Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: 6EFjqGBclWHt428560Kpu9L60F/XKUhSb+PCKk4bsJk=
Subject key identifier: 6A:42:34:2C:99:A5:56:62:56:4A:51:3B:46:91:36:81:D3:2A:9A:88
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 019656135E2A2F6A2C8A4EADE34F2F256247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 02:00:31 +0000
Manifest this update: Mon 21 Apr 2025 02:00:31 +0000
Manifest next update: Tue 22 Apr 2025 02:00:31 +0000
Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=)
2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: YDvwqu+YP8NAfLRa2Qs58AUMQBpf8HHItB5l2WxxxRo=)
4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:5e:2a:2f:6a:2c:8a:4e:ad:e3:4f:2f:25:62:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Apr 21 02:00:31 2025 GMT
Not After : Apr 22 02:00:31 2025 GMT
Subject: CN=6a42342c99a55662564a513b46913681d32a9a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:6c:5e:e0:14:bd:ee:75:55:19:a1:7a:1f:
71:a6:b5:fb:e9:62:fb:ed:d9:ac:7a:cd:63:f9:6b:
9d:99:28:ca:7d:20:0c:fd:eb:80:69:c6:57:59:02:
c2:b1:db:9d:6c:6a:45:95:ac:13:dd:08:d4:71:04:
e1:6b:a0:f7:9f:71:68:fb:f2:38:32:22:03:07:bd:
dc:d4:22:6e:5d:ba:38:4d:ba:f6:0c:fa:13:20:63:
a3:50:8d:b7:65:db:a3:cf:2e:76:db:c1:60:36:73:
f4:c5:b0:bb:d4:ed:34:84:06:1b:59:11:08:b4:87:
39:c0:25:96:9d:3c:e5:ab:ec:f6:e1:bd:5f:b7:f0:
7c:70:64:3d:a3:c4:4f:64:c9:23:1b:c8:9c:aa:53:
bf:78:16:a1:11:e0:4a:90:75:84:7a:30:92:f8:16:
df:4c:37:9c:74:1b:c9:5a:9b:90:b2:c4:ff:f9:cc:
4c:ee:b4:53:53:17:aa:1c:61:24:f1:e4:17:18:17:
8d:d2:80:28:25:00:64:2f:5f:45:6d:43:8f:88:3f:
a0:3d:fc:81:60:7c:9c:92:79:a0:c1:6b:0b:57:2f:
a9:43:18:82:4e:8c:06:32:db:6a:38:ca:96:f0:65:
97:6e:9f:73:b8:b5:31:0d:90:cc:32:23:69:f0:04:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:34:2C:99:A5:56:62:56:4A:51:3B:46:91:36:81:D3:2A:9A:88
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:eb:40:81:b7:a2:ac:a4:f4:c0:93:ed:33:f5:bd:36:29:87:
41:88:99:88:22:44:ff:6d:08:a2:f3:aa:fc:a3:db:2a:ca:18:
e4:ca:a6:ba:6c:1e:da:6f:df:0f:2e:d1:8e:34:dd:fe:34:83:
d2:26:73:f7:71:9e:2f:06:ec:20:dc:d9:5f:e5:c7:4b:49:b3:
58:01:8b:94:e6:49:6d:eb:e0:16:ba:c1:42:2b:4b:0b:99:a0:
dd:b4:af:f5:f0:5c:43:4d:14:8c:2d:4f:93:4f:0f:e7:2a:d8:
1f:48:68:a7:a1:a0:ee:b2:81:46:11:e7:fc:94:85:63:29:00:
f7:79:d5:94:79:ea:81:df:7e:e0:95:99:66:92:86:16:4d:6c:
e6:80:81:54:65:80:de:2f:66:70:f6:12:52:4d:04:29:75:29:
2a:d0:3b:2a:d5:52:71:f7:b7:15:cb:6f:dc:c5:54:69:dd:97:
e7:82:d4:65:a2:59:3c:5e:d0:81:10:c9:fe:d0:c2:f2:26:e9:
e5:38:be:75:64:06:69:b5:47:99:ad:44:1e:39:bd:57:b5:e7:
6f:b7:25:d8:86:b5:62:8e:ed:49:01:73:8c:ae:41:8e:43:97:
34:4b:7f:6b:de:c7:56:1e:47:8e:27:db:7f:a3:4e:ed:b8:ee:
bb:6f:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:38 2025 by rpki-client