Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: xl2KE8mkt7eUGUwfjomZ07hQClfE9WeDr1xF8M6oab8=
Subject key identifier: D1:7C:71:C9:9A:B4:59:34:DE:82:24:CA:52:A8:99:FE:5E:23:15:00
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 0196BDEEF930841B6AD79E355DB3D6A4C9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 03F1
Signing time: Sun 11 May 2025 06:01:17 +0000
Manifest this update: Sun 11 May 2025 06:01:17 +0000
Manifest next update: Mon 12 May 2025 06:01:17 +0000
Files and hashes: 1: FXVByNPxdRkMO-o6GsvvheK9loQ.roa (hash: cJsMagby7QEs7crG2RTXoRPWZv4X7cM8ggqQkmQ3WIs=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: OXNprCMzc9MlXXdtIg+Tuok4BhTa325Gbvq9yMOxWHc=)
3: lUkUA-Czwa2okiPJT7Kq8pTW_Yo.roa (hash: fS+41ubfx3zCs5hYx7i3kz5j50EsoWw6NrXQjh9DDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:f9:30:84:1b:6a:d7:9e:35:5d:b3:d6:a4:c9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: May 11 06:01:17 2025 GMT
Not After : May 12 06:01:17 2025 GMT
Subject: CN=d17c71c99ab45934de8224ca52a899fe5e231500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:17:f6:7e:e1:a2:ff:33:40:0f:21:db:2c:9e:
51:d4:da:9b:8e:50:70:a4:29:27:3e:36:71:60:eb:
45:1f:55:11:10:c3:74:77:3e:4e:90:4c:09:4e:96:
93:c7:66:57:c9:80:1f:80:6a:53:7f:cd:d8:f5:bc:
91:a5:8d:19:86:4f:22:54:ae:0f:e0:f7:7b:a1:c5:
e0:e7:63:b2:26:0b:f9:c4:8e:af:30:74:8a:37:c4:
a9:23:e5:cf:2e:46:f1:95:46:0b:6b:fc:3f:b1:67:
6f:b5:77:a5:e4:16:dd:35:8b:98:a0:87:94:bc:e1:
df:35:66:df:eb:d9:a9:98:8f:9c:0d:20:28:ce:5d:
b1:d3:15:9d:30:46:ab:07:1e:0d:b2:69:d2:7b:17:
b1:cd:99:c8:0d:be:01:4d:d5:f7:4d:6b:de:f4:ad:
3e:f7:59:b6:99:3f:83:6f:2e:64:33:04:9b:cc:44:
75:59:df:b4:ca:38:63:dd:33:75:78:d1:c2:c8:92:
64:02:bc:2c:22:ce:45:75:e4:ae:1f:e2:01:11:d1:
ee:5f:c5:d9:a4:41:04:f5:94:d4:3a:18:3d:32:cd:
6b:b1:08:04:9e:9d:cd:bf:62:a9:11:f3:57:18:8c:
cf:e5:c8:28:30:ec:33:ec:60:ae:d7:b6:66:fa:d7:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:71:C9:9A:B4:59:34:DE:82:24:CA:52:A8:99:FE:5E:23:15:00
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:70:d0:50:ce:ac:2f:07:68:7c:5d:51:4f:6f:19:e4:3d:29:
04:25:21:bf:2a:96:70:fc:04:0f:9f:9d:31:38:81:b3:15:d9:
9c:7b:f2:cf:c1:0a:48:61:e9:0a:b0:42:1e:67:12:85:30:7a:
e7:92:d3:98:98:c8:50:0e:52:9d:bc:f7:20:a2:5a:47:6f:4e:
e3:0d:f4:3a:71:fc:b2:a1:72:93:fa:65:27:ea:42:1e:09:82:
b7:44:e6:bd:42:aa:a3:63:02:10:f9:18:81:b7:9c:84:fa:82:
2e:71:5d:aa:60:5c:a9:71:d3:61:a3:c3:8b:db:51:95:d6:60:
6a:a0:57:67:7a:3f:42:ba:b9:36:c2:6d:88:fe:31:79:57:f7:
f6:36:f6:db:ec:80:df:3e:be:bc:9b:a9:88:9b:3b:e7:a0:8e:
1d:5d:d0:55:0e:fd:3d:26:95:1e:fc:46:36:6b:c3:54:75:96:
1b:14:e9:cf:30:45:17:3f:ba:2b:77:14:5d:3c:95:a9:d2:cf:
33:48:d2:e6:c2:d7:14:ed:fe:09:aa:2d:f3:08:04:42:40:14:
57:20:b0:ee:73:26:88:4d:4a:b7:3d:57:48:ae:58:a2:a3:1a:
66:33:3e:1a:85:cb:b9:42:4e:23:01:29:63:89:d3:50:4e:ea:
80:7b:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:36:27 2025 by rpki-client