Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: BdRHklM8r6xw2gk5sepTU6aNJBiQot8Umz9nObHeXSY=
Subject key identifier: 43:EE:69:B5:99:DD:F1:42:28:90:16:5F:7B:29:6F:16:41:6A:CB:7B
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 0196C9174AA6B4BEDFB26FCD0009D3A3DB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 1390
Signing time: Tue 13 May 2025 10:01:08 +0000
Manifest this update: Tue 13 May 2025 10:01:08 +0000
Manifest next update: Wed 14 May 2025 10:01:08 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: 3yj6lhwoMmSkpPEvU8XahoqNiPXivs2C+Qp1gOI6YtY=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:4a:a6:b4:be:df:b2:6f:cd:00:09:d3:a3:db:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: May 13 10:01:08 2025 GMT
Not After : May 14 10:01:08 2025 GMT
Subject: CN=43ee69b599ddf1422890165f7b296f16416acb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:34:32:2b:3e:83:26:d9:35:d3:9c:25:91:
b0:b0:a5:5f:52:6c:5d:48:8d:a0:3e:74:d8:ef:cf:
ce:ec:c2:18:91:4e:d3:be:5b:6c:c8:34:37:cd:7d:
76:ee:ef:49:57:bf:59:06:9e:11:09:41:e5:0c:08:
77:dd:4a:9a:fb:7e:9e:f1:65:c8:7e:44:b2:5e:71:
73:00:a8:1c:19:2f:32:c4:75:d4:54:77:0e:6a:23:
e3:05:04:86:73:9b:f7:f4:db:88:7e:5b:c1:02:ef:
74:35:a5:76:0a:28:04:b1:f3:a4:90:55:09:56:66:
83:78:9f:c8:26:97:76:cb:13:1b:14:96:a4:4e:8d:
7c:9f:6d:0b:d8:a0:ac:4e:34:a5:dd:7a:ef:8d:54:
e4:8a:35:17:70:66:40:48:74:e7:79:6e:e4:df:b1:
0b:06:e8:4b:74:0f:e1:db:50:7d:41:2d:4e:7a:81:
2d:38:71:4f:14:28:83:35:3b:0b:fb:de:b5:bf:c3:
bd:4d:49:86:e0:8d:b8:32:10:17:f0:a1:c2:c0:19:
db:63:80:51:f0:32:44:82:e0:c5:2c:bb:75:8d:85:
5a:6a:36:0a:19:7c:ba:78:27:d9:5a:ae:21:1f:d1:
73:9d:33:fc:b5:22:6a:a7:74:23:56:e9:1e:56:ad:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:69:B5:99:DD:F1:42:28:90:16:5F:7B:29:6F:16:41:6A:CB:7B
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d1:19:59:fe:fb:32:6c:7b:f9:a8:63:f6:59:15:fc:ea:b8:
45:40:87:e4:0f:f0:0b:ae:83:00:b0:51:16:a9:b0:50:aa:72:
64:f3:2c:cb:1f:47:d6:98:90:14:68:dc:fc:ae:96:a5:6b:b2:
6e:d6:2c:a1:9e:58:29:e8:b5:b1:96:3b:0b:5e:fe:f5:d5:bf:
7f:1c:5a:0c:60:2e:b2:f3:f7:70:d4:f1:00:63:75:02:bd:72:
2f:4f:f1:ed:08:97:57:5b:e8:e5:16:13:7f:13:1d:9d:19:46:
b4:2c:74:c6:02:f4:00:82:83:ea:fe:a8:79:18:bb:fe:7d:98:
a1:ee:9a:e0:5f:d1:15:15:d9:e9:6f:36:6e:d3:8e:e9:aa:50:
a4:23:d9:92:77:94:03:a8:de:50:d3:36:7a:f4:73:d2:34:4b:
14:37:17:95:fb:85:6b:ff:f9:8c:85:58:05:68:db:41:bc:c9:
41:71:ff:0d:16:66:0b:ac:98:34:3b:04:07:95:2f:d8:20:36:
2f:8b:b7:39:fa:07:2f:2d:ec:2d:43:ab:16:45:7a:da:02:00:
6c:92:02:42:f4:88:e3:46:38:87:0a:29:ae:60:a8:53:26:6a:
4d:a7:7d:a9:1a:0b:04:44:20:26:1b:b2:23:62:3d:d1:a9:53:
c8:6d:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:37:26 2025 by rpki-client