Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: SsesIBSNOQ3X2y/Y0ODzLv4TRvx9dG0KGRUdSSTGCeU=
Subject key identifier: 63:26:7A:F7:EF:75:B7:F3:BB:DB:B3:24:A9:79:DE:5C:0A:E0:A6:99
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 0196BF0128C3F8B336F95B9FF4FCF250DCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 11:00:46 +0000
Manifest this update: Sun 11 May 2025 11:00:46 +0000
Manifest next update: Mon 12 May 2025 11:00:46 +0000
Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: mW3GHAbcGCPyhsRz/16PZPaBuEqqcdNwQ7JzYD0ymWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:01:28:c3:f8:b3:36:f9:5b:9f:f4:fc:f2:50:dc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: May 11 11:00:46 2025 GMT
Not After : May 12 11:00:46 2025 GMT
Subject: CN=63267af7ef75b7f3bbdbb324a979de5c0ae0a699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:65:f4:17:2f:14:13:c9:9f:15:7a:df:64:
1e:15:7c:0a:66:a5:64:b3:8d:19:32:1f:c3:e0:0a:
2e:73:31:1d:b0:90:c4:c9:11:b4:1e:42:62:c2:34:
52:ef:a1:cf:5a:90:fd:5b:6f:38:5c:d4:e9:06:b6:
40:b9:df:5d:e7:2e:e6:31:7c:8a:50:4b:43:3e:ad:
6c:31:cb:17:80:80:67:a0:51:57:90:dd:ce:40:c2:
3f:fd:24:f7:61:81:07:f6:bb:ac:42:d4:c8:33:6d:
b2:7d:10:a2:bb:9e:1e:48:7a:39:61:78:a2:87:6b:
13:e9:11:dc:45:9a:d3:b5:4b:4f:16:48:ab:d3:4d:
37:98:08:fb:d7:c7:29:1e:07:cb:82:30:a3:ba:51:
24:54:b1:f6:b2:d4:87:83:12:10:33:ac:d4:72:4c:
b3:70:06:31:26:33:5f:a0:89:9f:0f:4d:ba:66:1f:
4c:d4:36:d2:ab:19:5f:4e:d7:8f:27:6a:d4:b0:d9:
57:05:64:01:86:87:f8:ce:96:07:ba:cb:71:1f:3d:
30:18:9f:b9:39:a2:06:69:35:ed:af:78:9f:c5:98:
3d:5e:b3:2e:c9:ed:59:9a:20:75:36:a8:b0:7c:6e:
49:dd:b1:6d:b9:a7:5e:44:d1:a1:f0:93:ad:e3:f0:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:26:7A:F7:EF:75:B7:F3:BB:DB:B3:24:A9:79:DE:5C:0A:E0:A6:99
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fc:ee:b4:3a:28:43:2d:0b:ed:f1:c0:d4:4a:76:3b:97:4c:
a2:81:ee:a5:12:53:4f:b7:30:02:4a:20:df:e2:8d:2f:1e:c2:
9d:dc:d7:38:a9:3a:49:6f:e6:8d:f5:a3:94:b8:9e:e3:37:c5:
b9:27:e0:ec:03:fa:1f:a4:12:f1:e6:cc:14:31:52:c4:00:55:
25:69:51:e9:7e:85:73:3e:9e:ea:d6:9c:96:5e:09:75:15:93:
b7:8f:5a:c1:88:5f:85:fe:55:b1:44:00:8a:94:18:2e:41:2c:
94:ee:25:53:1b:3e:50:53:47:61:32:7a:e6:94:48:23:5f:24:
c7:60:88:37:84:8a:d5:04:79:33:be:ba:c3:48:ec:af:b3:e4:
d8:47:73:ed:f1:8c:62:5f:97:e6:0c:2c:95:5a:5f:0a:0a:53:
ba:68:7a:c7:6f:d5:e5:e1:e3:2b:31:ce:22:1f:b1:c5:b8:bb:
56:e5:20:26:4c:5a:e1:07:32:94:98:97:05:2c:fd:be:50:46:
b4:ef:bc:c0:f5:83:6d:ea:dd:d4:47:eb:dc:c3:6c:29:08:40:
e2:15:18:56:6a:fc:37:55:d7:7e:8e:da:43:f6:9c:ef:4e:b2:
e8:95:0c:a7:12:90:25:dc:05:50:57:57:1f:6a:1f:96:0d:49:
32:d2:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:01:51 2025 by rpki-client