Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: 6rwIFRbAh5ioVFezSZqUlekTrbYAeWh1XvPUwfesg6o=
Subject key identifier: FB:EB:5D:79:96:F9:23:26:86:54:1B:BA:DF:43:B3:02:C3:D4:4C:37
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 0196BB5AD8F450CF4673AF59C09CF5EA9AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 18:00:15 +0000
Manifest this update: Sat 10 May 2025 18:00:15 +0000
Manifest next update: Sun 11 May 2025 18:00:15 +0000
Files and hashes: 1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: XqyenyY/Y1PK7pLLy7gSKM/GlBUr0at8YEtQUhQgC74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:d8:f4:50:cf:46:73:af:59:c0:9c:f5:ea:9a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: May 10 18:00:15 2025 GMT
Not After : May 11 18:00:15 2025 GMT
Subject: CN=fbeb5d7996f9232686541bbadf43b302c3d44c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:f0:bc:bd:e7:e5:e7:04:d1:5e:c3:d0:57:
92:b2:5f:e0:64:1e:8a:64:7a:b4:ad:17:5d:f5:e7:
06:71:e5:25:6a:b3:5c:af:c5:f1:1c:ea:c6:dc:08:
b8:00:24:f0:60:5c:0d:db:2b:8c:94:41:35:9d:cc:
b2:f5:da:de:2f:07:1b:06:e8:22:43:20:8e:f0:9e:
bd:87:a8:10:d2:e5:65:15:9c:2b:07:f5:ad:2c:a0:
ef:1a:ed:4f:d1:a6:b6:aa:95:41:48:6a:87:55:18:
9a:54:7d:4a:ec:f0:34:d2:7f:55:c9:87:18:86:60:
a1:f5:9a:01:ac:a2:24:23:d1:d2:61:e7:e9:b6:4c:
d9:0b:e4:94:75:d8:b5:32:5c:b9:b4:87:bd:bb:f3:
19:3a:76:97:cf:2b:bd:c2:7b:54:d0:ca:00:8b:c6:
dc:ab:88:21:ad:2c:0b:3d:f4:48:e2:6b:7b:0a:57:
ed:8f:44:1c:a3:f2:44:ae:0e:a6:7d:9a:34:c7:dd:
58:de:6c:03:bb:bc:dc:f4:04:d3:ce:87:15:3c:87:
12:66:b7:a8:17:62:8f:a9:14:6d:0c:d6:ad:80:ca:
a4:37:a8:28:03:d3:c5:aa:ad:ff:e6:75:48:ec:b5:
01:9f:c2:83:5e:87:76:bc:58:fa:ce:27:30:97:f9:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EB:5D:79:96:F9:23:26:86:54:1B:BA:DF:43:B3:02:C3:D4:4C:37
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:91:71:dd:f1:42:41:ba:26:7c:7f:e9:68:54:cd:a5:45:
cd:d1:61:8c:0e:b5:87:2b:8d:10:8b:61:36:b7:f5:37:74:5a:
b2:2f:11:7d:67:47:96:b8:db:af:c0:22:ee:40:10:78:b4:89:
03:88:23:af:94:b8:4f:de:71:d9:e5:fa:71:0e:33:c7:6f:68:
89:49:09:f5:d2:07:93:4b:95:f8:97:06:39:c3:af:8e:fd:d2:
50:77:19:9e:a2:58:8b:54:6a:c7:28:26:9f:b4:9c:7b:e8:a4:
57:81:6a:be:86:42:68:4b:d9:6a:b1:45:a9:74:6c:55:d9:4e:
9f:b6:b3:46:4a:b3:00:11:8f:dd:79:41:0d:e7:12:9e:04:bb:
06:75:bf:40:38:46:6f:6a:43:b6:39:15:6e:25:9e:18:a9:15:
95:13:21:13:6c:7b:82:27:49:58:2b:c8:06:2c:77:c7:b6:f7:
23:fe:f0:a6:37:aa:02:a9:68:57:4d:16:15:16:9f:e1:fd:86:
d9:cf:c0:b4:1f:72:b4:53:bf:41:91:63:43:aa:2d:96:d8:a3:
53:53:8d:78:9e:61:00:79:de:c5:72:fd:0a:b9:52:d2:e7:de:
cb:a3:7b:69:41:43:66:8d:5b:cf:ce:ef:40:ff:46:fd:6f:ab:
c6:fd:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:03:34 2025 by rpki-client