Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier: pikMJpWUtfj5sV2Bx7H5+tEMMo5b6gE6pMHcz+yXcAs=
Subject key identifier: 69:B4:B3:8E:8D:6B:6B:DE:8B:9C:98:62:AD:CB:D8:16:A1:52:51:B5
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial: 0196C239925EAD128304AE6CE49F768BE9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number: 087C
Signing time: Mon 12 May 2025 02:01:14 +0000
Manifest this update: Mon 12 May 2025 02:01:14 +0000
Manifest next update: Tue 13 May 2025 02:01:14 +0000
Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: Bi9oVZ+t4rJGAY7B4SpoXYMqKsqa3LhlDDM4TjPmDcw=)
2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:92:5e:ad:12:83:04:ae:6c:e4:9f:76:8b:e9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Validity
Not Before: May 12 02:01:14 2025 GMT
Not After : May 13 02:01:14 2025 GMT
Subject: CN=69b4b38e8d6b6bde8b9c9862adcbd816a15251b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:85:69:a4:a9:2b:fa:97:cd:59:88:49:b0:54:
41:36:39:6d:cb:02:31:62:d5:80:61:f7:6e:5f:1e:
e9:7d:46:0a:35:83:03:9f:47:df:eb:9d:a4:e7:d0:
ff:3a:13:c5:be:1f:09:70:55:31:1c:39:17:1e:84:
a2:40:d5:b8:0c:07:31:be:b7:13:33:25:15:58:aa:
2c:e2:4d:fa:d1:2a:b4:17:d1:fe:6b:fa:29:7c:37:
74:c5:b0:e7:8a:10:20:8b:b3:7e:45:a0:d6:fb:9b:
10:25:c2:d1:25:c9:9e:21:1f:f8:87:f1:39:1f:9d:
b2:5d:48:fa:d9:ba:a1:7c:4d:6f:26:48:95:c1:30:
a6:2a:57:1d:2b:00:06:b0:15:d0:44:e9:68:94:af:
50:b6:6f:a3:4e:61:db:b6:cf:0d:4a:36:7c:40:3a:
92:6a:9a:52:62:12:8c:d6:f5:94:73:9c:ce:ed:ab:
c4:55:d3:3d:a8:19:85:3f:11:00:cb:bf:81:5c:52:
aa:75:ca:8e:64:2b:21:db:a0:ba:c8:e2:37:ca:89:
4f:50:4f:b3:3e:23:0d:50:3c:44:88:d7:1e:c8:00:
a4:93:72:e4:6c:d8:96:c1:15:db:2a:98:85:ee:15:
06:49:a6:60:9b:30:29:4c:23:93:82:99:b1:79:2b:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B4:B3:8E:8D:6B:6B:DE:8B:9C:98:62:AD:CB:D8:16:A1:52:51:B5
X509v3 Authority Key Identifier:
keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:23:87:98:01:18:2d:5b:61:be:50:17:a9:83:91:76:df:62:
af:cf:91:e7:98:16:b6:4d:9e:78:cd:8c:19:66:97:37:77:33:
8c:3a:e6:c0:fc:37:49:e4:e2:7b:17:40:51:7e:4b:e5:34:72:
65:53:87:23:b7:9d:7a:48:97:7f:7a:30:f2:be:82:ac:7c:2a:
b4:0f:d8:f0:9f:c1:24:f6:a9:64:9b:18:09:2c:97:e6:f3:ce:
d1:88:1c:05:33:88:ab:72:5c:f4:3d:23:23:08:0c:8b:c8:28:
6d:16:50:45:0e:e7:3f:fa:24:36:fb:fe:3c:15:6f:9f:22:e9:
60:ae:4c:5d:68:78:c2:76:bc:c7:81:fa:8a:55:0d:07:d4:fe:
f3:5d:d9:4c:f3:65:bd:ea:93:02:ab:70:b5:f5:d3:4b:c8:08:
03:aa:03:d1:41:7d:25:93:5e:74:eb:84:eb:88:76:4d:7b:15:
68:4c:ca:63:25:3f:46:ed:65:ec:bc:dc:df:a8:b3:60:a1:63:
9f:05:32:cb:42:a1:08:16:61:80:27:f0:b3:40:79:1d:98:56:
26:e5:44:41:19:90:f2:96:17:f2:c3:57:21:b5:6a:8f:13:cd:
b3:a0:4d:3f:49:4e:43:ee:46:b8:91:92:36:fd:6d:4b:0a:6e:
cb:29:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:17:49 2025 by rpki-client