Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: g9V8w2gA+lWNGX8p9zFcw3P7Khgc5Npyx8AKplOfjDw=
Subject key identifier: F3:04:31:7A:ED:8F:FA:C8:4E:E5:38:A7:70:01:90:93:D6:25:A5:73
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 0196A8AFF01EF85D375DA483396C4DAD5FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0C1E
Signing time: Wed 07 May 2025 03:00:24 +0000
Manifest this update: Wed 07 May 2025 03:00:24 +0000
Manifest next update: Thu 08 May 2025 03:00:24 +0000
Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: Qw3Hj5tOu4+aPxPgIXBK3eJqpVOR85BYp1pPp4YE0nE=)
2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:af:f0:1e:f8:5d:37:5d:a4:83:39:6c:4d:ad:5f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: May 7 03:00:24 2025 GMT
Not After : May 8 03:00:24 2025 GMT
Subject: CN=f304317aed8ffac84ee538a770019093d625a573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:2d:32:57:a4:b0:42:6c:8b:88:d8:46:85:
e4:03:82:da:b6:d3:39:3d:11:51:4a:b0:e9:37:ea:
f9:65:70:2c:b3:a5:91:c4:27:5f:ff:85:56:78:1a:
1b:15:1d:d9:56:2a:47:25:b4:45:d6:20:16:bb:0a:
c5:2b:20:3c:78:dc:f0:29:5d:75:5d:87:66:e4:16:
0c:a5:bc:3f:99:f0:40:7d:8f:b9:63:61:30:da:f3:
a5:e9:fa:b3:c3:41:ee:bc:79:5c:dd:3e:01:db:9c:
3d:f5:14:51:c7:64:8f:1f:18:3f:95:a7:9d:f3:7d:
ce:1f:be:de:4e:7f:b1:f4:8e:91:4c:32:13:23:a5:
06:05:af:54:aa:16:28:c7:22:88:7c:ba:c1:62:5a:
fe:ce:26:9b:1c:90:5a:e0:68:2b:5c:0e:17:ba:dc:
84:2b:ac:a8:ff:df:60:be:b4:47:98:fd:da:d3:b9:
10:21:59:76:42:61:3c:59:40:ce:f0:34:e3:ba:fd:
12:51:ee:79:81:da:43:db:c2:78:06:9a:9c:0a:56:
a6:5e:7e:3e:37:e5:56:13:58:f8:a9:7a:a0:e9:43:
b0:90:61:82:eb:f0:f8:3b:36:ac:a5:b4:84:70:ce:
c8:70:2e:0e:ee:b2:d7:e4:77:2c:b0:56:83:fe:1f:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:31:7A:ED:8F:FA:C8:4E:E5:38:A7:70:01:90:93:D6:25:A5:73
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:91:0b:2c:64:f0:f7:e6:d4:85:ab:85:a7:d3:18:49:a5:20:
c9:4f:86:e9:db:5f:f4:9b:ff:34:30:73:b7:c3:dc:1f:03:3f:
a1:75:6b:36:67:79:52:f4:79:9f:58:1f:a6:28:48:fe:45:48:
dd:7e:bc:86:9c:c6:a3:98:3b:ba:eb:ee:a6:5f:b4:fd:77:f3:
d0:13:1c:c3:ef:cb:8c:4b:d3:10:d1:64:07:6c:32:34:ab:3f:
d8:c2:b1:46:de:59:6d:c7:58:9b:f6:c4:7b:0a:86:74:30:86:
9e:05:f5:c6:ed:a6:98:cf:18:d5:6b:e8:7b:6f:d4:e8:c0:d3:
54:14:4e:e1:4b:7e:00:37:c7:89:2f:92:fa:9f:5c:e6:dc:9d:
2c:dc:79:cd:1c:67:bf:f7:5b:17:ec:58:28:53:32:94:64:9c:
b3:23:7c:6e:91:13:a7:5e:fa:b1:ba:9e:69:b3:7d:21:ab:5f:
08:6b:0d:1e:cf:87:e8:a2:51:bd:8b:d3:c2:bd:43:21:25:00:
25:fd:8d:8b:a6:ac:90:0a:8e:15:54:76:9a:6f:39:67:94:57:
dc:0e:5d:08:66:94:a0:cf:a7:34:23:53:5e:f7:8f:dc:2d:20:
9b:a9:7d:38:c4:9f:cf:c0:4f:0b:c7:5e:81:06:3b:b1:53:1a:
8a:b5:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:06:46 2025 by rpki-client