Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: sMbw0oPKB2dIo0qRDYlb4GjdnofJpTCYc4JsCGZtA9k=
Subject key identifier: EE:89:93:0C:D0:FC:B1:92:DC:E3:09:1E:D6:45:41:D0:03:CA:B7:08
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 0196B7EC2E5FC9F87791F282F9A5FEEE9415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 109A
Signing time: Sat 10 May 2025 02:00:30 +0000
Manifest this update: Sat 10 May 2025 02:00:30 +0000
Manifest next update: Sun 11 May 2025 02:00:30 +0000
Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=)
2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=)
3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: PsaalhlmSiGVGlYrR3ZdHeDMfaShuJzZdul3BvhJhCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:2e:5f:c9:f8:77:91:f2:82:f9:a5:fe:ee:94:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: May 10 02:00:30 2025 GMT
Not After : May 11 02:00:30 2025 GMT
Subject: CN=ee89930cd0fcb192dce3091ed64541d003cab708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:4a:e5:f7:c7:15:97:d5:48:47:ef:c7:0e:
0d:a1:a1:5b:82:cc:86:ea:75:aa:62:4d:b1:aa:c3:
e9:13:7c:7b:e5:2f:da:4a:7c:f5:53:f8:6c:0f:b3:
f2:dc:79:f6:af:1d:2f:59:bf:3b:24:ff:6b:31:9d:
8b:9a:bb:a0:71:18:4d:ff:c1:0b:99:43:d8:bc:e3:
82:95:87:8a:50:21:69:97:5a:ab:e2:e2:ea:f3:38:
25:12:24:e5:2d:a8:b9:c7:79:32:4e:ff:82:59:28:
93:3a:cb:2e:de:ac:32:3a:ef:cb:b3:38:db:38:0a:
ce:93:cb:3e:ef:bb:1b:7c:2a:eb:8f:20:dc:47:af:
e8:d6:9d:88:86:29:4c:5b:2a:57:4e:db:70:e1:82:
77:d4:ba:ce:3a:af:39:ea:94:b4:9d:a2:e8:f9:22:
02:c2:cb:31:c3:20:1d:c9:8f:b1:c0:af:2c:71:6d:
0e:14:a3:c2:30:15:c7:27:d9:8a:4d:ca:be:68:de:
24:73:54:55:b7:ad:22:c2:34:f1:47:b3:3b:f9:48:
1f:a6:ea:a6:67:b6:7b:87:fc:b7:3e:cd:c8:9a:b6:
df:df:de:92:ca:35:34:07:de:c7:e3:b4:d9:5e:d8:
28:ad:53:e1:c0:52:72:75:d1:cb:0d:47:c3:8a:84:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:89:93:0C:D0:FC:B1:92:DC:E3:09:1E:D6:45:41:D0:03:CA:B7:08
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:78:f3:4f:74:bf:8d:50:51:a9:6e:15:9d:42:d1:58:a2:f8:
5c:16:7d:9a:8f:5b:eb:c1:4f:18:58:09:75:01:0a:21:d7:4e:
69:f8:80:6e:a2:0f:3e:d3:9d:5c:f7:28:b1:49:fc:aa:f4:92:
1a:72:50:61:25:6d:ee:90:6b:d8:d3:e0:31:8d:f5:4d:13:06:
da:0f:8b:2e:43:57:43:37:62:4d:ac:59:11:48:56:33:10:e1:
60:7d:9f:2c:8e:a2:96:86:37:5d:19:a0:e6:49:5b:ef:7c:f5:
23:02:bc:70:8a:58:54:5c:9f:9a:4f:22:58:2f:fd:39:05:bc:
e3:c1:8c:c0:c1:48:dd:1a:9d:81:60:71:61:65:21:6e:ac:6a:
7f:bf:20:2a:c8:61:21:01:84:f7:22:ea:fd:76:fd:a8:f0:a3:
6f:69:a5:66:93:10:09:72:59:48:be:1a:f4:8e:f9:5c:69:ae:
4f:44:ac:20:4e:c8:ba:42:df:6f:e4:0b:5b:a3:46:70:67:17:
b7:1c:7f:86:cf:ea:42:c1:83:59:57:d4:28:59:63:96:48:2d:
8b:bf:58:cd:cd:ca:74:ec:9a:a4:8c:b2:d6:93:c2:cc:e8:24:
9a:32:b9:ef:44:1d:4b:19:09:9c:f0:46:5d:57:e0:35:5d:9a:
96:38:1e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:35:12 2025 by rpki-client