Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: Y/r4dbD8bqcB+6ETwaz2iCK4KwOkkRBg8B9bXFoBRFw=
Subject key identifier: 97:BB:B1:D6:ED:DD:97:2A:A1:49:2A:8F:B6:2A:45:1D:87:37:58:51
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 0196564A771021A31F37BB35F5777D93C5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: E0
Signing time: Mon 21 Apr 2025 03:00:42 +0000
Manifest this update: Mon 21 Apr 2025 03:00:42 +0000
Manifest next update: Tue 22 Apr 2025 03:00:42 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: DMd0yaxJw9RZgZJP8DWxVulLKMgJFKgdKtbbJ/1+LGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:77:10:21:a3:1f:37:bb:35:f5:77:7d:93:c5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Apr 21 03:00:42 2025 GMT
Not After : Apr 22 03:00:42 2025 GMT
Subject: CN=97bbb1d6eddd972aa1492a8fb62a451d87375851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:d5:af:20:33:d0:a5:a5:0d:63:e4:a5:2d:
16:78:62:f3:6a:1a:41:bd:00:75:6e:36:9f:13:6a:
b1:e7:5b:7c:53:98:87:61:53:14:29:95:bb:30:e4:
b2:5b:8d:85:a1:2c:da:92:8c:9d:13:2b:5d:89:e2:
d5:0d:e7:09:a2:04:2f:4a:13:85:95:da:ad:c0:43:
10:13:5e:eb:71:4f:58:61:aa:41:0f:ab:1e:50:42:
a5:08:eb:c8:b9:1d:68:98:d4:10:23:9e:91:cf:25:
59:33:1b:c8:77:d6:c3:fb:66:60:3d:9f:b6:ee:58:
7a:ea:4f:c4:80:d3:1c:1d:17:08:17:9b:cf:bd:f3:
51:9e:04:b8:2c:99:7d:51:8b:3c:e5:7f:68:95:0b:
f8:02:41:14:16:62:3d:23:dd:dc:92:68:25:1a:b6:
43:37:8a:09:75:e4:7c:95:ee:26:47:1f:ea:e0:52:
46:f2:2a:e9:60:6d:a1:03:ab:d3:f3:65:50:96:a2:
33:b8:d1:e8:f5:57:7d:b5:1e:21:c7:7c:4d:c0:13:
67:04:63:17:fc:e3:f3:aa:14:35:6d:ec:88:8b:f3:
a4:45:37:76:bb:3a:94:af:8d:8c:cf:70:c6:0b:8f:
c6:47:4e:27:24:89:97:83:c1:43:09:5a:19:ac:af:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BB:B1:D6:ED:DD:97:2A:A1:49:2A:8F:B6:2A:45:1D:87:37:58:51
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:68:02:8c:8f:7b:87:74:b8:09:89:3b:9a:19:f8:29:0a:
53:30:52:d1:fe:f0:7a:fb:14:a0:89:1f:59:42:35:16:59:b5:
1b:a4:4d:3c:7e:bc:32:b4:cd:d0:37:38:e7:69:9e:31:00:64:
4f:2e:80:a0:5c:13:62:9c:14:b2:fd:57:93:29:ab:c0:3a:39:
40:31:95:13:e6:8a:e4:44:5d:b2:e9:1a:2a:22:cc:4a:29:22:
1e:b8:e7:c6:8c:a4:87:0f:a6:3e:2d:83:a9:02:c2:b3:12:df:
6a:09:d0:fb:20:4e:3c:3c:26:81:4f:69:a3:68:a9:aa:12:cb:
95:0a:52:a8:0a:b9:44:51:0b:f7:7d:99:22:e3:5c:d2:74:8c:
97:e6:77:fb:81:61:9f:70:ac:44:74:74:46:a1:f3:21:a3:81:
a4:db:5c:5b:95:28:13:74:f8:ad:a7:a4:9c:ee:2c:ef:2e:4e:
84:4d:cd:7b:6f:f0:08:c6:69:bc:46:60:2e:5c:23:3d:1e:f9:
64:f8:49:47:dd:48:9f:54:19:a4:18:7c:da:8b:ea:59:29:73:
b6:00:23:b5:a6:c8:20:b8:3c:bd:0b:ac:66:d6:13:77:8c:5c:
fc:77:54:39:88:f4:fe:e5:93:df:86:a6:5e:1a:33:c6:42:05:
10:e2:50:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:12 2025 by rpki-client