Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier: Bh3VHdc8aol/7FmOVBYCPqgUDczWQu5aLYvsu9kkaAE=
Subject key identifier: 8E:BF:47:30:8E:84:85:D4:27:89:5D:B2:B3:41:F8:45:98:05:D3:53
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 019652A5076CCE3E796878DC5943B13D8E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number: 1241
Signing time: Sun 20 Apr 2025 10:01:09 +0000
Manifest this update: Sun 20 Apr 2025 10:01:09 +0000
Manifest next update: Mon 21 Apr 2025 10:01:09 +0000
Files and hashes: 1: PhMpSawzWF4ex2C_9UJlDInR9Qw.roa (hash: 8Mwytw2cAElmiryd1WCNePGo22yW+hClbYeRH6uFgoU=)
2: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: PEy0Z5zJoPyG5QTTq50V0uOCXIAqJQOfqauIWU3xoCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a5:07:6c:ce:3e:79:68:78:dc:59:43:b1:3d:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Apr 20 10:01:09 2025 GMT
Not After : Apr 21 10:01:09 2025 GMT
Subject: CN=8ebf47308e8485d427895db2b341f8459805d353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:80:e5:f7:bf:8b:4d:4c:4e:b6:dd:7d:b5:
43:4a:c5:82:79:25:ff:11:6d:a4:fc:15:23:7e:cc:
de:63:79:73:ad:f1:c2:44:83:2c:ea:f7:f4:4d:ce:
ea:ea:d2:94:88:cb:fb:b4:56:7f:5d:73:d2:e8:2e:
c0:9f:47:89:34:a4:2b:2f:ec:3c:a2:85:89:34:bf:
c1:5e:7c:bf:c5:dd:e4:c0:e8:4f:3d:8e:cc:a1:34:
ed:e5:30:5b:c7:5b:6e:c4:f2:61:47:1b:f8:a3:f9:
d9:83:12:2b:cf:ef:13:76:d7:8a:a8:f7:d3:3b:70:
c0:5d:98:67:b0:bc:bd:c6:8c:65:07:72:12:8a:fe:
03:46:40:02:e6:7a:dd:65:3a:bc:32:2a:c3:3c:64:
05:62:9b:6f:bf:60:dd:67:65:01:72:4d:c5:e9:54:
2e:52:8e:20:b9:1d:32:18:0c:8c:db:43:4f:4f:be:
27:1a:50:a0:b6:20:5c:96:25:c5:ab:da:8e:71:d6:
b2:80:a5:fd:18:e4:30:02:55:b1:61:fd:ff:6f:cd:
8a:7c:87:cd:fd:3d:59:25:29:3f:b5:96:e9:08:18:
32:fa:c5:88:31:6a:8a:20:01:59:af:d5:78:fd:b7:
8e:b5:95:b6:e9:cd:db:05:51:d5:7c:c5:9f:7b:72:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:47:30:8E:84:85:D4:27:89:5D:B2:B3:41:F8:45:98:05:D3:53
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b1:45:cf:87:9c:f6:1a:02:c6:54:eb:4d:d0:b0:6a:63:59:
ef:a6:3b:83:6a:61:a5:6a:ec:6a:53:aa:a1:4c:56:cc:0f:03:
4e:1d:e2:6e:2e:90:27:bd:5c:c6:8a:a4:92:b6:26:28:1a:27:
40:51:14:eb:db:1d:d0:4a:67:03:fb:8d:97:2e:17:68:25:b0:
a7:92:64:4f:a4:36:d1:24:a9:c3:1d:b6:b5:2a:fe:c7:c1:58:
c3:77:77:7a:64:6a:1b:31:d5:4e:b1:d4:28:9b:07:19:2a:97:
42:54:5c:df:45:17:f1:37:83:07:74:88:52:01:00:2c:79:23:
64:0b:a8:ab:dc:d6:1e:37:4b:ae:99:6f:64:c0:96:3d:a9:22:
20:56:5b:3f:10:79:61:87:44:b6:42:c7:22:2a:7a:d6:cf:a9:
87:99:e4:f7:90:c3:c0:51:57:1f:ec:43:11:f6:60:45:83:44:
ec:db:42:48:fe:bd:59:cf:07:fa:cf:4c:a7:41:f8:1f:fe:2d:
ad:95:bd:8c:e3:62:04:29:4a:73:6f:fc:af:27:c4:73:02:1c:
8d:6b:f8:ac:e5:24:69:9b:b6:65:9f:db:4d:7a:de:bd:3c:c4:
d9:66:2d:5f:d6:a5:0a:52:87:ca:e9:47:7c:b0:16:d4:5d:69:
76:46:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:20:19 2025 by rpki-client