Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: 65fjZjYVgoJTW8ekPcUNh25CqoLo3LBD/taVa2nGyJk=
Subject key identifier: 95:4D:5C:D8:7F:5E:69:F7:2B:7B:37:AB:B8:91:A5:34:DF:52:5F:A4
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 0196B7B5B34AEE5EBF8A8ED09642C6304131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 06A4
Signing time: Sat 10 May 2025 01:01:00 +0000
Manifest this update: Sat 10 May 2025 01:01:00 +0000
Manifest next update: Sun 11 May 2025 01:01:00 +0000
Files and hashes: 1: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: /5wfDXSQxMCs5txRoJabOpw2yDrEt5up4zoV8k4XMis=)
2: Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa (hash: RX3aXV1jt4pV7znP3Nr6a04cOEHqVMLgDW/kqRB9jNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:b3:4a:ee:5e:bf:8a:8e:d0:96:42:c6:30:41:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: May 10 01:01:00 2025 GMT
Not After : May 11 01:01:00 2025 GMT
Subject: CN=954d5cd87f5e69f72b7b37abb891a534df525fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:4c:be:c2:ed:c8:75:0d:d9:bc:64:2c:c9:
99:19:a1:a0:32:59:e2:de:15:16:af:e9:3b:ce:74:
0a:00:88:b8:16:9d:d2:ff:a4:8a:6c:0a:b5:8e:fb:
39:1d:aa:e2:0b:3f:d8:f6:88:30:29:40:5b:83:34:
b0:c4:5f:0d:a1:af:dc:78:49:7a:01:9d:f7:2d:35:
be:78:7a:40:0d:52:c3:75:f3:0e:35:45:97:b5:4c:
8b:8e:7c:47:10:39:68:9f:e1:be:c6:4c:d9:95:46:
5f:b5:d9:09:b2:4e:b4:a6:55:5a:bd:18:32:04:85:
16:b9:c0:2b:f8:07:c7:28:56:31:74:1c:62:87:e8:
3f:e0:4a:a5:be:8c:45:e7:b8:20:c9:1c:09:71:e7:
06:8e:f4:b7:fe:b0:55:3a:99:86:67:9f:fe:d2:4a:
cb:d3:c0:34:c9:6a:82:72:b3:a6:6b:70:d5:86:26:
be:34:4b:f4:07:b9:e3:a4:3a:f8:0a:31:fa:07:fb:
54:2c:a3:dd:b2:96:7d:4e:91:81:57:b4:01:5c:77:
7c:e8:ef:76:c9:2b:7e:6c:2e:30:68:fd:d5:d3:60:
38:2b:b0:2d:97:26:6f:c6:ff:da:e1:e3:21:c2:0f:
52:09:09:2a:9b:a5:ae:14:9e:ab:b7:c3:72:9b:b0:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4D:5C:D8:7F:5E:69:F7:2B:7B:37:AB:B8:91:A5:34:DF:52:5F:A4
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7b:db:05:11:ba:45:5c:09:96:ee:7c:00:05:f2:8d:66:b2:
69:99:6c:a3:a3:b0:75:ba:fc:da:23:06:7c:cb:24:90:a3:99:
7b:a7:81:94:42:8b:6e:1d:e0:e1:84:25:43:0e:1c:fd:84:fd:
4d:85:75:7f:d3:b0:bc:1e:8f:83:fe:9b:84:8f:db:e8:85:86:
2e:8f:32:59:1b:07:52:e5:ce:fa:74:a3:98:93:6c:1c:3c:fd:
9c:24:67:a1:9b:8a:27:90:f1:05:2c:5c:bb:df:f9:5d:09:35:
26:6a:2d:66:26:bf:4a:81:7c:90:94:62:38:1d:eb:a4:2a:78:
3d:21:a1:60:f6:f3:c6:96:4a:8b:ca:eb:bc:63:22:12:92:8b:
48:76:e7:b5:75:6f:1d:52:8c:b9:3c:53:61:c4:da:32:dc:b2:
87:68:d7:30:4c:0a:bb:47:32:67:37:00:79:a5:71:e1:07:69:
f4:f2:e4:07:d0:90:33:23:7c:a0:49:c3:23:09:18:1c:88:25:
08:d8:1d:14:54:74:b5:3d:4f:3d:a4:e3:84:f4:a7:54:7f:41:
96:e3:63:9a:a4:41:e2:e3:82:16:68:79:be:56:27:be:cd:42:
22:ff:92:d2:69:e8:c0:76:42:93:0f:bc:66:27:f0:fc:92:e0:
20:83:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:40:01 2025 by rpki-client