Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: k4Olo6/Xrlnn3QUacZeuZsvMY2oz+UwSE0smmmWBi9Y=
Subject key identifier: 03:9B:E1:DF:F5:D6:25:91:6E:F4:A0:96:EF:22:A0:FD:C8:8C:E1:38
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019650B603C8141400C09ECC1B8E8745BA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 0F6C
Signing time: Sun 20 Apr 2025 01:00:27 +0000
Manifest this update: Sun 20 Apr 2025 01:00:27 +0000
Manifest next update: Mon 21 Apr 2025 01:00:27 +0000
Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=)
2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: i1W2N4zWGLWMzq2qWyeeFuGa0dJPuBOKt3Yz6L4lFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:03:c8:14:14:00:c0:9e:cc:1b:8e:87:45:ba:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Apr 20 01:00:27 2025 GMT
Not After : Apr 21 01:00:27 2025 GMT
Subject: CN=039be1dff5d625916ef4a096ef22a0fdc88ce138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:ba:ca:cb:94:e4:59:02:1a:a1:e4:44:74:
f6:c6:5e:d4:61:66:24:19:6f:de:5e:55:9a:83:a8:
71:f8:ea:c3:42:2c:59:f7:f1:04:ab:32:66:ef:d1:
7d:f7:bf:87:f3:b9:6d:ad:0f:91:59:20:78:f2:4f:
c9:78:19:1d:19:5b:02:88:ff:cf:a4:93:c1:66:e6:
ae:1b:14:a7:67:f0:99:48:b2:64:79:ad:b4:9f:6d:
8f:c3:2d:6b:d0:fe:73:02:cc:f0:f1:ca:0b:96:06:
ae:7d:7c:06:68:bb:9c:9b:73:84:6f:9e:4c:1e:6e:
d9:24:e8:af:18:76:c8:c4:ed:a1:68:f1:89:5b:da:
1a:91:ba:8d:35:1e:a5:72:2a:99:23:29:40:e2:8e:
31:c6:2e:d5:27:58:df:e3:0f:85:ff:bc:b5:86:7a:
f6:f2:5c:1f:b9:cc:9a:91:ee:af:e7:ee:03:2b:a8:
15:61:d4:75:7a:1b:b4:26:a7:29:de:96:8a:f9:e4:
3f:6d:5b:bb:49:15:57:fa:f7:a0:e4:91:91:22:1d:
2b:ef:8b:37:96:33:24:64:a1:29:2d:3d:0f:68:48:
49:60:f4:a0:28:a0:cc:8d:7d:cc:4f:27:10:ff:eb:
f1:b4:57:0e:fc:9e:6b:7d:fc:fa:56:cb:55:da:d4:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:E1:DF:F5:D6:25:91:6E:F4:A0:96:EF:22:A0:FD:C8:8C:E1:38
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5a:a3:e3:43:d3:43:ab:8a:94:48:d0:7d:9e:03:96:b8:7a:
2c:3f:8d:43:fc:ab:85:45:3b:32:ca:da:9a:26:bb:41:63:04:
30:d7:3a:e7:12:53:50:bc:d8:9a:50:17:4c:15:b4:65:f8:ec:
b1:fa:03:cf:bc:79:ac:95:0d:fe:e6:11:51:ad:6c:f5:fb:93:
20:47:6f:6e:0f:ef:43:30:54:8b:35:e2:17:82:7a:33:3f:1f:
31:5f:31:df:7f:fd:06:cb:88:7c:0a:d4:5c:50:00:65:a3:95:
57:f6:07:8d:b1:48:87:60:ec:0f:b0:33:dd:be:c3:45:41:44:
0a:8c:db:06:d0:0e:ae:ab:e7:77:fc:0c:03:a3:5d:d3:ed:bd:
1d:21:43:1a:14:67:b2:cc:f5:3c:9a:eb:92:07:7c:ef:ba:58:
81:26:14:49:7b:8a:3d:bb:df:9c:07:c5:ac:b5:14:3e:68:73:
4a:ed:50:ed:df:1d:b5:6a:af:b1:18:92:ea:0a:1c:a7:f6:8c:
6b:d0:41:b0:7f:28:b7:4d:e2:75:ff:96:fb:71:c5:4e:c5:fc:
37:47:5b:84:00:7c:f7:41:05:1b:33:e3:a9:30:e6:f0:6a:b4:
00:48:16:f1:5c:66:91:6f:af:31:86:e3:c1:76:17:aa:15:d8:
74:a4:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:48 2025 by rpki-client