Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: IZDB7z0zDTxCnUsvd76TXrQWUrXCdLHfWW366kiFhG0=
Subject key identifier: 61:23:3A:13:54:58:07:D3:50:55:E9:10:2F:8D:AA:3A:9E:96:72:E3
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 01964CD92B0B6E9AC3B6BA2DD444BC89D443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 05BA
Signing time: Sat 19 Apr 2025 07:00:22 +0000
Manifest this update: Sat 19 Apr 2025 07:00:22 +0000
Manifest next update: Sun 20 Apr 2025 07:00:22 +0000
Files and hashes: 1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: y33NDF0qCA+WOi2Hlo61gzl54ip5B/yIxvZyw+Q1h6g=)
2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:2b:0b:6e:9a:c3:b6:ba:2d:d4:44:bc:89:d4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Apr 19 07:00:22 2025 GMT
Not After : Apr 20 07:00:22 2025 GMT
Subject: CN=61233a13545807d35055e9102f8daa3a9e9672e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:db:42:e8:ac:2f:f8:c2:48:fd:c7:83:6d:
2c:67:bb:f7:f3:f5:52:d5:38:d2:e7:ee:cd:31:af:
ca:f1:90:c4:29:f3:28:42:60:44:d4:3a:d8:3c:07:
8b:74:3c:b4:ca:76:b3:0e:bb:76:56:52:e3:a4:a3:
42:f0:be:a0:0f:03:b5:7f:97:14:65:67:23:98:53:
f4:05:8c:57:66:9c:e2:51:97:c5:b5:04:d7:07:80:
12:d4:3f:4d:e7:d6:72:b9:99:b9:70:a5:29:84:b2:
d2:8a:08:64:64:24:86:4d:30:22:c5:19:29:e6:ad:
ba:4a:b6:56:b2:c6:d6:06:3a:d0:23:d3:eb:10:e5:
e9:39:ea:ce:25:03:0d:05:33:1f:cf:b8:6b:1d:e4:
ff:28:2a:46:e4:6c:1a:41:0a:50:06:70:6b:92:59:
5b:c7:49:71:27:fb:cb:35:22:27:e7:91:54:4d:e1:
07:36:01:59:06:10:c5:f6:80:85:da:52:19:ec:a9:
99:5b:86:a8:27:41:41:51:61:e4:53:1d:df:c4:c8:
7e:e8:a2:b3:29:e9:d6:3f:4a:57:85:a3:18:c3:99:
b4:f1:3c:de:84:0f:68:de:c3:fd:47:d0:9c:f4:ff:
ec:59:c7:0f:d3:03:f9:aa:f3:0b:ec:ed:2e:90:26:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:23:3A:13:54:58:07:D3:50:55:E9:10:2F:8D:AA:3A:9E:96:72:E3
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:60:cb:3f:3a:e8:08:75:64:fc:ae:d8:56:49:25:2a:b3:e9:
f8:ef:e1:e9:b0:7d:ab:ce:6f:be:58:d9:cf:44:1c:d2:89:12:
63:97:cf:73:8f:98:85:8f:7f:f6:20:c4:d5:ab:55:72:2b:fa:
80:51:2d:d1:f4:bd:5a:1b:d6:cd:f2:78:44:87:69:e8:17:dd:
22:97:59:bd:2a:ab:6d:7a:b1:69:34:f3:e0:bf:68:a8:8b:f9:
4e:d6:c5:a0:bd:71:34:83:ab:1f:ee:2a:68:3e:16:1f:b8:53:
ad:17:4a:73:d8:31:cf:b6:44:ba:38:87:f2:5e:52:07:63:79:
6f:84:ae:dd:8c:1d:d9:e4:6a:01:33:c2:1d:72:b2:83:b4:21:
a2:95:71:a2:bb:8f:11:61:07:8c:d7:33:3b:e7:05:4f:93:42:
e7:31:50:69:d0:b0:91:96:b3:a1:8c:80:e0:cf:6d:0a:31:61:
9c:65:25:b7:e0:24:f4:29:2d:a1:80:41:c2:6c:0f:dc:79:b5:
4e:6a:04:6b:12:c3:87:b7:4c:09:29:97:1f:65:ce:86:92:01:
90:9f:57:3a:fc:a2:2a:86:d4:d4:b6:57:c1:60:31:49:37:80:
21:db:2f:1b:58:f7:51:b2:db:d9:d4:e5:35:a1:d7:50:8c:95:
a9:2c:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:37 2025 by rpki-client