Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json)
Hash identifier: 1jBnOs7pxROv605CSiY6aMzQEtLNbD/I8+5Y1uIYY7E=
Subject key identifier: B5:D4:3F:39:4D:DA:D9:33:BE:66:17:3B:77:C9:02:08:45:9B:50:36
Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Certificate serial: 019657939A81493B80253BE5FCEA7E55133E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
Manifest number: 37
Signing time: Mon 21 Apr 2025 09:00:13 +0000
Manifest this update: Mon 21 Apr 2025 09:00:13 +0000
Manifest next update: Tue 22 Apr 2025 09:00:13 +0000
Files and hashes: 1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=)
2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: 488KhEL5ZNtlUwEswsaM4K4QHXzfRlGTeTh3xQATY5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:9a:81:49:3b:80:25:3b:e5:fc:ea:7e:55:13:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Validity
Not Before: Apr 21 09:00:13 2025 GMT
Not After : Apr 22 09:00:13 2025 GMT
Subject: CN=b5d43f394ddad933be66173b77c90208459b5036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:5d:f5:ea:29:70:25:2d:ed:6e:71:3e:8a:
d4:e2:eb:a8:fc:09:b2:85:12:91:95:65:da:0b:0c:
e5:a3:65:66:13:80:77:1b:0b:da:de:8f:93:67:58:
0d:68:7e:f8:2d:22:f7:44:9c:9c:e8:b9:9d:f2:a0:
fa:6b:02:39:88:6a:f3:f5:5f:a6:76:8d:e6:0c:0b:
31:dd:24:52:28:1c:8d:b7:c5:fd:75:d5:21:2a:82:
f2:06:9b:12:cd:b6:a2:d2:fd:0a:f8:ca:bf:eb:7c:
86:0d:50:b1:bc:e5:c2:bc:1d:4b:04:6b:c8:f9:f5:
6b:45:ec:ff:a8:5e:73:34:8e:48:40:fe:62:7d:52:
64:48:c8:b7:7d:11:e0:50:d1:4c:8e:e9:b1:86:43:
d0:fe:9b:bf:cc:14:74:9f:b7:9f:f4:d6:9c:e3:fa:
1d:bf:bc:91:86:49:f6:6c:0f:a9:dd:f0:a2:41:18:
13:1d:f8:64:e4:5d:3b:ee:f0:15:04:d2:8a:59:aa:
b9:70:ee:97:34:fc:03:a2:09:b5:e7:69:f4:e2:f7:
0c:76:4c:66:21:e8:31:e6:24:54:10:95:51:91:77:
84:84:cf:81:49:8e:46:8b:9c:13:1e:f9:8d:7b:00:
cf:f1:7d:1b:37:2a:6a:e5:92:90:b6:54:f7:84:b5:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D4:3F:39:4D:DA:D9:33:BE:66:17:3B:77:C9:02:08:45:9B:50:36
X509v3 Authority Key Identifier:
keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:53:2d:09:14:66:4b:dc:c7:b1:59:1d:7f:77:6c:60:a9:8f:
a8:98:95:be:b1:af:2a:e0:ba:ae:51:71:07:dc:31:87:0d:b1:
60:59:0a:d6:01:fc:ee:9e:6c:0c:77:9f:62:76:34:5a:fd:8b:
87:fc:66:17:23:43:60:59:a7:85:ad:b9:6a:ec:c0:8d:ee:4f:
9d:d8:09:89:55:6d:16:33:50:f8:0e:4e:76:8c:1d:7b:b7:e3:
84:44:c0:50:8a:fa:cc:f2:ee:d5:e6:dd:a5:5f:3d:1f:24:80:
c7:ad:ec:b2:62:7b:7d:d7:61:85:2e:e0:cf:aa:4b:29:4c:16:
95:69:a6:48:61:0e:08:7a:b3:39:c8:4e:35:42:26:d7:1b:40:
f1:d9:db:5c:23:44:04:08:67:04:1b:54:d5:4c:3c:d5:79:75:
f3:c3:2f:3b:e5:05:5c:69:b6:44:3c:2b:17:3f:fa:71:51:cd:
41:e7:ae:a6:d7:12:8f:fb:25:39:c4:d2:fd:65:8d:9d:4d:f1:
fa:d1:9e:a2:47:1e:71:35:5c:ff:06:15:d2:17:1d:d0:3a:66:
6a:73:07:ba:39:e5:9e:f6:e3:5a:33:e1:2e:0e:b8:15:21:54:
fe:ad:57:2c:2b:d7:87:39:45:55:02:1c:d8:dd:2f:31:43:58:
ce:84:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:20 2025 by rpki-client