Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: 8+RST4GzuUuUJbdCnAga/FJCk2bj/gD9rv1ACKZiyzU=
Subject key identifier: D1:C1:99:56:D5:5B:CB:17:9D:47:38:77:CE:44:8F:E2:B3:85:0A:CA
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 0196C3F0A01C800F097BB86EEB1EAAEE0A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 153C
Signing time: Mon 12 May 2025 10:00:48 +0000
Manifest this update: Mon 12 May 2025 10:00:48 +0000
Manifest next update: Tue 13 May 2025 10:00:48 +0000
Files and hashes: 1: 9tr6yx1y8_YEiVByZ-MjQoIJAHM.roa (hash: jRgj+xVS51Pyi7Ww5Lf3Hkb3VrgrulAoFq5wFotKWJs=)
2: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: btA7NdMaC7o4wLjyyd1z0HvORzXbC1t89uwIEkX2+Js=)
3: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
4: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:a0:1c:80:0f:09:7b:b8:6e:eb:1e:aa:ee:0a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: May 12 10:00:48 2025 GMT
Not After : May 13 10:00:48 2025 GMT
Subject: CN=d1c19956d55bcb179d473877ce448fe2b3850aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:e6:af:93:4b:77:e6:11:f4:3c:e0:5d:8c:
fd:5e:1b:e9:df:6b:e1:f2:31:56:2f:09:7d:7e:bc:
5c:67:a3:77:17:df:da:0a:68:6b:e6:64:cd:81:31:
18:89:28:11:e4:ce:66:22:2c:0f:0b:5c:69:8c:d0:
ac:71:3b:0b:30:00:05:1c:b2:d1:cb:33:df:7a:d3:
5a:32:fb:ab:81:e9:ef:b8:bc:a9:56:2c:fc:39:b6:
73:2a:37:16:e7:a7:a4:6a:ff:97:1c:89:48:b4:a1:
43:19:cb:53:39:7f:36:9d:cd:a2:85:1f:13:eb:16:
d7:41:45:14:7b:46:71:06:c6:eb:10:6f:aa:05:35:
69:e3:ce:0d:0b:31:59:a2:37:82:ca:26:b8:0f:ee:
98:4f:46:f2:a2:30:f7:2d:8a:e1:4a:b4:27:01:12:
ca:8d:d2:f6:44:64:30:74:f6:4e:87:19:3e:6e:63:
e3:f4:95:e8:e6:41:a2:5b:23:f7:0c:46:83:04:52:
fe:4c:8b:fd:8c:0c:ad:7f:ae:a0:cd:f8:cf:c8:bf:
01:87:13:2d:18:4e:6c:32:85:6d:1b:da:b8:3c:25:
fd:e5:92:fd:ed:70:7c:db:b9:c1:4f:5d:4e:53:74:
e5:12:95:92:ed:44:81:c1:74:b7:d3:e7:31:cb:9d:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C1:99:56:D5:5B:CB:17:9D:47:38:77:CE:44:8F:E2:B3:85:0A:CA
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e3:d3:4e:fb:8a:c3:20:17:f1:df:58:75:ed:ee:33:cd:eb:
c9:b9:82:f5:c5:e7:46:fc:24:03:b8:a3:06:29:a6:ea:8f:17:
cd:b4:76:4b:20:07:09:88:84:9b:47:d3:da:36:05:9e:8e:3e:
c9:20:57:b0:b0:c0:58:ef:7c:bf:75:e6:16:50:3d:c0:d6:23:
7d:c2:1d:53:87:5a:29:e7:cd:ce:f4:44:19:2c:71:c0:9f:0b:
28:f5:e5:c0:6b:3c:7f:83:62:8d:f3:79:f1:d5:8b:0b:43:09:
06:57:11:5e:61:81:19:24:a8:4b:15:2c:ea:ff:e2:3a:06:b9:
e9:3b:d8:66:2d:11:19:f8:ea:a9:d9:de:48:2e:98:81:a6:23:
f7:6d:62:b8:e1:14:5b:d4:bd:3e:51:b0:72:03:3c:f6:a5:aa:
65:68:9c:19:7a:a6:7e:86:52:11:3b:6b:c5:34:f4:eb:6a:d6:
27:f1:e9:4e:05:c4:d7:f6:05:0f:6e:f5:d8:e4:ca:70:3a:ed:
fd:07:ca:f3:4e:10:70:5f:4b:e5:7c:68:11:b4:e6:e6:30:bb:
8d:35:fd:2d:d6:da:57:77:94:29:77:09:d5:23:6f:a3:35:85:
76:9a:14:c8:39:41:42:e1:d3:b7:da:d8:9a:4e:9c:83:26:6f:
30:65:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:18:00 2025 by rpki-client