Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
File: TLbePNkQ87_3_4Xe1FLEMbHopSA.mft (raw, json)
Hash identifier: lM+oDeQS87Pyqbxl1DmHPrYPfzZcoCJp1vY9LxLbHWs=
Subject key identifier: 3E:B4:95:33:0B:E6:E3:77:66:86:59:CB:70:5C:A6:F9:AD:C9:F6:5B
Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Certificate serial: 0196BD12B2D285857682B3D56A7EAF3B167C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 02:00:41 +0000
Manifest this update: Sun 11 May 2025 02:00:41 +0000
Manifest next update: Mon 12 May 2025 02:00:41 +0000
Files and hashes: 1: TLbePNkQ87_3_4Xe1FLEMbHopSA.crl (hash: J+tBLuJoIwd5TJ7SEaLbaa/LwFm1NWfJMICzB5QGWjw=)
2: kE8LdGAFW614HUcjN1MoZxFokJs.roa (hash: XYMGtkKoA87TX5nzm+UQ3ylduTU9EvUGKlmdAtXqyu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:b2:d2:85:85:76:82:b3:d5:6a:7e:af:3b:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Validity
Not Before: May 11 02:00:41 2025 GMT
Not After : May 12 02:00:41 2025 GMT
Subject: CN=3eb495330be6e377668659cb705ca6f9adc9f65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:c1:c3:4d:38:f7:2c:01:de:4e:65:7f:8e:
55:a0:84:8e:3b:84:0b:4d:48:a7:0d:ef:fb:96:8d:
d0:79:f7:39:77:be:18:a8:87:d6:fd:16:1c:97:2d:
e3:be:da:68:dd:9c:e3:8d:27:18:8a:f5:64:d5:e6:
32:63:c8:64:34:bd:11:97:da:a3:5b:4c:e2:dd:fc:
b2:4b:46:47:1c:5a:d8:b6:2a:1e:fb:59:17:35:66:
65:db:9f:29:c9:87:14:82:7d:08:da:89:fe:73:b9:
36:3d:68:ca:1b:cc:0a:ec:89:68:5a:87:a3:f0:88:
da:e1:f8:e5:4f:45:d4:d8:c5:06:dc:5d:43:2c:cd:
45:c7:99:ad:b9:8b:97:f1:e3:ca:06:4a:f9:e3:07:
1a:26:a5:89:1e:31:e0:d1:b3:8c:1f:c5:e2:0d:a5:
3a:de:2f:53:4c:98:5b:7b:5b:00:e0:dc:64:50:f5:
1a:27:c3:b3:38:7f:80:a7:8e:c6:da:63:d1:0d:6d:
05:5c:6a:4e:9e:af:62:cf:c5:33:cb:66:2c:f3:40:
56:0c:73:c9:e5:51:d1:5a:e4:3b:86:6f:53:8b:ff:
c6:8d:ea:89:23:15:13:98:92:1f:0e:14:6d:9e:c6:
41:1f:94:39:8c:09:bc:f0:6e:76:5a:9d:9d:8e:cf:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B4:95:33:0B:E6:E3:77:66:86:59:CB:70:5C:A6:F9:AD:C9:F6:5B
X509v3 Authority Key Identifier:
keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a1:ed:9a:2c:f3:92:37:30:59:c8:86:83:56:e4:f2:00:9c:
df:56:7e:c7:a4:04:8e:88:b5:a8:f2:9f:03:cb:9c:be:b7:df:
1c:06:7b:09:8e:c2:0b:ba:a5:b4:32:7e:e6:1c:1b:e8:db:95:
92:3e:7a:6e:16:41:7a:97:0f:71:5f:06:e2:f7:aa:bd:cb:60:
83:a4:74:ad:84:6f:34:c4:52:70:6a:75:f5:8c:12:e9:b6:c1:
d8:78:5a:ab:f8:c3:6c:bb:87:15:fc:0d:e4:d1:13:b0:ab:01:
ca:42:06:a7:a7:2d:c5:1d:14:33:56:bc:c0:34:11:9c:23:47:
e5:48:b4:f2:e4:e8:fc:ca:c0:7d:20:ef:2f:57:f8:df:c6:94:
52:d5:d3:bd:71:69:67:61:f3:d6:b2:3e:37:b2:e0:27:d3:0e:
a6:89:8e:b2:bf:4a:09:56:e5:6e:fe:22:fe:f9:23:58:0d:40:
f7:bd:70:4d:80:dd:25:3d:79:85:59:1e:01:bf:8c:71:2b:fa:
35:1e:c8:8b:24:13:72:b1:25:12:69:19:2c:88:08:d9:22:d9:
ed:72:6f:40:ce:3b:cf:26:d3:47:0b:f3:05:3d:86:14:5c:ad:
20:a7:15:bd:8c:0f:cc:e8:0c:8b:6d:7d:c4:d3:c5:cd:61:55:
f6:d7:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:18:17 2025 by rpki-client