Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: Su5dYqNRpj7Amr25YlnaNKie+W9kn564F/D7FwYGfVQ=
Subject key identifier: 99:67:08:C4:C2:F4:65:78:AC:E7:5E:E2:EF:E5:22:BD:1E:00:D3:98
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 0196285FFD3722477FDB28D0386B10495C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 14E7
Signing time: Sat 12 Apr 2025 05:01:41 +0000
Manifest this update: Sat 12 Apr 2025 05:01:41 +0000
Manifest next update: Sun 13 Apr 2025 05:01:41 +0000
Files and hashes: 1: HhltdqvEvMp1haFhX3fIv16Ni_Q.roa (hash: NacxfWEhGCqjQzcJPOYmDDogo7Rv0RM9x208Jen3m0s=)
2: sI2dGOEr8nZk6D1YNbEa7wlaZyM.roa (hash: kx5EWM4e9UqILncO7G7gUfdu6rl4RFiOFynpDnpX02c=)
3: sxbnQp-HZOAWEFzphM2K1lCVnVg.roa (hash: kEKMwrabqx6d8HV9sni4rJcCg8Olec1gaFW1f6LNEvE=)
4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: 0lUkA53otLG/wCnHmYif7p/Fgq8xWQRpCf9gJy8NoH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:5f:fd:37:22:47:7f:db:28:d0:38:6b:10:49:5c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Apr 12 05:01:41 2025 GMT
Not After : Apr 13 05:01:41 2025 GMT
Subject: CN=996708c4c2f46578ace75ee2efe522bd1e00d398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:be:b4:fb:97:2d:50:bf:7a:9c:e5:2a:86:84:
5a:e9:67:c2:97:2b:10:a4:99:57:7d:56:38:4e:f1:
2d:1b:b9:8f:36:c5:ad:ee:b5:51:9c:e2:7c:a4:77:
4a:9c:30:a4:1d:5a:e7:91:7e:3f:da:7e:6a:ec:89:
f1:f8:96:19:51:9e:f7:25:e1:3f:58:3b:3a:1c:e9:
ad:f4:4e:d9:ce:64:b9:e7:cd:f6:23:4e:85:54:6f:
0e:b8:43:f9:88:4c:06:a9:72:2f:9d:59:89:5b:07:
4b:c4:85:5c:7d:b4:34:74:a9:06:39:9a:cc:e2:dc:
6c:a7:0a:9f:ef:cd:f7:fe:b9:30:d1:e2:8a:96:57:
9c:0a:de:30:df:5a:fa:ea:a1:91:ff:d0:cf:ef:87:
c9:5d:b4:4d:dc:5f:a7:9a:19:69:7b:72:ec:e8:62:
2a:a0:cc:06:0c:9b:55:13:3f:9d:35:a0:42:b3:97:
1c:c2:08:12:7d:2c:5c:af:97:db:15:34:af:ba:7d:
22:77:04:37:5b:40:d0:c5:08:89:f8:25:1e:bb:aa:
d7:58:37:40:d2:ec:eb:5f:42:7b:81:47:d5:e4:08:
cd:39:bf:78:59:b3:5f:21:c7:53:4a:a7:83:ab:17:
1f:ff:ca:bf:15:7f:06:f2:8d:8f:18:4d:11:7c:16:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:08:C4:C2:F4:65:78:AC:E7:5E:E2:EF:E5:22:BD:1E:00:D3:98
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cb:e9:9b:5b:ba:0c:85:c1:e9:81:67:e5:66:41:02:05:d4:
01:39:e9:f9:1d:3c:2b:ab:bb:93:de:e7:b3:f2:79:3d:5b:5a:
a8:ba:40:1e:1d:ff:e7:d8:9d:bc:33:fe:31:82:13:bd:27:69:
22:19:dc:8b:d7:64:27:6c:a7:03:4e:79:31:49:9f:08:5b:2e:
1e:9c:b6:4d:c5:51:4a:7c:53:41:cd:25:cb:60:91:ad:58:4b:
18:b8:69:56:6e:f2:ce:7c:fc:53:2a:1f:5d:ca:64:c0:e5:17:
18:2e:b1:f3:30:eb:4d:aa:54:f8:82:f2:80:c8:c3:64:8b:81:
10:0c:2a:ab:41:98:f5:7b:6d:9c:e5:d3:5d:53:90:06:b6:80:
e9:61:80:81:5f:19:6c:b1:35:1f:1e:4a:e6:06:05:c9:de:37:
d5:7b:19:81:e4:88:ac:82:4e:56:b8:cf:83:43:38:9a:6a:30:
4e:45:11:0c:ef:00:1c:a4:ca:bf:d8:57:07:11:b7:e1:42:39:
2d:cc:b2:ce:27:33:df:35:b9:85:8e:bc:c1:64:43:54:0a:40:
80:07:9f:8f:eb:8e:48:59:14:4f:05:dd:5a:92:d4:b4:a5:64:
9d:8e:70:99:9a:c9:d3:f7:e0:e2:55:ce:87:b0:96:c4:65:de:
21:fe:75:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:20 2025 by rpki-client