Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: 7HtiPv5ufp2c9UOBCOdjZOd2iYTcdFZ4hp8XBZpofqo=
Subject key identifier: 95:C2:44:A7:38:4C:AC:F5:3F:B9:B0:56:F2:C7:53:36:E5:CA:42:39
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 01964331B0FFCE3844899FEA715F51E73122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 10:00:52 +0000
Manifest this update: Thu 17 Apr 2025 10:00:52 +0000
Manifest next update: Fri 18 Apr 2025 10:00:52 +0000
Files and hashes: 1: i7TTR0PMX6DAq8x2EEX7tvYEy2w.roa (hash: iWmz0ZT2uDCkIA/K5JDubPnWXPlf7zxHizjmswntW2Y=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: xnFxPtDSVhe1UASRNfH+NiRwXZU+cs0Ym8AZsZlPz78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:b0:ff:ce:38:44:89:9f:ea:71:5f:51:e7:31:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Apr 17 10:00:52 2025 GMT
Not After : Apr 18 10:00:52 2025 GMT
Subject: CN=95c244a7384cacf53fb9b056f2c75336e5ca4239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:ab:ad:d2:95:9f:43:e0:a3:fe:35:74:fe:
02:85:d5:b6:0c:69:86:6e:21:36:0d:aa:77:06:47:
ff:60:8c:71:4d:6f:d2:11:14:d2:c1:d3:f1:b9:d0:
eb:9b:5c:20:6b:4e:e3:9a:57:be:af:5c:7c:9b:10:
26:9a:d8:cb:2f:9f:5e:0f:4a:ef:75:b0:6c:6d:50:
e4:3a:76:f4:0d:94:5b:cc:be:03:38:6a:82:93:07:
9f:dd:ad:f0:af:db:43:9e:5b:20:d5:07:af:a1:49:
5d:ae:5a:1e:f0:5a:0f:4d:e4:37:49:4f:a9:8c:a0:
bc:ae:48:2e:34:49:14:c7:58:a3:9b:96:6b:61:cd:
0c:35:6c:d0:9e:87:a2:3a:22:ea:b9:db:4c:e4:66:
ec:24:de:9d:4a:9e:67:95:d6:ff:23:f9:5d:eb:03:
01:b7:fd:a4:35:6f:d5:60:a2:fe:01:fa:c9:6e:23:
f9:3d:35:d0:2f:cd:9a:da:2d:85:90:ee:3f:5f:33:
e1:94:5a:06:26:54:51:b2:9b:ed:75:c6:12:28:19:
8c:17:9d:a7:96:f4:36:cf:63:f5:94:29:a1:72:3a:
d8:8e:7f:50:56:33:55:e0:74:aa:bb:ee:ba:2a:19:
a6:3c:7b:31:a7:07:92:4f:a6:d9:00:3c:95:ae:1d:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C2:44:A7:38:4C:AC:F5:3F:B9:B0:56:F2:C7:53:36:E5:CA:42:39
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8a:f7:06:77:eb:39:7b:09:53:6e:0a:75:9f:8a:fb:e0:6f:
b1:8b:7b:0b:0b:9e:b4:88:4b:18:f4:2a:34:a4:17:52:84:2b:
67:19:58:29:44:0c:04:e0:e3:80:d2:33:65:4f:6c:4d:f1:35:
3a:29:dd:a9:fd:b9:35:f8:95:a6:c9:1d:81:20:22:22:ee:7f:
fa:62:07:e0:e8:b9:07:6e:19:28:43:67:3e:b6:4a:63:2a:95:
03:20:9f:03:90:8a:9d:b8:b7:62:8a:37:1c:3f:10:c0:ba:19:
a8:0b:0b:95:d4:25:ff:08:e2:88:a2:0e:a3:ec:1c:2c:ec:30:
ae:18:de:19:dd:d1:b6:2d:a6:a0:05:18:fb:b9:6c:87:f5:3a:
7c:30:d6:a0:cf:97:34:e3:2f:b7:54:43:4e:b8:eb:1c:00:3c:
dc:32:c1:6c:22:e7:66:56:36:21:29:c6:a6:bf:ac:5e:7b:00:
f9:95:93:2a:5c:ae:41:71:15:d9:1e:65:b0:dc:c3:83:72:08:
b5:7e:c9:56:6e:6f:d8:23:51:b3:5b:14:fa:a4:5c:7d:6b:90:
5c:0f:4b:92:4d:d1:81:49:42:05:af:0b:70:57:22:43:2b:2e:
ea:4c:f4:0c:83:4a:ad:bb:c5:36:6f:7f:05:5c:c1:a2:df:24:
4d:a9:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:17:30 2025 by rpki-client