Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
File: Tom7FOgJr_PsljCL2a6GUafndio.mft (raw, json)
Hash identifier: dJ4NHNJ3l/kqk4c91xia4fU0hpIL0vhVzI6wEzYFa8w=
Subject key identifier: DA:C5:A8:28:3B:FF:F3:A8:E0:EB:60:7B:0C:52:3A:87:EB:B8:C0:3D
Authority key identifier: 4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
Certificate issuer: /CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Certificate serial: 019655A6008D64DF794AA5B205C9B6E6E0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 00:01:04 +0000
Manifest this update: Mon 21 Apr 2025 00:01:04 +0000
Manifest next update: Tue 22 Apr 2025 00:01:04 +0000
Files and hashes: 1: Tom7FOgJr_PsljCL2a6GUafndio.crl (hash: 1UfexG4PAFK/SZd5dnkYqkJXVeRt5Amq3MVwayhZnyA=)
2: fxuqWXx_O_zewgAff6HXjyvgKp0.roa (hash: cm4JBhg0Zq8hHGX0z/7BWc/vnIZVK86NCDFtwq+RrhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:00:8d:64:df:79:4a:a5:b2:05:c9:b6:e6:e0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Validity
Not Before: Apr 21 00:01:04 2025 GMT
Not After : Apr 22 00:01:04 2025 GMT
Subject: CN=dac5a8283bfff3a8e0eb607b0c523a87ebb8c03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:d4:d4:9f:08:41:ec:16:37:c1:2b:dd:f9:
e7:f2:0a:66:9b:c5:7e:30:6a:57:f8:ef:54:20:20:
f2:ec:ae:e7:52:e8:27:5d:e3:b3:92:e4:be:d9:c9:
4b:8e:34:21:27:72:95:47:d1:65:95:29:c6:43:5a:
fa:7b:53:d9:d7:40:ea:e9:f4:d2:28:30:fb:40:cc:
d2:4e:b3:de:aa:8f:41:94:15:03:10:fb:33:b4:da:
9d:68:eb:7a:8e:7a:96:e1:d5:d7:d4:7d:c3:f4:14:
bc:47:9f:66:58:d7:e7:4f:2b:1a:a2:a4:87:7f:b3:
d8:20:fb:27:d5:ff:cb:8d:06:3e:53:f9:d1:ac:7c:
10:14:7f:0b:be:81:12:e6:ea:f5:81:d2:81:78:69:
e7:9a:a9:d4:29:1a:3f:d7:e4:88:29:d6:e3:d3:2e:
d1:9d:8f:4d:2d:fa:75:a7:c4:6a:3a:d5:e8:8a:20:
12:f7:f6:2b:a9:12:10:6c:0a:bc:01:ce:5d:fe:af:
7a:1d:18:e7:bd:4b:c8:45:44:be:af:71:aa:0a:54:
ee:16:ef:0a:84:a1:2c:e2:6c:be:81:aa:6f:9c:d3:
5d:93:82:d0:d5:bd:65:b8:5b:04:23:23:0f:c3:48:
e0:3e:34:50:9d:27:6b:26:6c:47:f1:2c:32:a6:09:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C5:A8:28:3B:FF:F3:A8:E0:EB:60:7B:0C:52:3A:87:EB:B8:C0:3D
X509v3 Authority Key Identifier:
keyid:4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9a:d5:df:dc:a6:ba:0a:f5:d9:d4:30:20:5c:ec:51:6b:6d:
4c:e0:43:a8:cd:c8:07:b5:26:14:24:ac:c8:d6:15:04:d6:6c:
c4:6e:b8:b3:02:72:ed:09:e7:0a:90:af:89:86:3e:79:94:70:
3a:2f:11:79:5f:23:b5:3c:36:a6:a1:3c:17:f9:fd:2d:e9:3e:
48:de:65:b6:f7:af:ac:d9:49:fd:a9:7d:97:5c:0e:9e:87:a9:
94:47:a1:3c:0c:03:a4:96:16:d6:ad:ae:3c:ea:1c:f0:91:89:
7b:f3:f9:54:2b:6d:fe:d9:4e:b3:ed:12:6c:8b:46:81:3f:a0:
6c:7e:79:c3:45:09:ee:c6:a6:31:77:8a:54:d4:9c:1e:9d:11:
f1:64:e0:25:4c:9e:11:ea:0b:90:a1:4b:9a:05:71:09:7d:ed:
1d:64:60:4b:a3:50:ec:28:ce:8a:61:08:8c:29:dd:c7:23:2b:
64:14:ee:a4:a8:35:ca:c6:26:74:70:61:4f:a7:e3:dc:7a:bf:
f6:7a:33:23:c5:bd:9c:7d:70:ce:49:51:b1:55:b5:de:09:f1:
e2:ab:a5:23:20:b6:d6:98:89:4e:9a:a2:4d:e5:96:e6:60:be:
c2:9c:4f:b2:89:d1:be:eb:d3:ef:5e:3d:d1:5f:59:8b:57:3a:
8e:89:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:34 2025 by rpki-client