Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
File: trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json)
Hash identifier: qO86UyHdLzJ3m7CFjTuWBuGVe50DgLhnsnJU4VcRizM=
Subject key identifier: B0:76:2E:98:A8:BF:22:3A:BE:6B:09:23:65:84:1D:90:F7:90:28:C6
Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d
Certificate serial: 0196556E8605761D36E12ED95804180FE377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
Manifest number: 083E
Signing time: Sun 20 Apr 2025 23:00:28 +0000
Manifest this update: Sun 20 Apr 2025 23:00:28 +0000
Manifest next update: Mon 21 Apr 2025 23:00:28 +0000
Files and hashes: 1: _oI-Lkb0IuWy-UHIoAbDqvwfl1s.roa (hash: mRZXCcW1ghBXMTwSw7NYgVRMYeyGjl4gH8juqLCzVks=)
2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: 9IpeNSt2qPjwM5kYKQK04rQU1ko64qeFkR+IMTgvz1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:86:05:76:1d:36:e1:2e:d9:58:04:18:0f:e3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d
Validity
Not Before: Apr 20 23:00:28 2025 GMT
Not After : Apr 21 23:00:28 2025 GMT
Subject: CN=b0762e98a8bf223abe6b092365841d90f79028c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:f2:77:76:43:ec:40:b5:c2:bf:46:2e:dc:
4e:80:c5:69:d8:0d:50:b0:38:dd:80:15:34:3a:95:
1f:d3:95:64:8e:cb:97:a7:42:ba:69:39:e5:00:6c:
58:6b:b8:ec:e5:ef:0c:7d:76:e7:44:53:56:66:2f:
39:3a:50:6a:75:57:64:e9:a0:a1:9a:06:32:9f:85:
06:3a:b4:e5:9e:1e:c9:b0:69:ec:66:87:e8:a9:65:
38:8a:16:b8:19:c5:09:ac:a9:c4:28:e1:2b:64:17:
e0:09:3b:70:77:4f:5d:be:e3:d5:cb:24:8a:ba:43:
35:d7:54:6d:9a:83:48:ba:e2:24:b6:e9:61:52:82:
27:e1:32:04:5d:74:50:04:ce:a5:b3:69:f3:76:e0:
cd:65:a9:9a:ff:4c:00:a5:50:f3:e6:16:69:c2:57:
a6:b8:b4:24:a1:b1:d6:d8:49:9e:61:70:4b:21:c7:
df:21:f7:8b:a9:ef:10:18:78:20:6d:ff:7a:f3:10:
76:0d:0e:8f:14:e6:88:17:1c:91:28:25:c0:53:5e:
29:e2:fa:b2:fb:e9:7d:4e:32:10:44:42:69:7c:b1:
51:2d:64:a3:02:6c:3e:a2:0a:1c:c1:47:e9:3f:40:
4e:9b:6e:b6:e5:6c:0c:ba:95:5a:9f:47:de:17:56:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:76:2E:98:A8:BF:22:3A:BE:6B:09:23:65:84:1D:90:F7:90:28:C6
X509v3 Authority Key Identifier:
keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ad:01:ba:33:f6:2c:41:c8:f1:54:ad:5a:16:0b:65:54:60:
90:3a:a3:8e:49:44:3b:08:8d:cf:7f:62:c0:4f:08:c4:e5:8f:
fa:bc:f0:14:ee:ea:d3:ce:9a:75:41:05:8b:62:bb:4a:b8:23:
eb:d4:45:1d:64:6c:e7:34:db:d6:ce:f1:cf:5a:b9:26:2f:15:
73:5b:94:5c:d1:50:3d:c1:65:92:eb:23:03:7d:50:e9:07:3a:
21:54:8c:42:11:c4:46:b9:2a:47:ba:ee:56:e3:83:53:5c:50:
a2:e9:63:a7:11:ca:20:ba:a5:cb:92:d1:52:62:de:a2:01:d1:
5d:f8:a4:7e:9b:21:22:24:5e:93:a8:71:b6:00:7b:31:d4:4c:
6c:04:ae:03:d7:dc:ea:40:46:a7:c2:a7:3f:dd:a9:b7:ae:a5:
86:49:79:1a:e7:49:ab:3b:8b:b0:5e:9c:58:ed:4b:bf:32:1b:
1e:95:f3:9d:8a:cb:5d:90:c7:30:81:6a:88:17:51:22:aa:75:
18:f4:91:93:39:aa:57:fd:f0:13:6a:3f:f6:32:69:aa:93:72:
7e:0c:a3:95:18:57:b6:f3:e8:e3:05:cc:f2:e7:90:31:cc:43:
19:9c:a1:89:47:75:3e:66:71:b7:cc:b6:0b:9a:2f:60:55:50:
36:59:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:10 2025 by rpki-client