Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier: S9lWaAJZ1mbDK0zxbj++Iv5njxCXRID5KzLmISNMADM=
Subject key identifier: 8A:72:EB:71:1D:77:5A:B0:3B:9B:23:65:2D:0B:B0:10:25:48:05:3B
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 0196B0D765C16086921047B9594F3BD87148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number: 1531
Signing time: Thu 08 May 2025 17:00:28 +0000
Manifest this update: Thu 08 May 2025 17:00:28 +0000
Manifest next update: Fri 09 May 2025 17:00:28 +0000
Files and hashes: 1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=)
2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: HdYL8kmTo3LNiaXWc+oGssh2xWavBuzFJVn/IX1nOVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:65:c1:60:86:92:10:47:b9:59:4f:3b:d8:71:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: May 8 17:00:28 2025 GMT
Not After : May 9 17:00:28 2025 GMT
Subject: CN=8a72eb711d775ab03b9b23652d0bb0102548053b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:e2:14:d9:a3:59:35:ba:13:35:e8:5a:90:
41:4a:81:65:c0:43:d6:cc:28:83:7f:bd:43:48:ea:
d7:14:e9:86:44:c9:ee:0a:e5:11:6e:fd:a3:84:f9:
f9:b8:83:79:ba:72:ba:fc:e7:a5:ef:64:06:f6:4a:
07:74:ee:84:db:e5:37:7a:af:8e:95:4b:7e:53:6a:
10:d5:65:ea:d9:41:81:4f:73:36:16:1c:44:20:20:
f4:43:15:04:40:5c:2d:ff:3d:cd:9b:25:cf:bf:7d:
85:68:10:01:f1:32:0e:45:42:5a:ba:e3:8d:d5:b7:
0d:4a:b5:22:5d:08:73:b7:9d:fc:73:40:fb:82:6f:
16:61:f6:44:2a:1a:49:af:1f:83:b0:2e:42:1a:8e:
48:9b:e7:c2:08:b2:f2:7d:79:5e:3f:b9:16:9d:0e:
71:d6:c0:90:7a:e5:8e:07:20:9a:40:3b:c9:ad:03:
10:1c:54:d2:81:f8:09:a7:b2:a4:6f:21:ef:b7:52:
43:3e:68:36:18:22:33:39:3a:9e:b1:8e:a3:84:bd:
02:3d:d1:1f:2d:30:e4:4f:e3:ff:2a:d2:55:13:f6:
fb:c7:6e:d5:34:23:d9:e7:58:51:90:c4:f1:43:70:
08:d7:60:cf:12:df:6f:be:a0:f8:09:27:cf:c2:1a:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:72:EB:71:1D:77:5A:B0:3B:9B:23:65:2D:0B:B0:10:25:48:05:3B
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:19:78:4a:5f:b6:f3:bf:1f:f5:cd:a1:04:e4:3b:7f:dc:79:
34:b2:1b:11:ac:4c:b5:0d:e4:6f:54:49:6b:ec:06:70:79:3b:
22:04:9e:34:a4:43:b2:e4:2e:ac:6e:b3:1a:86:a7:e0:74:f3:
6d:56:ce:4a:f9:a2:60:86:53:06:2f:df:29:af:8e:5c:53:7d:
b6:37:a7:38:45:04:e4:16:c8:46:3a:47:bc:c7:19:11:52:a4:
06:dd:3b:23:54:ff:ec:f4:ca:ea:73:a7:57:66:07:61:07:27:
49:f9:5c:5a:3a:7f:90:65:38:ef:26:ce:d4:1b:ef:9f:02:3c:
71:21:77:a9:1f:db:ad:cc:7d:4c:d8:83:6f:f4:8a:83:f6:7d:
14:aa:08:c5:24:6c:64:14:13:0f:35:91:01:a4:b6:a4:19:51:
8e:04:7c:a8:a6:a4:b4:b1:fd:1e:64:e9:22:dc:fc:24:22:31:
61:7c:5b:6d:5b:a3:0d:f9:f1:15:45:89:3c:c4:e2:24:cc:c4:
45:5e:8d:1c:e8:9c:2d:c1:86:ce:99:1e:46:d1:a8:52:a5:3c:
d1:e0:c1:6c:2e:8a:16:ac:08:ef:c7:11:a8:94:f4:4f:78:73:
00:7e:13:bf:db:30:92:f2:73:98:a4:c3:58:be:0f:93:b6:77:
a6:fd:31:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:40:14 2025 by rpki-client