Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier: AbZtGR97Sthh9AM6qs3znqaYSvzcEj9BM3Yzm3/caTw=
Subject key identifier: CF:92:24:E7:F8:55:E2:61:F1:D4:B8:30:7F:61:FE:9A:FE:26:5E:C1
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 0196C539F5E0422FC1D3A9EB1D1082D46B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 16:00:32 +0000
Manifest this update: Mon 12 May 2025 16:00:32 +0000
Manifest next update: Tue 13 May 2025 16:00:32 +0000
Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: wpzRpOzXM+sTdM4ZM3FvMa0Nh9z2Al7coAKqggpf1zw=)
2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:f5:e0:42:2f:c1:d3:a9:eb:1d:10:82:d4:6b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: May 12 16:00:32 2025 GMT
Not After : May 13 16:00:32 2025 GMT
Subject: CN=cf9224e7f855e261f1d4b8307f61fe9afe265ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:91:14:6b:be:3c:d0:75:dc:d4:9a:aa:dc:
e9:81:6a:c9:bd:ec:4e:1d:89:3c:26:9d:81:b8:8e:
37:1a:96:d9:88:14:3b:6b:5d:c0:23:f0:bd:17:eb:
6a:0a:74:c3:63:ef:b4:f4:45:6d:a5:1b:d7:9a:bc:
a1:43:1e:3b:39:2e:fc:0f:cc:c8:17:ef:c3:fe:02:
28:69:5f:2c:65:dd:f3:9f:29:7a:03:88:ce:91:44:
42:ce:bc:00:28:6f:b3:b2:5b:b6:2c:b8:15:17:e5:
1c:a0:11:78:1a:24:61:55:f7:ca:1d:ea:1a:19:d4:
6d:b0:13:8f:ae:7b:d2:01:4a:fb:b7:e7:07:3b:b7:
77:96:39:19:6a:13:85:1f:5b:a9:d6:7a:fc:82:48:
8c:35:53:2d:69:31:b7:4f:ae:7e:9c:6c:c8:d0:1d:
c6:db:22:29:3d:31:f9:15:85:3f:dc:35:5a:49:6e:
3f:f4:6f:a1:09:49:14:9a:6c:a1:5c:6c:c9:7e:73:
fa:43:89:97:f6:55:30:03:82:38:89:18:eb:80:b9:
24:ae:6d:fb:81:39:ef:23:cd:fe:8a:5c:7c:e4:0a:
90:86:9f:b6:07:63:72:9f:97:80:23:52:7e:e3:71:
ef:3b:b9:a7:20:08:6a:83:aa:6a:3d:e4:94:fc:55:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:92:24:E7:F8:55:E2:61:F1:D4:B8:30:7F:61:FE:9A:FE:26:5E:C1
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:01:77:50:d3:01:43:f2:39:c8:11:76:d2:a0:09:0e:65:08:
05:bb:96:67:ac:95:39:c3:26:d9:81:74:e5:5e:34:d9:47:1e:
7c:8e:70:fa:7f:78:5e:e2:b4:9c:29:78:89:68:44:a6:c8:95:
22:e5:3c:77:c0:26:22:76:f3:bd:4f:c4:65:2a:09:18:1c:45:
70:f7:be:dd:4f:e9:8b:48:84:34:95:d4:da:41:19:b5:35:79:
a8:84:63:d8:20:33:54:8b:72:6a:bf:c7:e6:3e:cd:66:c6:93:
4c:96:27:4a:00:4b:d5:b5:a7:c3:8a:bc:53:1a:85:17:8c:9f:
78:4f:e6:02:dc:48:4d:6d:96:8c:c2:a1:5a:db:95:1e:e7:f8:
9b:b1:dc:d7:0e:72:e8:a1:72:0b:d0:3e:ac:d4:ef:c9:68:a3:
cf:ef:b8:34:fa:f6:5b:06:02:9e:ee:b3:80:8c:43:70:35:5c:
4a:d8:42:80:62:0a:18:d9:c2:d4:87:43:46:d6:ec:cc:dd:09:
2b:ac:3f:81:99:16:d1:04:cb:5c:2a:af:dd:78:27:f8:88:f3:
0f:02:25:ab:6f:f5:f1:4d:ef:3b:b4:0b:6a:a9:ae:75:89:e6:
18:47:f3:97:a9:03:de:38:50:dd:25:0a:e0:74:de:53:0d:01:
6d:aa:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:09:36 2025 by rpki-client