:24:21:c1:a1:6d:7b:18:9d:6a:6c:
04:f2:2c:25:68:5c:96:dc:a8:b2:ae:e4:20:b4:e7:3c:bf:d4:
bb:4e:7d:f1:aa:7b:24:b3:28:47:cb:4c:64:e4:e9:11:81:ab:
34:80:7f:ec:af:45:c1:5f:e9:ba:8d:63:e9:82:f7:da:d0:81:
ea:5c:82:79:fb:94:b5:78:1d:6b:10:1e:1c:7e:2a:63:d8:60:
fa:2b:25:d8:ff:af:13:68:f1:88:fb:b9:64:7a:81:c1:cd:dd:
d4:2f:15:0e:a0:8d:f1:41:80:f3:19:1b:e7:21:30:91:f7:a3:
0c:82:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:57:58 2025 by rpki-client