Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
File: Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft (raw, json)
Hash identifier: XfW4lNBxt8ZxFjREgNiZsWpBoWDEvE/2GTTUvbhInZc=
Subject key identifier: CD:95:B2:C8:3B:A7:97:A8:9E:36:C5:5B:58:11:4F:97:93:B9:6C:3B
Authority key identifier: 4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
Certificate issuer: /CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Certificate serial: 01963C8AF17EEB3430F19C6C9BC2E9B71CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
Manifest number: 11CE
Signing time: Wed 16 Apr 2025 03:01:00 +0000
Manifest this update: Wed 16 Apr 2025 03:01:00 +0000
Manifest next update: Thu 17 Apr 2025 03:01:00 +0000
Files and hashes: 1: Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl (hash: oqi2QtDCYDKve69nOlGBAFhSfwxTbBCp7TlwJllNnxg=)
2: fQVuwKT50hbkCaxxsedkAc4v4DM.roa (hash: 7+f7vmuufbnUl5kubA16fvBKejBnvUX170UQ3Kwi8yM=)
3: yI_RXXqJUefuh1flF2oTn9wC4DI.roa (hash: j2h6Y5w4TEDmVG2v4OM8fOFhUfhpchqy4oEvpRV83t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8a:f1:7e:eb:34:30:f1:9c:6c:9b:c2:e9:b7:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Validity
Not Before: Apr 16 03:01:00 2025 GMT
Not After : Apr 17 03:01:00 2025 GMT
Subject: CN=cd95b2c83ba797a89e36c55b58114f9793b96c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:84:3d:58:88:76:ef:79:45:00:fc:46:37:
47:70:87:b9:1b:55:2c:cc:a0:ae:15:50:29:0b:1b:
c7:87:9b:d9:17:a7:3d:d8:dd:cc:20:bd:5a:b1:37:
e5:14:f7:4e:a9:7c:42:e5:19:c5:c2:7f:17:8f:cb:
d3:09:36:56:b3:80:96:1d:ae:23:ab:c8:68:52:01:
31:59:8d:1d:4a:35:66:53:e4:40:1d:2e:9f:01:24:
7b:24:95:88:9a:0c:04:1f:d2:e1:d3:5d:ad:08:32:
f7:e4:8d:9a:6a:1b:6f:d7:9d:21:f3:fe:68:55:58:
64:ff:3a:8e:e8:5b:8a:ac:7b:9d:c1:52:93:15:f2:
52:67:bd:3c:79:29:5b:03:3d:a0:39:58:47:b3:6c:
22:a9:a9:cd:91:27:f4:8d:3f:00:61:1f:a3:08:7b:
9b:13:bb:92:5a:5c:66:cb:6c:1b:12:f7:41:fc:04:
fa:7f:30:5c:c3:5b:46:b9:c3:63:38:63:bb:6d:2b:
ad:73:f0:61:00:56:4b:30:4a:22:22:66:29:af:47:
36:64:7e:07:04:17:33:34:bf:ce:a0:b7:6d:cb:67:
95:42:fa:63:d5:c1:e9:1c:21:7a:ad:c3:33:d3:5d:
c6:36:48:b3:30:80:6d:70:36:23:c2:ab:62:2b:d3:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:B2:C8:3B:A7:97:A8:9E:36:C5:5B:58:11:4F:97:93:B9:6C:3B
X509v3 Authority Key Identifier:
keyid:4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0f:da:e1:aa:2b:64:4e:0f:f6:a2:96:43:40:d9:5f:e7:9b:
75:7d:df:67:b2:03:48:b2:79:39:98:95:08:be:e7:29:28:e9:
c4:52:40:f9:fe:6f:01:4d:a2:61:db:95:ae:d1:92:80:af:69:
31:84:49:b1:35:82:c8:cb:fb:59:f3:79:a6:64:3c:21:41:db:
3a:95:46:d7:99:4c:a1:f5:fc:f3:98:66:b1:72:4c:b6:04:e7:
8d:5e:6c:72:3d:37:63:e3:65:95:08:c6:ef:77:0d:cd:87:87:
3f:0c:65:8d:98:11:df:fc:6c:02:51:cb:69:03:bb:a9:77:ef:
18:4c:f2:44:e3:d0:30:0f:35:c2:d5:8e:b1:fe:c6:c6:bd:c6:
a8:b5:23:22:bd:5d:68:ac:66:a4:87:54:a8:2a:82:00:0c:6a:
60:6f:a7:05:d2:fc:08:d6:7b:09:08:ac:e3:c3:bd:0c:09:7b:
5e:3f:90:34:ea:6d:76:21:7c:26:50:a0:32:52:50:29:92:57:
34:0c:71:50:e5:1f:b0:d0:8c:3e:2b:cf:96:cf:67:65:e3:51:
2e:c3:83:b8:3f:04:76:3a:b9:35:4b:94:d8:cb:e6:e6:94:01:
b3:88:f8:b4:28:bc:14:d4:cd:36:4f:c7:83:18:34:ee:14:f4:
91:d6:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:35:33 2025 by rpki-client