Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File: t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier: ywm6osNUJUE+BLhCvxf/NgCMLL7vtpQ/RHCyTDf3kys=
Subject key identifier: FD:01:11:4C:F2:98:88:71:68:F2:16:2D:4E:19:CC:9B:F4:92:FF:5F
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial: 019658DD655E1CF823B66641EDCA1815E40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number: 059B
Signing time: Mon 21 Apr 2025 15:00:26 +0000
Manifest this update: Mon 21 Apr 2025 15:00:26 +0000
Manifest next update: Tue 22 Apr 2025 15:00:26 +0000
Files and hashes: 1: JeMCMYiH53cU_3LMDeSKcS3Thhs.roa (hash: q+KDU3te7tpkPWYDo6SVWUaxsvwlZ34vk9tdHz3W+pc=)
2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: YWy8eorFGnGGuOC0ry9D3dULbocZx0hHNCmA8g1fmXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:65:5e:1c:f8:23:b6:66:41:ed:ca:18:15:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Validity
Not Before: Apr 21 15:00:26 2025 GMT
Not After : Apr 22 15:00:26 2025 GMT
Subject: CN=fd01114cf298887168f2162d4e19cc9bf492ff5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:13:2b:b6:64:f4:bd:7d:35:67:05:35:72:
60:5d:e8:2f:8e:a5:ec:b4:52:bf:00:aa:e5:e8:57:
66:74:15:a8:0f:29:26:46:cf:20:40:49:b7:76:6c:
3c:0c:05:2b:ec:71:5f:a3:27:d8:d2:e0:9a:55:16:
5f:25:26:b1:5f:db:3e:9e:ac:a5:7b:7a:ae:1f:85:
20:84:40:41:12:20:a7:7b:1d:5b:59:c1:45:be:3a:
1e:cd:d7:fa:5f:54:9b:10:54:01:32:12:ce:2c:28:
03:c0:1d:12:6a:7d:04:41:f5:8f:35:4a:ba:df:a8:
1f:9d:86:6b:2d:5c:e2:31:4a:d8:a3:33:ff:d1:79:
1d:5b:09:7b:8a:54:fd:bf:5d:34:e0:19:5e:4b:aa:
4f:94:6f:78:02:6e:ac:2c:a6:84:63:60:25:8a:2f:
ab:af:21:04:d4:9f:d2:60:48:1d:49:67:94:39:22:
c6:92:1b:ef:36:c6:84:a7:23:7f:64:65:0b:dc:bd:
84:14:5a:41:66:d9:a5:1e:47:ed:af:ee:76:ba:a2:
21:f3:82:5d:ae:1e:dc:e7:4a:b0:f7:a0:a0:84:7c:
20:fd:5a:0b:06:84:4d:aa:41:2c:a0:2a:f5:2a:a7:
e2:06:dc:0b:68:2e:3f:e0:7c:4b:69:fe:a5:6d:b1:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:01:11:4C:F2:98:88:71:68:F2:16:2D:4E:19:CC:9B:F4:92:FF:5F
X509v3 Authority Key Identifier:
keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:91:06:30:7a:2b:52:d0:2d:a3:29:3a:93:b3:2a:ad:4d:8a:
72:88:67:6f:ab:ed:74:c4:68:b3:4f:32:fb:ba:58:9d:60:15:
74:80:fe:a3:f1:52:0b:c0:58:76:11:05:e9:90:b0:3c:59:22:
3c:ba:0d:78:d2:14:52:6f:67:57:c5:c6:38:f1:b3:53:a9:3b:
5f:fd:89:a1:90:02:e4:d2:1b:34:36:b5:d2:7a:f8:26:28:a6:
fe:fd:e2:4f:54:03:03:6b:36:a7:26:4a:c6:ee:1f:c0:92:2d:
95:3d:76:cd:af:72:8b:98:b2:33:c2:a0:1b:b9:a9:65:54:38:
f9:ed:73:55:4c:72:48:98:e2:08:a8:8c:87:9d:89:44:12:c3:
fd:a4:74:63:53:4a:69:fd:09:0f:34:7e:6e:e1:c1:a9:06:a8:
db:21:49:8b:60:ee:fe:f9:f2:e0:58:d0:11:be:0d:e3:3b:96:
b3:26:4a:a8:26:c3:8f:4e:f3:96:14:3c:b2:51:da:87:c6:8d:
c8:19:2a:67:50:03:04:de:83:19:b8:a8:fa:6f:3e:48:5b:ff:
a2:62:39:71:21:a0:e7:48:b7:bd:51:73:f2:c8:3e:2b:aa:11:
57:4b:72:c6:a5:b5:80:6e:3d:90:e8:fc:52:a3:60:ee:fd:02:
03:bb:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:35:15 2025 by rpki-client