Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: EyJTy6wxW/Fx6LGEsa71wKXCJzBTEU75+9REyuB2pJk=
Subject key identifier: 8D:65:BC:7C:5C:6C:65:15:BF:77:BF:96:0F:20:80:9A:56:51:0B:65
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 0196C64C5DCC7C01D965EF3201E5729CB207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 21:00:15 +0000
Manifest this update: Mon 12 May 2025 21:00:15 +0000
Manifest next update: Tue 13 May 2025 21:00:15 +0000
Files and hashes: 1: Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa (hash: evDadyMTuwtAOSC/b6PGvpRRvlRN1DP+6W56r0BhqXQ=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: +onqvA9cxKXwXHRBPBRgCdz3LCocJXiivUttGa+Rbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:5d:cc:7c:01:d9:65:ef:32:01:e5:72:9c:b2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: May 12 21:00:15 2025 GMT
Not After : May 13 21:00:15 2025 GMT
Subject: CN=8d65bc7c5c6c6515bf77bf960f20809a56510b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:0b:f6:ab:50:0a:7c:cb:69:00:36:02:5e:
c0:c2:c3:f7:2e:68:b1:4f:e5:69:7d:dc:2b:a9:ca:
8a:9d:d5:2d:ed:ab:a0:f2:08:b0:8f:62:55:b8:90:
d8:3d:9c:b9:47:0b:4e:a8:e8:91:63:0d:75:16:12:
f2:5e:89:26:03:a1:50:f4:48:5f:c3:7f:58:02:ed:
59:a3:a3:46:8d:7c:30:c9:38:35:c3:53:cb:5f:1a:
1d:f5:ad:09:bb:5b:4d:2a:47:b7:11:23:68:79:8d:
ba:52:58:0a:80:9a:1d:1d:08:74:fa:df:65:13:e8:
46:d4:67:a0:d6:d0:3b:cc:76:d8:ef:68:60:53:56:
2d:5d:f3:e6:82:43:c2:d9:f2:ea:95:81:ca:17:f8:
32:22:f0:40:28:5c:1a:47:f7:92:fb:19:81:85:9f:
49:f0:ab:f7:72:1c:c3:ab:6c:9a:b4:0d:70:81:c7:
2e:46:4b:e3:4c:4e:3a:3e:0f:59:3b:20:5c:9c:57:
b7:33:74:1b:23:0f:e5:7b:c9:e0:bd:95:d7:59:b6:
f0:8b:7f:0e:06:b5:f2:8d:9b:38:72:cf:4c:b4:15:
1d:eb:9d:04:05:86:a6:39:4a:88:f4:f6:ad:23:0e:
c8:6f:1a:df:08:11:76:5e:90:54:29:5b:0a:9d:93:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:65:BC:7C:5C:6C:65:15:BF:77:BF:96:0F:20:80:9A:56:51:0B:65
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b6:14:15:e6:03:db:46:97:bd:8f:77:8a:aa:da:5d:56:a8:
f3:e6:a7:9c:81:72:83:e6:ae:c4:7f:c3:23:a7:34:ec:05:3f:
ee:83:a4:65:fa:4d:26:fd:a6:fa:c3:1d:92:f7:a7:b0:09:8d:
55:eb:68:3b:e7:0d:43:ad:f0:ef:eb:81:fb:a2:5c:e8:b7:98:
9a:66:7c:d4:3c:29:78:da:0c:7f:85:da:b9:2e:d7:65:ef:a2:
9c:76:b5:0c:d0:c8:1b:3c:b5:74:48:c7:14:81:77:fb:b0:ef:
ff:93:bc:fe:28:d6:29:db:72:33:15:09:bc:be:25:93:76:45:
8d:95:a4:40:db:73:a1:f6:28:51:61:c4:d6:92:5a:74:69:6b:
f2:0a:27:19:66:95:72:98:b4:7c:e2:3e:c5:cb:c5:c5:ea:98:
37:de:e2:48:31:8e:73:d9:19:44:60:8a:02:90:21:3c:85:59:
af:80:49:98:65:1a:53:4e:24:88:f0:6b:f4:cd:1f:a9:18:99:
dd:bb:d0:2f:be:f6:82:cb:f9:5f:44:3b:3e:01:24:c5:eb:a7:
d5:43:30:3b:ab:c8:52:00:b6:5b:08:8d:2b:fb:23:bb:66:3c:
98:0b:69:bc:97:14:dc:79:e2:00:53:9d:2f:c8:27:dc:41:09:
11:b1:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:48:13 2025 by rpki-client