Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: nM1aeTLhH1limgCJhZUT8WQ06VBKC4gJCjZcioR2W8I=
Subject key identifier: C0:7F:1A:EB:8B:A4:9F:C6:89:15:EA:1B:79:A0:B0:BC:32:E3:75:A1
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 0196C0B8385836CA9B3618D61DB0615BAB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 19:00:20 +0000
Manifest this update: Sun 11 May 2025 19:00:20 +0000
Manifest next update: Mon 12 May 2025 19:00:20 +0000
Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: Fxu23aEoev6WfkbBR2FlnXaqQNr9/ZFgMZoC/EFUcS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:38:58:36:ca:9b:36:18:d6:1d:b0:61:5b:ab:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: May 11 19:00:20 2025 GMT
Not After : May 12 19:00:20 2025 GMT
Subject: CN=c07f1aeb8ba49fc68915ea1b79a0b0bc32e375a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:ac:78:cc:43:c7:0c:88:30:e2:51:3f:ef:
86:67:4b:cc:ea:b3:bc:1f:39:dd:e5:5b:2b:43:68:
10:40:68:70:14:62:7b:f2:63:95:66:f2:73:2c:a7:
5d:79:fe:ca:38:67:d9:15:a2:76:f7:a4:01:44:7e:
93:21:fd:f0:34:f2:46:ae:1c:32:6d:81:4b:9f:da:
23:16:6f:11:34:ea:62:7d:4a:45:ef:2f:7d:48:d4:
56:9f:44:d3:08:36:be:f1:5b:83:b3:ab:35:b4:22:
15:8d:76:f0:c9:9d:7b:94:62:ef:64:8d:e5:ae:5e:
2d:e2:70:65:2b:12:ec:65:98:78:3d:a9:71:43:f0:
0d:18:49:5b:a0:6f:8d:bc:e0:b9:bc:6e:0a:2f:4a:
94:25:cd:25:fe:9a:61:35:e5:ac:d9:e0:bd:8b:dd:
57:6f:15:08:b3:86:03:96:84:9c:fd:2a:c2:2a:ae:
d3:8a:0c:a5:16:65:c5:57:27:85:02:ae:59:29:80:
2d:a9:69:a5:69:74:6c:54:24:d2:9d:c9:1f:ba:1f:
64:aa:b7:f1:c7:1e:52:73:b4:83:42:2e:8e:ff:d8:
43:f2:6a:59:53:e8:7a:fa:35:8c:10:b3:9d:1d:1c:
ad:11:c6:85:c1:ec:59:b1:1b:27:be:be:c4:ed:a5:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7F:1A:EB:8B:A4:9F:C6:89:15:EA:1B:79:A0:B0:BC:32:E3:75:A1
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8b:91:a4:b5:2a:09:5c:50:34:42:3f:eb:06:23:b3:e9:33:
c0:44:2a:a8:e9:54:6c:15:e5:42:e9:69:eb:f8:21:12:6b:bd:
e9:7f:1b:f9:80:b9:9c:68:96:07:e0:34:25:3c:25:72:cb:e2:
a4:cc:40:eb:56:d7:b6:56:63:46:ce:e3:a1:a0:9d:98:c7:f9:
74:fa:a4:cb:36:d8:c0:95:7c:48:92:03:8c:25:84:2b:54:fd:
0a:4f:e0:d3:3b:53:dd:86:99:b3:d9:ff:b0:14:aa:94:35:7d:
a0:f5:5a:f7:3f:6e:da:b1:7e:38:22:09:b3:9e:9e:f0:67:d6:
6f:70:ac:93:d6:98:d5:e7:e9:d9:09:a6:86:13:80:e4:ba:5b:
7c:33:e5:26:a9:0e:7e:93:af:96:8b:08:d4:7b:9e:b2:68:d3:
f2:45:90:1a:d1:11:d1:d5:c6:16:24:51:73:02:d4:0c:d1:ae:
1e:6e:cd:af:1c:11:20:2d:7f:fe:53:96:f0:b2:63:27:8a:a1:
b8:bc:12:73:26:13:61:95:23:a0:af:c5:c6:89:f9:e0:4f:53:
22:99:1d:ef:41:c4:23:c6:be:3d:f4:10:a4:da:a5:cf:43:c7:
78:79:c1:74:d2:f0:8b:dc:2e:ea:c9:6b:e1:27:03:70:92:17:
61:10:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:11:31 2025 by rpki-client