Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: mU/CzdtQOWKn0qnGCn+Xq8sEoVIMXtgMCKwFAz/9/Xk=
Subject key identifier: 04:D4:99:9D:32:F7:15:C6:AF:2A:72:AF:10:AD:79:4E:E0:93:7A:CE
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 01965982523DF939671E5FF94B016DC1687C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 0E8B
Signing time: Mon 21 Apr 2025 18:00:34 +0000
Manifest this update: Mon 21 Apr 2025 18:00:34 +0000
Manifest next update: Tue 22 Apr 2025 18:00:34 +0000
Files and hashes: 1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=)
2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: b7gyjh7BXdUGZfjlpgk4cOs0yNz7xWejMeT+BceyBfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:52:3d:f9:39:67:1e:5f:f9:4b:01:6d:c1:68:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Apr 21 18:00:34 2025 GMT
Not After : Apr 22 18:00:34 2025 GMT
Subject: CN=04d4999d32f715c6af2a72af10ad794ee0937ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:69:bd:5d:09:4d:e0:24:cd:57:b2:74:45:
a9:3c:10:26:85:11:1d:e3:6e:48:79:eb:68:77:44:
6a:95:9b:a0:9b:22:73:bb:0b:d3:96:99:bb:dc:03:
bd:26:b3:0e:02:44:a0:37:08:67:cf:9f:dc:14:89:
08:22:92:7a:f3:fc:1d:8b:88:e9:0e:21:f6:bb:d6:
31:1c:21:c6:48:2e:31:78:1b:24:2b:fb:38:cb:1b:
39:38:8b:98:df:bd:b2:d6:b3:ec:6a:38:88:2b:a4:
0a:88:fd:86:94:89:6b:08:b7:88:8d:13:e7:5f:d7:
e0:f1:c1:71:2e:e6:ef:96:dd:37:b7:85:a1:ab:43:
28:ce:7f:c2:ef:c3:d1:3d:2b:d8:4e:bd:38:11:c1:
0b:b1:bb:41:2b:ff:ed:ff:76:c0:f6:45:5e:bc:fc:
50:a6:b6:09:7a:db:98:cd:5b:30:1f:38:63:cb:3a:
29:e2:67:9d:f1:05:6b:4e:8d:44:86:64:62:ae:2f:
0c:2a:7b:f0:2b:8b:9e:73:1a:8e:a0:d2:a6:63:59:
81:6a:55:9a:24:c6:4b:e9:9a:05:18:78:33:0c:60:
41:a8:8d:5f:24:f0:5a:3f:f1:c1:9f:5f:9a:e5:8d:
8c:c7:b3:ec:cf:2a:93:cd:f7:76:1b:b2:9b:b0:ff:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D4:99:9D:32:F7:15:C6:AF:2A:72:AF:10:AD:79:4E:E0:93:7A:CE
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e3:4f:46:26:ea:20:16:f2:45:22:2c:74:73:8a:cc:25:9e:
cd:08:5f:7c:25:7b:be:66:fe:d0:00:92:a7:a0:00:78:d1:7b:
90:61:0f:c1:b7:b8:b2:83:a5:82:db:cb:5f:24:d5:7b:4b:bc:
f8:da:75:f4:8a:b2:f9:bb:ed:67:21:d9:2f:50:0b:72:69:0b:
5e:86:85:6e:09:4d:61:fe:8d:71:17:17:40:17:07:1b:35:9e:
58:82:f4:b3:a7:5f:8d:98:93:c4:c8:9d:4d:0f:3e:ec:a7:2c:
a3:ae:8a:3a:8a:c9:b7:0f:71:e9:ac:47:66:1e:27:f2:63:63:
c1:65:58:19:6f:31:bd:9a:87:e9:76:f1:e3:11:20:cb:b2:50:
c1:c5:b3:5d:8c:43:57:9f:7d:2f:85:fe:5a:e0:c6:ff:ea:2e:
65:13:9b:fe:4c:bd:77:a1:33:88:ef:50:75:96:80:c6:98:c9:
40:a6:e8:ca:cf:b8:98:df:eb:05:56:20:0e:99:25:b3:37:d1:
3e:88:fc:e7:38:ac:73:8a:73:7a:be:99:df:e0:d9:03:2e:7b:
44:15:2b:ea:35:64:67:9e:bc:2d:22:eb:c3:39:8b:12:99:06:
92:24:32:53:59:38:c6:da:f9:d8:7f:7a:a6:a2:50:b5:bb:1a:
cc:67:1c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:43:01 2025 by rpki-client