Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: IYj3QAbvJ3k0AFD2tW/ZhWrMTpPUBrGgZSW4VdBxJjA=
Subject key identifier: F0:ED:F7:63:20:38:06:C8:7A:B2:20:E3:5D:43:32:21:BD:91:FC:D3
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 01965A951D5BF35B9129820BD91F35C9818D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 1492
Signing time: Mon 21 Apr 2025 23:00:43 +0000
Manifest this update: Mon 21 Apr 2025 23:00:43 +0000
Manifest next update: Tue 22 Apr 2025 23:00:43 +0000
Files and hashes: 1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: gp1aAE7RVkqgtLBLIScpUHliS60bFcwaYBwEn5PSKgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:1d:5b:f3:5b:91:29:82:0b:d9:1f:35:c9:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Apr 21 23:00:43 2025 GMT
Not After : Apr 22 23:00:43 2025 GMT
Subject: CN=f0edf763203806c87ab220e35d433221bd91fcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:c3:9f:b0:50:de:42:4e:d2:77:43:46:c6:
02:f6:33:cf:25:70:8b:b3:bb:4c:3c:c6:27:e4:ac:
9d:cd:57:c0:ee:1d:05:0d:89:79:99:dd:b4:14:c0:
d5:5a:cc:63:f6:ca:18:25:13:ca:54:59:c4:81:e4:
0c:57:89:a6:c7:f5:7b:3f:ec:6d:45:13:13:e0:60:
d0:a8:eb:bf:ee:79:2b:d9:cf:65:24:2f:3a:1e:24:
f0:b3:a9:f6:59:32:51:d1:d0:1d:3c:3b:3b:64:09:
41:ef:11:f0:70:60:2f:5a:c0:f3:66:fc:82:bf:fc:
8f:c3:42:36:ee:5b:e7:3f:4a:d0:d5:69:5d:bd:5d:
e2:d1:9e:70:d2:16:06:9c:c2:f9:a5:34:21:9e:79:
a4:ba:70:f7:2d:31:5f:8a:35:90:4b:ae:8f:51:23:
36:d6:f0:1b:bf:15:88:48:de:88:5b:79:78:1b:e0:
f6:21:72:95:01:0d:7d:f8:0d:19:33:8c:57:ec:f6:
70:5e:90:6a:e6:8b:77:ac:7a:d8:d9:56:4c:d8:b4:
a7:7b:54:8b:a9:cb:a0:e5:89:7f:24:2d:b2:91:88:
3f:09:e3:3c:1e:cd:2e:68:70:8e:72:b5:cf:90:7a:
d3:08:59:eb:a9:51:bf:74:90:23:2b:63:97:2b:c2:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:ED:F7:63:20:38:06:C8:7A:B2:20:E3:5D:43:32:21:BD:91:FC:D3
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:64:55:fc:e5:1a:ab:9f:2c:8e:c9:f9:34:7c:80:37:15:53:
1b:cb:79:e2:7d:ea:58:d3:36:1e:1d:78:00:9d:5b:ed:5f:75:
3e:1b:81:bc:21:a6:ee:15:58:d0:eb:c9:b4:74:96:e2:50:6c:
6c:40:0a:b6:7b:ae:44:00:3d:b1:05:53:df:e3:41:14:cd:ba:
42:1b:2a:3d:bb:c8:48:df:9c:d6:3a:1e:55:3e:84:ca:db:67:
6e:1a:ea:e7:c3:49:e5:ca:4e:e5:73:c1:b1:40:3c:d8:94:81:
1d:1e:78:00:d9:bd:d7:19:3c:a1:77:4b:e5:04:24:07:6c:84:
78:83:3e:81:46:25:1a:54:48:e0:c4:63:eb:ff:4e:80:65:44:
17:f0:b8:6c:d0:bf:a3:23:2c:2a:b7:16:76:ec:34:9a:8a:77:
15:bc:19:44:44:81:4e:f1:e4:a6:17:c2:4d:ec:6e:f5:44:85:
ce:75:38:ae:65:e7:40:aa:06:11:b2:ad:66:56:f9:6d:bb:f7:
7e:98:4d:45:bb:ce:be:16:ac:14:63:9a:d2:04:d6:01:2c:67:
9f:8e:1b:ee:b5:7e:31:4c:12:e4:8d:7d:ea:bb:5b:0d:cd:4c:
4f:6e:33:92:5b:78:fb:46:b8:1d:22:62:89:9a:27:05:0c:0e:
10:c4:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:55 2025 by rpki-client