Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: BWqYlOIFdecRn1r4tLqVlXARL5f92UwdGnVZrmDFZ0Y=
Subject key identifier: 93:DF:3D:D6:40:B6:21:94:89:D0:F2:24:55:42:2D:70:53:6D:7B:8B
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 01969E2C83B8FF67EFC77A9AB4A33E1EB862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 02:00:39 +0000
Manifest this update: Mon 05 May 2025 02:00:39 +0000
Manifest next update: Tue 06 May 2025 02:00:39 +0000
Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: MK583oV59vL51PZwIJusM1MdB2li63SstjhI2pHYwLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:83:b8:ff:67:ef:c7:7a:9a:b4:a3:3e:1e:b8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: May 5 02:00:39 2025 GMT
Not After : May 6 02:00:39 2025 GMT
Subject: CN=93df3dd640b6219489d0f22455422d70536d7b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:57:91:41:d8:74:9b:38:53:a3:88:b4:6a:
f6:ac:e9:11:da:73:56:51:e7:80:ca:dc:4f:ae:cd:
b5:2e:b7:91:87:ba:a9:df:c9:9a:9c:70:dc:22:cd:
c8:1d:57:f6:a1:9d:25:3f:bc:cd:71:f8:5d:c3:6f:
c3:89:7f:2f:1c:84:62:cc:56:65:dd:a4:33:c3:0a:
bc:e1:63:79:37:04:eb:43:f3:ca:a8:83:74:11:50:
46:46:2d:61:83:6c:6e:05:ce:45:94:11:f1:ce:1f:
37:67:03:05:ff:36:76:0e:13:e5:31:32:36:c0:80:
b4:26:df:1c:49:b7:65:78:a7:1a:b0:84:df:aa:7f:
b8:9c:be:13:7a:f9:64:3b:d1:41:37:61:79:fb:52:
3b:fa:f3:ba:af:ef:ea:6b:c3:e0:d6:31:94:34:9f:
be:b2:83:82:d1:56:49:d2:cd:72:f0:54:84:b1:87:
d7:5c:a8:d5:7c:af:37:1e:f7:95:75:3e:7f:27:1d:
ba:d9:33:af:d2:9f:12:19:ff:2e:d7:03:94:6b:09:
9c:0e:b5:73:d7:77:42:a1:3a:b7:ca:00:4c:35:93:
1d:04:08:25:69:50:1c:00:38:2b:b8:3b:41:57:08:
38:11:f5:2f:35:cb:c6:07:6d:74:fb:7b:96:b7:4c:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:3D:D6:40:B6:21:94:89:D0:F2:24:55:42:2D:70:53:6D:7B:8B
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d7:2e:c9:cf:00:09:a1:98:34:36:d4:09:3b:c4:82:4b:78:
7f:9a:b5:2e:1d:a7:cb:9e:ad:82:86:cb:a9:54:ec:38:a6:53:
c7:be:3c:1f:2c:71:33:0a:90:7e:38:d0:62:f7:e7:20:5d:05:
f4:23:af:97:5a:03:6e:7f:51:15:c9:da:4b:26:5b:2c:df:20:
b8:51:4f:cd:5a:7d:82:d0:13:83:89:10:65:37:ec:37:3b:f0:
88:74:ab:23:9c:4a:ec:6e:44:bc:9f:c6:5e:74:a9:fc:6c:38:
12:3a:33:9a:e2:5a:2b:1a:bf:9e:76:0d:66:9f:ef:0f:89:9b:
eb:b3:89:7d:38:a1:b3:71:bc:a7:a1:68:67:24:18:97:68:13:
e8:11:4e:6d:b5:8b:57:95:69:2e:b1:10:a1:c2:59:c0:c4:47:
0d:47:c6:61:49:da:99:2d:8f:40:28:12:cd:0c:4e:02:f8:e0:
2c:83:7b:41:5e:a3:cf:fe:d9:b8:81:b5:bb:dc:48:03:09:d2:
b6:6a:3b:1c:c7:51:12:a8:b2:fe:33:9f:2f:31:67:cb:ec:f4:
dd:5d:14:c5:88:0a:87:31:bf:ed:f3:70:24:ba:61:20:f2:ae:
60:45:21:59:8a:68:83:f0:78:54:a0:af:05:8a:2f:d6:a1:e3:
b5:49:4e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:38:48 2025 by rpki-client