Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: 2ScGC78CFYqFxV6hutxyyupe0TuKdo5za5jGXqc0HUQ=
Subject key identifier: 9C:8F:F8:D3:08:69:64:40:C8:6D:E1:BE:CE:CB:4C:43:0D:D4:A8:28
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 0196CD2A981ADFA30272441A9C39080B051F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 1541
Signing time: Wed 14 May 2025 05:00:42 +0000
Manifest this update: Wed 14 May 2025 05:00:42 +0000
Manifest next update: Thu 15 May 2025 05:00:42 +0000
Files and hashes: 1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: S2lzsHd3222YWQnAqVTTBfhCxLJyV1aDn7iI2FDw56A=)
4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:98:1a:df:a3:02:72:44:1a:9c:39:08:0b:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: May 14 05:00:42 2025 GMT
Not After : May 15 05:00:42 2025 GMT
Subject: CN=9c8ff8d308696440c86de1bececb4c430dd4a828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:f4:d4:b6:d0:88:86:01:4f:8a:44:60:ae:
b2:b7:19:e3:e9:93:ed:ff:7c:1a:6c:6d:e3:ff:56:
80:74:30:7b:87:89:d2:ae:90:c8:e8:b1:73:ec:fb:
8c:9b:80:64:25:93:b9:f8:eb:be:a6:0b:ce:76:db:
11:25:2f:0f:7e:00:2e:43:ef:93:90:0b:8b:d4:f6:
b8:7a:cf:d5:80:80:2e:c6:6a:f8:f8:52:b6:7c:96:
22:95:13:38:65:4c:37:dd:94:9e:bd:4b:d8:0b:98:
dd:c0:d0:10:ca:2b:bc:a0:d6:ff:70:d7:fd:fd:49:
d3:e1:f8:fe:21:40:fa:a7:46:d0:b8:4a:d4:ec:61:
6c:8e:67:d6:da:dd:d1:2d:cf:e6:89:0d:87:ad:50:
25:9b:80:ff:42:a4:67:f0:81:7d:63:56:93:c9:8a:
2a:a4:d6:ea:de:f0:49:b7:cf:45:9e:6b:49:74:d0:
da:38:8e:4d:5c:d7:2f:94:37:ec:3b:f8:98:60:10:
ff:2b:83:20:cc:7e:b8:e6:1c:40:a4:a3:77:f7:5a:
ec:7e:16:43:cf:6c:6d:80:29:40:21:e1:53:8a:49:
38:9d:52:9d:f1:ad:a1:cc:78:b2:28:2d:71:24:ec:
50:67:8d:7a:96:bd:26:85:4b:1f:4f:0c:d8:83:d7:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8F:F8:D3:08:69:64:40:C8:6D:E1:BE:CE:CB:4C:43:0D:D4:A8:28
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0f:92:97:86:b1:c9:ed:e0:43:ac:9a:93:34:5f:b6:94:79:
b5:e8:13:f1:c6:d8:f4:93:b9:ab:76:51:6e:16:80:67:75:04:
94:c7:62:70:69:83:96:5b:77:09:5f:ad:8f:ac:f3:d1:3b:ca:
0d:1c:09:78:23:fb:0c:8f:95:3e:e1:35:69:47:50:99:1b:1c:
8d:e6:99:a8:0f:fe:54:46:9e:fd:5c:4a:10:d4:b1:4f:0c:72:
01:09:6b:b8:a1:36:82:93:d8:f9:25:92:be:92:db:71:7b:ce:
b7:16:69:81:0b:a3:c1:e7:cb:5a:26:ae:17:38:ed:ca:4e:1e:
fb:f9:0c:8e:7e:7a:98:a4:df:74:b1:b8:69:7a:2b:bb:06:0b:
07:7d:a2:38:15:40:54:42:5d:12:7b:2e:3e:84:cf:1f:b2:0c:
3a:0f:51:74:89:76:20:0c:3e:e4:6a:2d:27:e3:ef:86:b5:b8:
42:39:ca:e0:7c:88:21:15:ef:36:e2:09:3a:62:fb:01:16:ad:
69:02:58:46:ab:56:75:75:9f:fb:59:20:d6:b0:8e:84:86:1e:
73:4d:17:27:86:ea:f1:e7:35:2d:23:a1:7b:10:1d:e5:49:6e:
b1:9c:d6:14:47:41:8c:4b:f6:07:a0:69:8c:bb:55:fc:be:8a:
3a:11:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:58:23 2025 by rpki-client