Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
File: tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json)
Hash identifier: ZdSFqR2qJWAyzQ+/9BGUXgt8i2MGogQwucj8xgafo30=
Subject key identifier: 69:4D:F3:A5:2B:7C:B1:ED:70:87:B4:AE:77:5A:42:DE:03:21:9E:21
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial: 019653B77C45391D06A0DF9C4FF9BB8B2C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
Manifest number: 1313
Signing time: Sun 20 Apr 2025 15:00:55 +0000
Manifest this update: Sun 20 Apr 2025 15:00:55 +0000
Manifest next update: Mon 21 Apr 2025 15:00:55 +0000
Files and hashes: 1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=)
2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: BF37EfgvXT1wD/UrCFpAJaSs57s9AqgoVwOa5ULZyn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:7c:45:39:1d:06:a0:df:9c:4f:f9:bb:8b:2c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Validity
Not Before: Apr 20 15:00:55 2025 GMT
Not After : Apr 21 15:00:55 2025 GMT
Subject: CN=694df3a52b7cb1ed7087b4ae775a42de03219e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ff:cd:80:95:ce:de:b8:49:14:cd:07:77:26:
f0:5d:a8:4f:da:9e:5b:99:d0:75:4b:16:22:c7:9a:
34:20:7c:a2:7b:68:d5:b7:92:b7:3c:00:3b:ca:80:
89:31:2c:bc:a1:87:cb:18:67:49:b3:0a:5a:20:90:
22:25:a9:81:72:6f:c6:85:29:5c:0d:92:6b:dd:7e:
ae:b1:ef:c8:8f:11:17:7c:3a:c1:f6:92:b1:d1:b9:
b6:b2:05:77:8c:47:bb:d3:47:89:13:19:0d:1f:2b:
37:29:12:c3:33:73:54:e4:c9:a7:82:3d:88:79:fa:
db:bd:1d:a8:45:46:4e:4c:4e:f5:13:15:26:a6:bc:
c3:bf:c9:6d:f4:87:0a:cc:6a:c0:86:ff:58:5f:5e:
e3:09:1d:aa:25:8e:bc:cb:21:9b:64:21:94:6c:85:
60:ed:8f:0c:bd:bb:38:f5:55:31:36:6c:36:11:24:
b3:05:d4:1a:27:31:5d:05:04:8c:c8:e4:25:fb:b0:
0f:6d:37:68:ed:b1:62:da:41:80:d7:cf:c4:dd:10:
9a:a5:22:7d:ac:4b:fe:8f:54:4f:2a:c9:7d:12:c2:
60:cd:7b:53:08:3f:5c:bb:c4:2e:41:84:0d:79:09:
91:60:3d:b6:8b:8e:7d:37:b9:1f:86:30:e6:2d:fc:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4D:F3:A5:2B:7C:B1:ED:70:87:B4:AE:77:5A:42:DE:03:21:9E:21
X509v3 Authority Key Identifier:
keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:66:58:6a:bd:12:41:5c:99:32:50:73:d9:8b:12:bd:01:b2:
8b:d2:bc:6b:ea:35:a0:c5:5f:8d:57:e4:76:c7:13:b4:89:c6:
17:4c:ff:e5:a8:00:56:6b:88:3c:24:65:8c:76:65:7e:6a:2e:
f8:d2:09:ac:34:51:99:f1:a0:75:46:0e:fc:47:87:3e:66:36:
fc:37:ce:76:44:4f:34:b6:35:ae:1a:c3:92:3f:dd:b3:7c:c0:
d7:bc:bf:b2:44:19:73:be:0a:30:32:7b:cf:f2:0d:b5:5b:62:
e7:df:e6:6c:af:19:30:a5:15:8c:3a:44:e1:62:93:ac:80:19:
28:60:07:00:7e:44:6b:be:18:01:3d:10:c2:8e:62:b3:fc:76:
de:f1:dd:3e:b1:2f:d7:49:67:72:dc:1f:74:df:80:15:6d:4e:
5b:94:da:3a:b6:5e:44:41:ee:40:64:44:4d:14:b8:d3:93:59:
70:1e:09:ae:4c:97:9f:54:63:4d:ee:14:e3:8b:fb:12:41:e6:
d5:15:4f:ef:b8:53:45:0c:ea:bb:1c:bf:41:fe:4f:20:91:db:
40:7a:33:d6:c8:70:11:b6:92:45:e7:47:a7:88:ff:51:63:c9:
64:76:4d:08:30:94:ba:a3:5d:c4:73:72:ba:84:6c:28:53:22:
ac:ef:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:51:39 2025 by rpki-client