Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
File: TlyvXlSV9UsDnx0PJHERJGfJeRw.mft (raw, json)
Hash identifier: 6RIlgBqxvVXFdoALpOFWKF/VGPD290mietg7Xwa7w1w=
Subject key identifier: 4A:46:33:76:B5:F0:FE:D3:31:B4:C1:E0:5D:61:A5:02:34:5B:47:36
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Certificate issuer: /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial: 0196BF00B3A89292B89D010FEA2989B78C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 11:00:16 +0000
Manifest this update: Sun 11 May 2025 11:00:16 +0000
Manifest next update: Mon 12 May 2025 11:00:16 +0000
Files and hashes: 1: Sjk-hMVz5Yq15653m82LHzN2q2c.roa (hash: v2IafRkq9Sg922Tj4NY8dbGZtPOD35/xpm6wAYKPODI=)
2: TlyvXlSV9UsDnx0PJHERJGfJeRw.crl (hash: g/vhsydBxK+LPhAigtJlO0OzDugR4Mni15ohr3TP1nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:b3:a8:92:92:b8:9d:01:0f:ea:29:89:b7:8c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Validity
Not Before: May 11 11:00:16 2025 GMT
Not After : May 12 11:00:16 2025 GMT
Subject: CN=4a463376b5f0fed331b4c1e05d61a502345b4736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:5a:9f:95:78:db:56:c7:a5:a1:03:60:40:
2d:3a:38:12:2b:9f:71:6a:22:37:72:1f:e0:38:00:
30:72:d3:fd:2d:33:ab:6c:c9:91:be:dc:f2:36:be:
2c:fc:38:12:29:76:2a:1a:eb:c2:75:c5:19:01:66:
1d:15:c4:33:ec:25:32:e4:3d:87:d5:c2:47:aa:14:
c2:ba:32:64:52:81:63:66:e1:98:3a:a4:e0:02:c5:
93:17:ed:94:35:d4:d5:55:61:37:54:83:0e:b2:fd:
ff:57:ec:6b:64:ea:50:a2:c9:3c:fe:ff:5e:8a:86:
69:3f:bc:96:e0:8e:5e:ae:a5:58:14:63:2b:47:49:
08:b2:40:f7:24:45:d9:0e:29:9b:aa:2f:89:d4:82:
26:c6:c3:1b:65:0e:f9:d8:c6:f4:49:23:c5:13:3f:
ae:59:b5:1b:c6:15:71:59:46:75:ca:36:5b:4c:6d:
d7:cd:d6:41:02:d2:86:bc:9a:74:08:70:a2:e2:85:
ab:8f:79:22:87:ef:7b:d1:d9:0e:d8:bc:f8:08:f5:
f6:57:eb:a7:14:2a:1d:89:e3:49:63:25:06:b2:35:
56:df:44:09:4f:0c:36:0b:94:78:74:06:f7:57:bb:
35:da:4d:f8:cc:b8:a1:09:60:85:3c:1c:42:4d:29:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:46:33:76:B5:F0:FE:D3:31:B4:C1:E0:5D:61:A5:02:34:5B:47:36
X509v3 Authority Key Identifier:
keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ac:7e:4d:03:3b:fc:41:a0:91:b1:bf:05:95:d2:2c:bd:3c:
6a:09:49:69:8e:20:76:a2:50:4b:cd:45:d8:1f:11:2d:65:74:
30:3b:09:bf:4f:c6:ce:c2:2b:01:d0:47:a6:08:f0:b2:dd:de:
46:f9:42:e9:b7:eb:aa:9c:e7:3c:bf:ea:8d:16:0c:89:49:f3:
57:12:4b:2d:13:0a:f6:cd:5d:cd:07:7b:33:3d:70:60:d6:97:
4f:89:74:1d:d9:48:1f:94:6c:f4:a3:3b:52:00:d7:36:8c:39:
59:56:e7:83:71:42:2b:05:99:7e:fe:f7:5c:56:4f:c4:bf:db:
28:23:dd:35:78:25:73:41:d6:cc:be:3c:6d:09:e9:2e:92:f7:
48:67:8e:73:8b:d0:3a:52:8f:3a:29:1b:25:2c:04:aa:41:ed:
6b:94:5f:4b:c1:37:7c:96:07:9d:00:80:10:97:b8:29:21:7c:
31:24:e3:39:b1:3e:ae:28:b1:16:86:56:d6:aa:41:ad:1d:13:
55:44:35:c7:ce:31:03:5c:3f:5e:28:6b:03:ff:e4:2f:7a:02:
34:59:30:35:9e:13:40:1a:a4:87:39:1f:a9:a3:f8:02:59:1a:
58:6d:ad:d2:26:5c:19:27:1a:bc:0f:56:6f:7a:9b:be:1c:bc:
f2:dc:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:33:47 2025 by rpki-client