Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier: hFf5Bs4kJE3ROjEY7TPP0BmQ9DMW7vM6bWJJzvKw53I=
Subject key identifier: DD:91:AB:7B:0D:96:BC:2F:8B:DC:11:93:76:6E:35:F1:2E:D3:E1:7B
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 0196BD80F694C658C22D6343D57B9370CC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number: 1113
Signing time: Sun 11 May 2025 04:01:07 +0000
Manifest this update: Sun 11 May 2025 04:01:07 +0000
Manifest next update: Mon 12 May 2025 04:01:07 +0000
Files and hashes: 1: OvfWeCcNPkjbD4WceB7qJUQP56g.roa (hash: fRXrYY7/CZ7H+wWfEy5WHXYQSNWj53G/u9ERuP4d6t8=)
2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: 863LIXR8ZdsWO9NGIF5H7s7h3PUqZZIi+YqH5j2jKCE=)
3: qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa (hash: FgzvVUL28rYxcaIK8c4YP+ZNrmGFqrNKlv9zOeTK/II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:f6:94:c6:58:c2:2d:63:43:d5:7b:93:70:cc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: May 11 04:01:07 2025 GMT
Not After : May 12 04:01:07 2025 GMT
Subject: CN=dd91ab7b0d96bc2f8bdc1193766e35f12ed3e17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:93:a7:63:fb:15:10:4a:2a:43:03:a5:0d:
c1:9a:24:9e:ef:4d:81:12:2f:8e:3e:5d:fc:c5:2d:
2e:3c:b6:4c:28:7b:7e:f9:1a:e4:fd:9e:53:1e:df:
e3:c9:90:25:b1:42:02:2c:77:0d:cd:d0:c7:e4:dd:
4d:f6:ab:ec:bd:2e:b7:3d:f9:20:1e:70:96:a0:49:
42:c7:7e:fc:66:43:2d:61:ec:ca:bc:ce:34:5f:7b:
1d:e1:f0:23:b7:3c:85:42:ea:54:41:7f:d2:99:e0:
f0:8f:74:62:08:c5:33:ee:4c:74:d4:ce:49:a3:42:
cb:91:26:6a:c6:96:93:0e:fe:d6:d9:77:cb:26:a9:
1e:b4:fc:a8:1a:b3:e9:11:df:9e:ad:19:47:d8:ef:
d0:da:83:1e:32:5d:e7:36:b4:21:d4:35:8a:7a:2c:
f0:44:01:c1:5b:0e:47:0a:1a:91:07:c9:1a:c1:ab:
94:37:38:ff:80:9d:d5:27:5b:20:57:f3:19:4f:72:
72:d3:bf:55:be:4c:e0:d7:0a:9e:ce:8b:8d:70:90:
7e:bb:21:24:e9:54:40:a4:74:3c:62:05:e6:74:b5:
cb:b8:59:d7:aa:5b:e7:2b:0d:80:33:2c:49:ed:d8:
77:19:9e:5e:aa:8e:46:44:98:fc:ef:1a:59:90:54:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:91:AB:7B:0D:96:BC:2F:8B:DC:11:93:76:6E:35:F1:2E:D3:E1:7B
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d9:14:e6:fb:76:79:74:22:25:77:45:3d:78:af:f8:da:97:
5d:c3:7c:be:cf:55:2f:c3:17:33:62:5a:8e:4a:7e:0e:ab:da:
c9:b8:d1:5b:5f:5a:b1:a0:cd:91:da:da:e7:82:74:8d:02:ee:
46:c5:91:ef:72:2b:47:2b:a4:53:2b:68:75:06:bd:a2:8d:d2:
8e:4b:74:ef:47:55:d5:72:47:d9:9a:9e:70:03:a7:8e:24:c3:
19:e5:92:fb:c6:23:17:53:10:13:25:6d:0c:ac:68:9d:9c:d5:
e2:80:75:b4:3b:9b:df:48:9b:3b:e2:b7:67:45:d7:e8:bf:ed:
bc:db:d5:73:9c:35:3d:d6:3f:55:3c:99:bc:46:d0:22:c9:9f:
0b:45:76:f5:3b:03:2a:d2:6c:ed:c3:89:0b:34:f4:21:87:fa:
35:5d:9a:59:2c:f6:c3:3a:38:0b:c5:2b:d0:40:43:36:bc:cf:
57:c9:4e:84:7e:b7:d8:33:c8:fe:ce:2c:c7:11:5e:a7:ff:2c:
d3:9c:e3:0e:47:ef:92:8f:61:ed:ec:a8:1a:05:f7:cd:68:91:
2b:06:13:6f:2e:34:24:81:ed:d3:f9:88:a0:08:91:f9:85:23:
f6:ce:4e:df:cc:f3:27:71:f9:9b:0e:4d:a5:42:c5:74:fe:db:
c2:9f:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:51:03 2025 by rpki-client