Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json)
Hash identifier: C/w+bDHrDhnaUHRRE7Ld19zeiza7DVWPQ/sW5uwjx+o=
Subject key identifier: D8:80:3B:E2:51:A7:B7:25:25:8B:2F:E6:EA:96:4D:64:FC:9D:AC:22
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial: 01969DBE70BBF60BB3AD64F8730C41FA46D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
Manifest number: 147C
Signing time: Mon 05 May 2025 00:00:25 +0000
Manifest this update: Mon 05 May 2025 00:00:25 +0000
Manifest next update: Tue 06 May 2025 00:00:25 +0000
Files and hashes: 1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: MFdmPSBIE7hbYNF9+rSlcRzeURdpSNT+2dWX33ATf24=)
2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:70:bb:f6:0b:b3:ad:64:f8:73:0c:41:fa:46:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Validity
Not Before: May 5 00:00:25 2025 GMT
Not After : May 6 00:00:25 2025 GMT
Subject: CN=d8803be251a7b725258b2fe6ea964d64fc9dac22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:00:8b:8b:85:b1:66:fe:04:7e:fd:86:2c:25:
cd:66:87:8b:82:a4:2d:d2:fb:b1:97:da:d7:0d:51:
07:8b:aa:fb:89:cf:75:57:cd:0b:01:dc:65:9a:5b:
03:69:3a:a3:26:bd:8c:10:80:5b:a9:b9:92:37:a5:
ad:76:91:a8:b1:69:be:dc:bd:7e:70:ca:37:38:c5:
cd:d6:38:52:b2:58:2f:3b:96:3a:bd:84:f2:8a:a9:
66:33:45:62:18:86:11:40:0a:37:b4:35:d1:36:c3:
6e:bd:ca:bb:e1:58:e6:cc:82:06:0f:7b:80:f5:16:
37:e2:2c:79:cf:ef:3e:12:e4:dd:25:d4:e9:3b:64:
25:74:57:fa:6d:66:fd:28:89:8e:1f:b4:b3:13:c7:
23:99:7f:8e:46:7f:d3:3a:81:9d:2b:37:ba:e3:0e:
68:f9:d7:72:f3:51:43:e7:3e:06:eb:0c:eb:f9:45:
69:78:4e:01:f9:65:0e:6c:82:d8:3d:7c:37:ec:a4:
6f:da:dc:09:81:2e:35:7e:e6:0f:23:f0:b9:e6:75:
68:db:90:63:9c:d7:e4:1c:f2:9b:a1:bf:e7:94:08:
27:77:47:99:f7:e9:94:9c:36:7c:ca:b3:dd:27:b1:
cd:58:42:a1:ae:b8:02:e4:ed:84:4e:2b:a2:73:88:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:80:3B:E2:51:A7:B7:25:25:8B:2F:E6:EA:96:4D:64:FC:9D:AC:22
X509v3 Authority Key Identifier:
keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fd:cd:35:7e:26:97:d3:91:41:07:10:90:9b:f3:ea:a8:9c:
29:c4:f6:88:17:7c:b2:e3:b5:2a:d1:bd:96:4a:a3:22:1d:ce:
79:f7:b7:53:e2:48:df:58:b1:57:f4:86:9c:26:2b:a3:58:4d:
2c:e4:5f:f6:e1:5a:32:47:00:2c:79:ce:a0:e7:a5:ea:03:12:
52:b9:fd:71:99:de:a0:41:4b:06:87:7e:bc:e6:aa:9b:23:75:
d6:fb:dc:da:4c:18:95:6d:2a:26:81:c3:74:2e:2e:4b:e8:c7:
90:69:97:c7:bc:fd:18:4a:a5:bb:2d:86:cc:f4:8e:8a:db:22:
85:d3:0c:ff:69:84:bc:69:6c:5c:4f:52:a6:0e:d5:7a:2d:ca:
a8:30:f7:e2:32:e6:b1:73:67:37:da:28:8d:5c:7e:93:87:53:
ee:11:98:f3:41:c4:08:ae:ff:e5:52:cf:97:6f:a2:2d:3d:04:
8f:cc:90:4e:f0:a1:29:3a:51:c7:63:e1:56:a6:18:37:20:1b:
7e:2b:0c:01:6b:b5:8c:52:3e:74:9f:a3:64:c9:ae:72:77:5c:
ea:b7:f2:0d:a0:62:46:2f:0d:66:39:ac:fa:2c:44:d7:d4:3b:
4b:5e:59:fe:00:8c:82:7f:8b:6d:af:2c:df:10:7a:9b:f0:d3:
bc:13:f8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:23 2025 by rpki-client