Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File: tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier: 7qrLODyfrmKP06JMMmludNECzZ5jq6phIe9EfSuSs+I=
Subject key identifier: 98:BB:6E:DE:69:45:FA:7D:92:AD:02:3A:FB:FB:2A:BB:31:3A:5D:DA
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 019654C9A0318EAA4CF1D558911DD6107DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number: 148F
Signing time: Sun 20 Apr 2025 20:00:21 +0000
Manifest this update: Sun 20 Apr 2025 20:00:21 +0000
Manifest next update: Mon 21 Apr 2025 20:00:21 +0000
Files and hashes: 1: fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa (hash: xj9vjyKVHbKjwLJzRwcUb2ujBs2KI8YOtyKmg5bMiko=)
2: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: zAICYif5av2muavOS9qwroU+jMOuyJ58I6zuM8a3B9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:a0:31:8e:aa:4c:f1:d5:58:91:1d:d6:10:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Apr 20 20:00:21 2025 GMT
Not After : Apr 21 20:00:21 2025 GMT
Subject: CN=98bb6ede6945fa7d92ad023afbfb2abb313a5dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:c8:f7:e6:07:eb:d9:dc:3e:95:62:93:b2:
f2:63:7a:1c:fd:14:d4:f4:92:0b:d8:88:f3:46:2b:
40:d0:46:fb:9e:f5:b8:12:d0:55:18:8e:88:b3:b5:
ef:cd:18:a0:bd:24:31:f2:e5:81:f0:cf:8a:0f:5e:
f2:59:fe:19:a6:20:8f:99:13:54:c4:94:fb:01:66:
e2:85:f7:4d:6d:c3:48:d1:c8:41:9d:93:78:17:99:
80:7a:fa:5c:ff:33:cd:09:79:43:64:27:20:26:86:
b0:75:b7:46:ea:f9:72:08:6a:cb:19:19:c3:66:2c:
19:91:4a:fa:3b:06:7c:4d:29:61:0c:dd:0f:70:19:
07:c2:61:48:98:56:12:a0:2b:ff:81:fc:28:1e:aa:
0c:c3:dd:4d:41:0a:8c:4c:a0:b0:b9:7a:28:c5:e9:
3b:1f:e5:89:0a:81:3e:97:a8:00:43:db:38:21:d8:
e5:10:a2:e9:8e:d8:4b:f7:49:fa:fb:fe:d5:f7:d2:
09:32:64:bb:fe:98:36:30:99:c5:e5:10:6c:5a:aa:
5d:fc:33:34:8e:89:87:cc:15:c3:4b:66:35:37:9a:
35:a4:76:9d:84:af:a9:a2:d5:4a:d2:81:c4:32:a5:
37:4d:e9:d7:70:0a:5b:ce:34:af:0b:9e:3b:a7:82:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BB:6E:DE:69:45:FA:7D:92:AD:02:3A:FB:FB:2A:BB:31:3A:5D:DA
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:40:fa:6f:90:5b:9c:7b:0b:c4:1b:d6:8a:e4:1c:47:9c:
6f:7a:de:f6:b9:88:41:2d:a6:c5:32:b6:c1:35:b6:ec:2c:ab:
68:e5:04:eb:5f:54:38:ea:c6:10:61:0b:88:8a:45:b4:eb:af:
3c:b6:4c:80:5d:73:7d:76:75:a0:8d:4b:90:46:03:57:67:ff:
20:b7:d0:7d:55:2c:c1:7e:f3:b5:41:ef:08:2c:b1:93:d5:38:
5c:50:1d:34:11:ad:1f:f8:13:d3:b4:df:ea:3f:5a:31:5f:b2:
cb:25:c5:bd:76:7d:f3:f9:86:fc:b3:62:6d:ce:4f:07:6d:70:
6a:42:32:20:2a:4e:b7:09:6d:6a:d2:47:c1:23:6f:db:6b:4e:
b9:61:a0:ca:df:c5:6c:0c:0f:ba:ef:c3:ff:a4:76:13:94:74:
9c:fd:ba:f9:32:5c:81:21:1c:67:9a:ed:90:c0:45:95:3f:bc:
1e:92:ae:e4:cb:96:9e:5c:fa:e1:d0:6d:d0:c9:a2:80:47:f9:
c3:a5:a7:6d:ec:07:10:39:54:92:14:04:a0:76:85:22:56:04:
a2:d5:06:8e:d1:62:94:10:02:b9:09:85:ec:4b:76:9f:e1:61:
e3:eb:8e:71:16:c4:d7:47:ca:ae:84:18:7c:57:0e:c0:44:53:
e4:c6:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:06 2025 by rpki-client