Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: 3oO7O3KUSD3KwLVDGhvh86gu9WGOCW9fwCBBjVtb3lI=
Subject key identifier: 9E:A4:F6:6E:D3:F4:C1:2A:5D:10:F1:CD:84:AF:CC:38:00:E3:6C:20
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 01965A26C69A49A9B26C0A53871C23D655C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 21:00:12 +0000
Manifest this update: Mon 21 Apr 2025 21:00:12 +0000
Manifest next update: Tue 22 Apr 2025 21:00:12 +0000
Files and hashes: 1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: 1n1xEmRnBC/s2ISwhiIJhyQcyUHA9OH3rJr6IE4xHAI=)
2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:c6:9a:49:a9:b2:6c:0a:53:87:1c:23:d6:55:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Apr 21 21:00:12 2025 GMT
Not After : Apr 22 21:00:12 2025 GMT
Subject: CN=9ea4f66ed3f4c12a5d10f1cd84afcc3800e36c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:e5:1c:cb:a7:83:df:be:fa:a0:cf:8f:cc:
c7:83:66:01:a8:3b:13:e1:b6:68:44:5a:22:44:88:
b9:1b:97:e0:7d:2d:fb:36:fe:7d:ec:73:36:f4:fe:
bf:36:62:3e:0b:cd:05:6e:93:3d:34:f2:3f:e4:2a:
7d:9a:e9:ee:1b:f6:cf:b9:02:e9:5a:20:7f:17:74:
74:32:5d:e5:94:74:9a:bb:88:4f:ed:d0:bd:8e:87:
95:c8:6c:5d:e3:5b:3d:40:19:43:09:a9:2e:3f:ff:
2c:60:ed:5d:38:f8:4a:67:d6:e3:c3:f5:df:3b:f5:
48:bb:39:cb:30:45:72:14:a4:58:ba:c6:ac:b5:52:
57:17:ad:91:ad:30:43:f3:07:4c:f7:66:21:c5:8c:
b9:91:4e:8b:5d:28:ab:79:e3:a0:6f:b3:cf:77:c7:
98:0e:77:cd:f3:68:90:f4:7b:ce:d8:2e:9c:05:f2:
b3:5d:ba:fe:c4:b2:69:4a:05:6b:28:ce:4c:ff:48:
17:96:c9:1d:94:f1:07:7a:f7:f3:ce:4b:b4:77:61:
2a:e7:dc:be:eb:e0:6e:99:3f:20:ad:86:c4:95:69:
2e:e5:a3:bc:79:0f:e8:e4:28:35:09:3c:49:da:79:
8e:7a:e3:0f:38:d8:15:4b:a9:7e:e7:64:84:c1:6c:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A4:F6:6E:D3:F4:C1:2A:5D:10:F1:CD:84:AF:CC:38:00:E3:6C:20
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a7:55:77:87:3c:41:fe:fd:80:c1:38:c7:0c:b2:71:3c:99:
85:f6:0c:13:c9:25:1c:5d:e1:43:84:db:a1:50:c2:a7:c8:ad:
25:ed:b9:6a:29:5b:89:85:e0:31:3b:62:f1:58:ab:cd:13:39:
2c:dc:e8:e2:ed:b9:fb:cc:c0:a3:72:db:e5:c5:58:5a:e6:ea:
3a:31:af:d3:ae:b4:db:ac:e7:f4:35:70:93:91:05:a1:15:98:
84:00:63:5c:ef:6e:c2:e4:18:39:40:1a:54:4a:9e:de:43:df:
74:1f:02:8b:b4:ee:bb:39:b5:64:37:8a:b8:fa:53:ff:91:ab:
9b:cb:91:71:1d:29:eb:74:89:4d:86:16:5b:66:b5:a1:b1:5b:
88:53:19:1a:92:00:8d:19:51:10:4d:02:94:cc:97:d7:f0:4c:
28:d9:7d:b8:fa:d3:f2:45:8e:78:2d:9c:12:ac:73:4d:22:8a:
f0:6f:3b:16:2e:6b:f3:eb:78:70:a6:6b:36:a7:83:66:21:3c:
40:91:31:85:3d:a8:c8:18:1c:20:3d:70:0a:51:78:63:0a:20:
39:81:b4:a9:35:0f:92:25:bb:6b:b2:fc:3d:b8:97:b0:e9:fa:
80:0b:71:56:72:3c:c0:b5:a2:fd:52:42:80:ec:ec:28:28:59:
e2:1f:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:52:58 2025 by rpki-client