Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: 0bv/jhXXo1OwTRIKllsQ6ueevGpIoKwIsIAtiJpbcio=
Subject key identifier: 2E:29:07:C5:C0:7E:E7:08:4A:37:A1:41:46:5E:50:52:46:A1:E3:7B
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 0196C64C65382FBB83C91E2761DD34DC1313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 0E
Signing time: Mon 12 May 2025 21:00:17 +0000
Manifest this update: Mon 12 May 2025 21:00:17 +0000
Manifest next update: Tue 13 May 2025 21:00:17 +0000
Files and hashes: 1: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (hash: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=)
2: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: HWSVxrhndk/qck9IHZ11j0z+TLxTGWYb15p1tFUR/zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:65:38:2f:bb:83:c9:1e:27:61:dd:34:dc:13:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: May 12 21:00:17 2025 GMT
Not After : May 13 21:00:17 2025 GMT
Subject: CN=2e2907c5c07ee7084a37a141465e505246a1e37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:11:a2:bc:04:be:36:4d:a6:8c:35:fd:ae:c8:
5f:41:57:26:be:50:56:9c:0d:f7:02:8c:08:ae:eb:
ed:57:c8:8c:92:aa:ea:c9:d8:9f:dd:91:70:7a:55:
0a:f9:80:4f:40:c1:40:3e:80:a4:76:4f:00:01:de:
c8:b3:e6:8c:ba:14:72:73:76:dd:8e:f0:62:c8:09:
3f:70:87:5e:c9:a6:50:71:78:c6:14:76:74:68:9b:
57:0e:fe:42:fe:bf:83:df:01:80:c8:b8:9c:39:08:
6c:54:12:a3:c6:2e:cf:1c:f9:78:78:5a:41:31:2d:
99:16:53:c5:aa:f5:b9:24:1e:35:46:19:c9:a2:04:
75:2e:67:18:12:b0:4f:58:65:96:87:59:4a:f2:33:
a2:b2:ea:30:18:13:25:e5:b1:15:fc:c2:33:ad:19:
0f:82:e3:1f:a8:67:72:7e:b8:a5:70:66:cf:fe:8f:
fb:6d:be:9d:f2:4d:70:72:e4:ff:e5:f9:57:37:e5:
a2:74:81:2f:a9:91:9e:2d:86:8d:86:90:21:1d:52:
34:01:45:b8:b0:9a:ae:30:e3:e4:a1:76:cb:62:b2:
cd:1a:40:32:8f:f4:a7:23:70:a2:2d:82:48:50:42:
de:59:e4:70:8e:9d:7b:6d:7f:cb:51:3a:f2:82:21:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:29:07:C5:C0:7E:E7:08:4A:37:A1:41:46:5E:50:52:46:A1:E3:7B
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:33:85:a2:07:4b:22:2f:44:53:59:bc:09:c7:cb:f9:1d:12:
1d:b2:b7:db:13:87:bb:7d:f5:cf:95:7c:41:cf:f7:70:5d:92:
20:32:bb:b3:28:74:51:a0:4a:78:a4:d4:c9:57:33:11:0d:b3:
b5:38:08:22:a3:8c:10:bc:60:eb:b7:aa:5d:41:9a:9c:6f:be:
e4:af:ef:97:62:df:7e:a2:2b:1a:d8:6c:ec:65:78:d5:a9:01:
4d:d0:d4:ba:87:37:8d:08:30:ec:91:93:52:37:44:51:a7:3c:
0e:6c:1b:4c:c0:8b:67:48:26:bc:da:1b:d9:f5:bd:85:ab:d1:
0e:30:0e:f0:ad:0d:de:40:05:35:f5:25:a8:7c:6c:33:e9:b6:
03:5a:4d:cb:e4:13:36:9c:ee:d5:52:7d:d8:74:e0:98:73:17:
e9:67:5c:df:83:02:a2:d7:88:c8:86:3f:69:47:e8:28:f4:d0:
6f:8b:d1:0c:90:fe:e2:75:0b:46:e1:a6:02:ab:f6:28:38:ad:
c9:70:b3:72:09:53:c1:26:2f:cf:eb:fd:5d:27:62:9f:3d:5f:
27:4f:24:e8:0d:ba:49:42:a5:4e:46:0f:6f:37:8c:44:29:a9:
82:1a:73:ba:8a:96:1c:f3:53:4a:56:a0:b1:ef:9b:a7:cb:ef:
d8:ec:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:00:33 2025 by rpki-client