Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier: 0H1T5lh5/MefMe2IROcE94agum3vYdGoEmuEcB/Y5rU=
Subject key identifier: CE:55:DD:F8:BD:2C:CF:FD:1A:8D:CF:69:CF:09:09:D0:96:BA:FE:C2
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 0196C795E79CDAFC790E7F08E0E499260230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number: 0F33
Signing time: Tue 13 May 2025 03:00:12 +0000
Manifest this update: Tue 13 May 2025 03:00:12 +0000
Manifest next update: Wed 14 May 2025 03:00:12 +0000
Files and hashes: 1: GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa (hash: X3L+IE/tHK5/79Ef7HYRs6p2vD8nOugSbhs0gMsz8zU=)
2: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: wXBRAMz0Eud6oDUa5duF1KUB5AfwulkYchissiD/bB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:95:e7:9c:da:fc:79:0e:7f:08:e0:e4:99:26:02:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: May 13 03:00:12 2025 GMT
Not After : May 14 03:00:12 2025 GMT
Subject: CN=ce55ddf8bd2ccffd1a8dcf69cf0909d096bafec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:88:31:94:49:d4:c3:d0:2b:5e:3e:aa:81:25:
d4:b7:44:d1:5c:a8:3d:c3:7c:d3:44:e6:2d:57:65:
c4:af:15:7e:e4:37:f0:15:db:b6:43:ed:ab:6b:78:
4e:5f:5a:b7:38:0f:47:4c:6b:17:46:92:1f:d3:4b:
9d:f9:e2:f5:ef:d8:a9:66:8a:ad:62:7c:f8:74:d9:
a4:d0:d9:6b:92:07:d5:cc:74:20:fa:ea:be:ce:04:
c6:c5:99:bc:7d:c8:fd:a8:cf:91:95:f8:dd:70:48:
e0:d4:3f:b0:53:a1:3f:fc:df:e0:cc:60:2b:e7:04:
f3:f3:8d:f0:fe:ad:52:d0:15:b1:e9:c0:09:62:ce:
e8:bb:39:03:d9:dd:fd:21:77:27:7a:e4:1e:e3:c3:
95:00:ec:0a:f0:38:b2:cb:33:2d:94:0b:08:ba:4c:
f7:a5:9f:71:7a:30:cd:2e:4d:ad:0b:6c:2f:a5:fd:
bd:ec:70:d8:a2:6a:51:52:dc:28:62:76:33:41:bb:
74:d7:97:e1:48:36:3c:f6:bc:a1:a9:c3:f3:13:47:
fa:42:fb:86:9d:71:3b:7f:95:0e:de:87:70:5e:60:
8d:5f:8b:3f:40:62:5d:6d:c2:84:a6:a8:d3:17:9f:
2e:f6:52:cf:ca:ae:bd:14:0c:7b:d3:26:65:33:09:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:55:DD:F8:BD:2C:CF:FD:1A:8D:CF:69:CF:09:09:D0:96:BA:FE:C2
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:af:fc:88:cd:05:9d:4a:27:5e:33:c2:ef:25:9c:9a:17:d3:
0c:74:9c:b6:b9:2d:85:c0:26:b4:a3:4f:13:33:2c:a0:94:ca:
c3:0f:b9:4a:0f:e5:01:fe:c4:57:54:35:a1:1d:14:cf:46:39:
4b:8e:b5:dc:a3:6b:ef:97:45:e1:79:83:eb:87:d1:88:92:bf:
a3:46:05:23:79:a0:9e:71:9f:d2:b5:c7:7f:38:1b:6d:e2:d2:
49:fd:42:d2:6c:4a:6a:15:dc:fb:e6:08:35:04:40:5c:7c:4c:
ae:53:9f:44:3e:48:eb:4f:da:45:90:46:fd:79:5a:a3:75:0e:
b2:62:71:41:c6:8b:17:98:1c:96:c6:69:dc:50:59:bb:33:56:
8d:0e:39:e5:53:09:ce:66:2e:7f:bd:6d:a7:d0:8d:a2:44:40:
84:54:09:f8:6d:35:6c:16:ed:a1:5b:9e:41:7c:ac:fd:6e:51:
53:72:1d:d2:42:91:35:11:f9:f9:b3:3d:b7:21:4f:c5:ee:55:
b7:0f:ee:5f:0b:2a:45:5e:3b:dd:e8:59:17:7b:58:85:76:fd:
77:b7:6b:7a:48:ee:76:b6:a5:78:c3:df:a0:5a:cc:f5:d0:3a:
56:aa:da:c2:5f:4f:a4:3d:4d:f1:ad:b4:ae:62:77:09:58:d7:
f0:13:5e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:25:21 2025 by rpki-client