Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
File: TdI0IiZKecAxVILtTyfHUTU_Jrs.mft (raw, json)
Hash identifier: SSsr3gzoL6yLUVsruj3BrDkD1GCKgjgTPNF9tR2OZGY=
Subject key identifier: 1C:CF:A7:6C:D2:AC:05:55:90:EF:CD:0C:92:64:7F:DB:C7:AA:DA:28
Authority key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
Certificate issuer: /CN=4dd23422264a79c0315482ed4f27c751353f26bb
Certificate serial: 01969E2C94F289891D909643429871034A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
Manifest number: 0670
Signing time: Mon 05 May 2025 02:00:43 +0000
Manifest this update: Mon 05 May 2025 02:00:43 +0000
Manifest next update: Tue 06 May 2025 02:00:43 +0000
Files and hashes: 1: TdI0IiZKecAxVILtTyfHUTU_Jrs.crl (hash: pnVWCH0Y+D57SU2cb7zvyVZsZBoaz5ZR7YsjIVzUBBI=)
2: bJM_lGyoCdHM4Ew-bll92CWr05o.roa (hash: /LNeEVaQM+dKQQyk+FaHOgVJEKHJjoz/8u1g5mTs7vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:94:f2:89:89:1d:90:96:43:42:98:71:03:4a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd23422264a79c0315482ed4f27c751353f26bb
Validity
Not Before: May 5 02:00:43 2025 GMT
Not After : May 6 02:00:43 2025 GMT
Subject: CN=1ccfa76cd2ac055590efcd0c92647fdbc7aada28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:0d:b8:7f:6c:eb:90:0c:8b:12:a7:14:ce:
b7:1a:0a:ba:e8:50:ef:15:d0:c4:24:28:45:15:ec:
ad:b4:e8:79:f2:ba:de:76:1d:50:1d:e3:64:d3:08:
83:50:04:6e:6f:7e:b7:0d:37:13:7f:57:31:6a:f8:
79:bd:cf:8f:9c:de:be:36:9f:01:4c:54:83:0f:3e:
80:98:f3:9b:3f:84:c8:b9:76:d0:28:1b:14:2d:95:
ca:83:87:3c:d7:b0:37:88:8d:07:91:de:01:ee:3e:
7c:19:47:7c:04:eb:d3:f5:7b:5d:c1:78:b2:f1:60:
95:3d:d9:8f:5c:ba:86:98:54:08:a6:4a:40:e0:ec:
6c:72:54:00:58:51:b6:cd:04:ae:0d:fb:61:31:0a:
84:20:ae:3b:39:31:09:41:7e:e5:6d:ce:98:40:99:
70:97:1b:a6:35:e5:a6:cd:6f:5c:94:a1:0c:06:3b:
ed:57:b1:c0:1a:38:cf:f9:65:5d:89:ed:35:69:28:
d9:f5:5c:20:25:bc:75:98:fd:dc:86:69:74:9e:50:
33:4d:9c:de:5a:f4:8d:1a:d2:90:04:7e:1d:30:6d:
5d:ad:fb:d9:e9:0c:2e:37:b7:bf:af:43:46:54:83:
62:3c:18:2c:fa:30:9a:75:43:6d:ec:88:2b:8a:ff:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CF:A7:6C:D2:AC:05:55:90:EF:CD:0C:92:64:7F:DB:C7:AA:DA:28
X509v3 Authority Key Identifier:
keyid:4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c1:c5:bc:09:68:58:4a:0c:63:9e:10:bd:55:23:89:1b:a5:
17:a6:bc:27:c6:a7:ca:c8:9d:30:3f:c1:9e:6d:74:a6:1d:b0:
7a:a7:8c:be:9b:b4:79:86:76:73:dc:28:e3:6a:b5:c0:4b:a7:
bb:5f:fc:80:6c:56:05:cb:1a:3a:8a:0e:f6:b6:3c:ac:84:bf:
f6:fd:19:cb:f6:bc:62:f1:57:36:2f:0a:cf:a5:c1:20:0d:01:
f9:67:3b:e2:d9:d3:50:24:1e:0a:9c:86:81:d7:9a:6b:ae:a4:
5c:25:4e:b4:15:5b:0d:b1:df:92:fb:da:81:9e:58:a4:a9:52:
86:6c:a1:9c:16:47:13:47:0a:3b:5d:70:14:88:6e:f8:cd:6e:
28:d0:93:2d:77:64:2e:18:b1:84:06:2c:ba:f2:62:de:09:56:
9f:1d:89:ae:93:05:ab:40:07:eb:e0:d8:35:c4:7b:a8:56:e4:
e6:1d:1e:d0:a7:6d:7e:3a:fd:d9:c2:77:29:30:c7:13:2f:6f:
7e:7a:57:42:50:1a:cd:57:0b:27:70:1d:3a:33:25:19:46:18:
5a:1f:79:4b:f7:1a:72:d6:a4:b8:82:4b:c8:2b:21:7b:7f:8d:
a8:30:6c:50:59:ee:57:67:2f:5a:c6:77:95:1b:31:30:75:1d:
50:6b:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:00:55 2025 by rpki-client