Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File: TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier: EOPiD/Wp5ftGqo/A4HJHvLFsEYxsLit4DkXYL6Ozxak=
Subject key identifier: 3B:27:7B:7D:79:62:0B:B6:D0:04:E7:EA:30:B4:1E:42:8D:27:13:3A
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial: 01969E638F426D58F77AC8E75305D936912E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number: 0207
Signing time: Mon 05 May 2025 03:00:46 +0000
Manifest this update: Mon 05 May 2025 03:00:46 +0000
Manifest next update: Tue 06 May 2025 03:00:46 +0000
Files and hashes: 1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: +lEd/An9wcO7jcBTCk7c1BWB776iq8ne0OfGGNO7f7k=)
2: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (hash: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:8f:42:6d:58:f7:7a:c8:e7:53:05:d9:36:91:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Validity
Not Before: May 5 03:00:46 2025 GMT
Not After : May 6 03:00:46 2025 GMT
Subject: CN=3b277b7d79620bb6d004e7ea30b41e428d27133a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:45:09:45:92:9f:43:47:90:92:52:70:5d:
3a:99:48:8c:e8:cb:9b:1b:64:f1:31:e0:ee:53:9e:
1d:8e:39:0c:3e:18:b2:59:0a:0b:33:f2:53:f9:85:
fe:c4:19:14:82:5c:2b:5b:0c:4f:92:f8:c9:64:68:
dd:f5:5c:9c:7b:c6:d2:cd:ba:83:36:25:46:cb:48:
ad:8e:95:ab:23:3c:6b:e4:fa:0e:72:06:af:9a:f4:
98:dc:ee:b2:3f:ec:6e:4d:29:98:d3:19:68:8f:1f:
be:f2:fc:7d:6d:2d:31:e4:31:49:d9:2b:8b:f5:64:
4e:23:9c:e9:d2:9e:3b:15:2a:93:e0:8f:01:da:33:
0a:4d:d9:ca:1a:26:bf:af:8e:58:9a:c4:4d:f6:31:
1c:c2:3c:6a:db:d3:bd:a5:f9:dc:17:a4:de:99:25:
c8:ac:59:5d:27:46:b0:f4:53:83:fc:99:3d:f9:16:
c8:91:9e:98:5c:19:9c:4c:b9:a7:1e:4c:c8:51:d7:
ae:fb:77:57:8f:c6:a8:e9:d9:44:b6:af:a3:e3:a6:
2f:a2:a3:9a:6d:f0:16:77:f4:f8:df:71:9b:aa:dd:
74:f4:05:06:fe:5c:b1:6b:78:e8:6c:4a:eb:aa:95:
46:fe:b9:bb:13:fe:30:0f:a0:7b:e6:39:b4:af:50:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:27:7B:7D:79:62:0B:B6:D0:04:E7:EA:30:B4:1E:42:8D:27:13:3A
X509v3 Authority Key Identifier:
keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cb:c7:a5:68:4d:c0:c3:3e:c5:e5:8e:00:80:94:99:17:c5:
d0:96:bc:14:a4:c5:27:f4:55:ea:b1:0b:73:fe:3d:69:d0:48:
33:e6:09:93:e3:f0:6c:44:e4:39:c7:ab:73:4f:77:e6:22:25:
e2:60:0e:80:a3:89:73:8e:a3:9d:1e:41:c9:bb:53:9b:cf:56:
93:d4:74:8d:02:2f:06:e3:b2:06:07:21:68:6a:76:e6:96:4b:
3d:f0:7e:f0:4c:b9:a8:07:1b:ca:0e:82:6f:83:5a:7e:75:96:
4e:85:7b:3c:eb:b6:65:94:d0:85:71:72:17:ec:a5:18:6b:d7:
b1:d3:23:71:1a:2f:3b:68:41:23:4d:fb:9a:dc:b7:f7:3b:c7:
2c:22:55:c6:27:23:55:6d:0b:c3:bb:96:7a:33:86:8e:8f:9a:
08:e7:99:cb:1e:5e:8e:18:4a:99:a8:10:92:11:6f:85:b4:87:
d3:d8:c8:61:84:0b:2a:0e:41:93:45:8d:8a:49:cf:c3:86:45:
98:9e:56:a3:46:7f:4a:93:90:f8:5b:e9:20:96:16:09:74:7c:
cb:33:ce:36:b4:e4:46:3c:06:f1:1f:0d:02:8d:4e:87:bd:25:
9f:c6:f1:74:96:90:68:a8:f3:f6:7b:54:6c:18:be:13:06:95:
2d:13:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:25:26 2025 by rpki-client