Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: cx/F8le2WvH/a/O7sJNBR+2zMMQTzNQpT+5884IY5m8=
Subject key identifier: 58:E6:25:ED:65:CF:4C:1B:17:38:18:62:E3:F3:E9:0C:7D:18:6C:60
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 01964067515CF05463E10A16ACDC5B8AEEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 0E08
Signing time: Wed 16 Apr 2025 21:00:34 +0000
Manifest this update: Wed 16 Apr 2025 21:00:34 +0000
Manifest next update: Thu 17 Apr 2025 21:00:34 +0000
Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=)
2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: MPQdl9xFAOE6Sq3b0+9qkwkZQZIvYQY/kGdDPHtPA1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:51:5c:f0:54:63:e1:0a:16:ac:dc:5b:8a:ee:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Apr 16 21:00:34 2025 GMT
Not After : Apr 17 21:00:34 2025 GMT
Subject: CN=58e625ed65cf4c1b17381862e3f3e90c7d186c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:07:c0:41:0c:41:75:dc:ab:49:53:46:2a:
56:6d:3a:f0:b6:e7:73:4d:f0:79:87:e4:92:ec:ea:
13:10:ab:e2:44:42:17:fb:96:1c:75:1b:8f:9e:32:
1a:c3:da:6f:95:63:92:3c:23:79:39:3a:11:b1:2f:
f4:c5:f6:b3:71:49:6e:f6:60:02:95:c2:11:63:6a:
37:8f:dc:af:85:c9:62:86:d1:13:04:8d:cb:54:2b:
39:5a:63:3f:61:4e:43:22:c7:50:de:18:f1:9b:5c:
d8:7b:7e:93:7e:92:0b:3f:87:32:b9:5f:3f:86:d4:
e5:4f:26:4e:1f:99:be:3d:b1:f8:02:f6:0b:d9:21:
f1:3d:3f:21:57:d5:67:30:5e:56:9f:d2:94:d6:cc:
ff:77:b9:5f:f2:78:f0:45:f5:b1:ba:ad:8e:78:9e:
61:5b:bd:db:00:94:7f:d4:d7:61:f7:15:b3:5d:23:
be:3d:60:3b:53:d0:68:92:95:0b:73:28:a0:88:ed:
6f:c7:18:8a:c6:4e:eb:cb:0e:83:44:17:4e:b6:03:
50:04:95:c5:25:64:2c:de:e3:89:3e:8b:00:01:70:
6b:5c:7e:5e:d7:9f:d6:10:d6:68:10:bc:7f:42:f2:
9a:80:39:c3:60:de:f7:45:66:68:7e:8e:6c:c6:27:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:25:ED:65:CF:4C:1B:17:38:18:62:E3:F3:E9:0C:7D:18:6C:60
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c6:d5:a8:16:83:57:ac:e3:3e:c1:02:58:63:7e:f0:af:46:
23:09:25:2d:c0:a2:7d:de:03:94:db:cc:ff:d5:88:e6:9d:c8:
e6:9e:3a:fa:d4:59:a7:9a:23:69:3e:4a:bb:44:a4:29:e2:8e:
f1:cb:1e:c7:34:bf:c5:77:a9:37:53:d7:1e:b9:a4:ea:7e:f3:
46:7f:49:f8:6d:2b:75:29:0c:8d:f8:19:f8:a8:ec:50:48:db:
4c:b9:d2:fc:8d:bf:18:5b:35:94:e0:be:0e:20:16:7d:69:04:
bb:fb:93:97:20:3e:b2:c4:21:5d:47:3c:42:df:47:b7:18:51:
18:44:98:70:85:2f:83:89:2f:d6:a1:c3:9f:8e:65:13:6a:20:
1e:92:23:f6:80:b1:99:01:93:7b:7b:f0:2d:50:95:a6:1a:b4:
18:41:01:38:99:0b:00:4a:2f:55:54:cc:46:02:e8:92:33:24:
a1:ca:93:be:99:19:47:f4:18:ca:6b:a7:5b:14:63:e8:27:8d:
c9:f1:03:af:ac:0f:bd:3a:19:8d:81:d2:03:05:3b:45:2d:03:
3c:45:61:12:e6:05:e0:14:e1:09:e2:bb:b7:c0:6a:90:c3:c5:
d2:79:fe:7d:f2:e1:d0:de:45:b8:84:52:8d:3a:c6:de:f0:d9:
1e:fe:c7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:59:09 2025 by rpki-client