Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: Lwsqv87Wz4Nr818U1Es6AdoyEqgx0fQElSpWLcximYI=
Subject key identifier: A6:D6:82:39:AD:AA:BE:9E:D9:3F:08:60:B2:1F:27:9A:30:57:80:2B
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 0196C83AEC67B36CA12F50462A8E6C6A473A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 14CD
Signing time: Tue 13 May 2025 06:00:26 +0000
Manifest this update: Tue 13 May 2025 06:00:26 +0000
Manifest next update: Wed 14 May 2025 06:00:26 +0000
Files and hashes: 1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: MkaeoB1w246qcmxn8CEqM/ygk+6aI/v3s+ReHU3B0bk=)
2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:ec:67:b3:6c:a1:2f:50:46:2a:8e:6c:6a:47:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: May 13 06:00:26 2025 GMT
Not After : May 14 06:00:26 2025 GMT
Subject: CN=a6d68239adaabe9ed93f0860b21f279a3057802b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:7c:3d:e6:14:e2:66:2a:70:e6:a6:e6:1a:
51:cd:92:68:af:de:d4:a1:8d:fb:c9:1c:d7:2e:94:
a0:5f:2f:2c:37:b5:7d:1c:bb:5e:be:02:de:d7:31:
a1:82:33:61:ee:0c:7e:06:68:7e:87:5f:d6:7e:22:
07:f0:fd:a2:bd:dc:9a:8d:2c:d4:aa:ff:ed:af:90:
d3:43:45:06:53:3d:b2:e7:cb:76:76:52:82:58:a7:
40:d3:15:3c:30:a7:39:9c:fa:dc:bb:61:39:8c:cd:
9f:ce:3e:87:42:a2:b7:13:ac:5d:a6:c2:08:88:72:
51:79:2f:64:66:82:c6:b7:78:36:82:98:13:07:36:
fd:a1:1b:1e:9e:e2:bb:61:97:4f:62:8b:50:5d:d0:
5d:6b:f1:9d:7b:3f:00:64:bb:1a:b7:5f:4e:4e:73:
d1:01:45:b1:07:10:c9:3d:fb:bb:c6:0d:d3:5b:b7:
7a:b2:1f:71:36:a8:f6:ee:f9:77:72:80:51:e6:53:
6f:f4:b2:cd:7d:d9:95:3a:d3:fe:bd:da:c2:78:94:
16:11:54:75:14:a3:34:28:f9:07:7d:75:40:4c:7a:
80:7d:e0:8e:08:4d:06:64:12:79:7c:16:09:ab:f1:
a1:90:15:a4:da:85:6b:b4:ce:d5:50:c7:16:ed:09:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D6:82:39:AD:AA:BE:9E:D9:3F:08:60:B2:1F:27:9A:30:57:80:2B
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d8:9c:0b:61:8e:5d:45:f9:66:f6:d5:75:e4:df:2a:15:79:
05:86:0c:b4:4f:36:1d:4a:d6:1c:2d:01:55:17:a7:b8:39:15:
36:42:ec:28:e5:f8:f9:f2:f5:5d:88:a7:df:40:52:d4:39:a9:
95:5d:85:bf:7a:61:85:55:54:26:cc:30:1b:bd:2c:48:cf:0a:
e8:7c:c2:d1:cb:a3:4f:b3:42:05:ff:1c:85:72:a6:39:83:17:
ce:2d:1a:11:ae:b9:96:66:b0:e0:72:6f:3e:fd:da:30:0f:82:
00:90:bf:e0:8c:01:d1:f8:b7:22:0e:4c:86:8b:d1:e8:94:fa:
bf:48:2f:20:e1:a1:d6:0a:1b:ea:25:5d:04:cd:49:d8:54:d1:
46:e4:1b:e3:6a:a2:d1:7d:6b:c1:25:50:42:0a:e7:0b:a8:58:
e3:ec:6c:62:06:71:75:05:4e:79:e7:38:49:80:06:cb:7d:ad:
a5:0c:83:c4:e3:15:f2:73:fe:4b:b5:21:b0:26:c7:ec:f9:60:
f3:de:8a:09:9e:67:61:83:48:b8:e4:41:19:76:e2:b8:8a:8a:
bd:1e:0e:56:ed:16:9c:8e:ae:3d:5a:49:64:ab:92:37:85:93:
38:1e:7b:79:48:c0:25:17:aa:f8:eb:51:20:b1:56:5a:da:29:
25:51:33:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:29:25 2025 by rpki-client