Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
File: tRYDJr5-XNw1tcA2RBFjzSWkl00.mft (raw, json)
Hash identifier: K8PVxK0NqqnuP9o71jgAwF6cxB1inX5q2yUmkMBZszg=
Subject key identifier: FD:76:BF:D7:CF:70:2D:FF:CB:2B:E7:DE:25:80:62:95:F4:4C:3E:30
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial: 019654C9A2CF03A55E2B1C8976BA861ACB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 20:00:22 +0000
Manifest this update: Sun 20 Apr 2025 20:00:22 +0000
Manifest next update: Mon 21 Apr 2025 20:00:22 +0000
Files and hashes: 1: 8ia-FfbPiHzFeisz5Ltz_iH4NuE.roa (hash: 2vUluYbn/ZjPa8MjPMnro3n0N0IitO4q9I7893CE2pw=)
2: tRYDJr5-XNw1tcA2RBFjzSWkl00.crl (hash: IuytBIAtdW9+teBXStKsu5kLeu1bR4Nu4X6Q3V4KkGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:a2:cf:03:a5:5e:2b:1c:89:76:ba:86:1a:cb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Validity
Not Before: Apr 20 20:00:22 2025 GMT
Not After : Apr 21 20:00:22 2025 GMT
Subject: CN=fd76bfd7cf702dffcb2be7de25806295f44c3e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e0:59:d7:a9:34:68:6e:e5:b8:f7:f2:5d:79:
20:4a:89:da:f4:c9:a5:76:db:f0:93:1c:1d:fa:08:
9a:cb:6a:8a:46:5a:b8:fb:ef:b6:aa:46:8f:ed:7e:
65:d8:04:ae:e7:34:78:3c:1c:b2:56:f4:90:18:27:
ff:4a:87:56:18:96:69:3a:8b:dc:7a:a1:4f:c0:ce:
ca:4f:bb:5d:8f:d5:02:e1:b9:f4:56:cc:3e:30:62:
70:35:47:82:33:60:69:2b:35:2f:b1:e5:53:30:20:
1e:d7:4c:05:e3:e2:99:05:26:b3:95:ec:b7:0c:9f:
ea:25:e8:2d:b0:65:b8:d8:1d:4c:42:d7:27:96:0a:
33:b1:b5:b6:cb:37:8b:14:4a:38:b4:45:d4:7b:cd:
61:1d:93:7f:72:36:34:fe:aa:60:fc:a2:a2:d9:f0:
e9:9b:0d:c9:6a:da:68:56:d3:e1:80:4a:5c:60:81:
42:0e:0f:15:e3:2e:7d:d7:5b:72:ef:52:e7:47:6d:
cb:51:35:62:c4:3d:87:4d:f9:4e:3f:f3:b8:ff:58:
3e:c4:a8:96:e4:0a:52:da:1f:9a:06:f4:60:20:4e:
44:45:72:ff:52:f0:28:c9:29:ea:fd:cd:a7:0a:63:
a2:63:fb:0e:24:3e:05:47:10:7d:fe:17:c9:73:9e:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:BF:D7:CF:70:2D:FF:CB:2B:E7:DE:25:80:62:95:F4:4C:3E:30
X509v3 Authority Key Identifier:
keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e1:59:0f:4a:29:d8:51:fa:a1:ea:e4:33:e7:68:fb:97:0a:
b5:57:97:d6:2e:9d:8c:b7:42:51:31:3f:f8:40:f6:e1:dc:45:
59:5a:9d:37:c9:ed:ac:82:0e:af:33:48:90:bb:8a:2c:77:ae:
a9:e1:c8:5f:56:50:84:07:c4:1c:35:eb:f7:c9:af:6b:55:03:
83:67:ca:1a:23:45:d3:7b:2e:0e:9e:5f:c3:19:d0:0e:4c:80:
90:26:5d:70:fe:c1:76:b7:6d:81:4c:f3:8d:6e:ee:09:e9:c0:
6a:c6:ab:ac:9c:f8:b0:5e:59:ca:ac:66:12:3a:77:c6:ce:d2:
36:6a:8c:a1:aa:8f:fb:36:8f:c7:ee:a9:2a:de:5d:4d:4e:c5:
fe:b1:0f:72:44:5b:86:05:59:53:6c:f3:f8:9c:53:5d:2d:47:
cd:a5:6b:36:fb:2a:1f:7b:f1:53:16:9c:65:09:65:66:6f:78:
18:9b:ae:12:62:2c:9a:3d:b0:33:14:b7:03:27:1f:ba:72:9d:
ed:33:fe:7d:79:72:d9:de:05:11:aa:a7:5a:83:a6:bf:cd:01:
2e:65:b6:9f:50:75:64:92:3b:d0:dd:aa:86:03:81:70:bf:48:
4f:36:40:73:cc:04:ce:b7:d8:e6:12:d8:b1:29:b1:2c:64:44:
30:46:f6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:57 2025 by rpki-client