Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: 2zj+gH6pKsOLQcfIOH37/5dZ9oKdkO3b40MyOHbKuqo=
Subject key identifier: 21:9E:5F:41:C1:57:DD:07:4F:4E:F0:D8:1B:96:92:71:6C:F7:84:3E
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 019644B270FB3D3E9BD5DBD1779626FD4CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 0796
Signing time: Thu 17 Apr 2025 17:01:07 +0000
Manifest this update: Thu 17 Apr 2025 17:01:07 +0000
Manifest next update: Fri 18 Apr 2025 17:01:07 +0000
Files and hashes: 1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=)
2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: 6RGPdsWV03gVfikC7mDcUmFUuvYLevFHl7j/mt/lAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:70:fb:3d:3e:9b:d5:db:d1:77:96:26:fd:4c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Apr 17 17:01:07 2025 GMT
Not After : Apr 18 17:01:07 2025 GMT
Subject: CN=219e5f41c157dd074f4ef0d81b9692716cf7843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:f4:0c:ee:70:50:c8:14:51:fb:51:9a:c7:
ed:06:38:93:9c:36:60:5a:96:c9:47:69:93:ea:c8:
f8:ad:d3:1e:e8:c9:39:90:e0:0d:94:91:28:54:34:
0b:d6:6e:29:b8:de:df:a2:73:86:f3:80:8d:b2:48:
63:2a:ed:ec:f4:98:8e:18:58:af:60:52:27:66:0a:
0d:30:53:bc:19:5a:19:99:73:27:15:7e:27:71:bd:
41:07:86:87:2f:7a:a7:91:89:37:46:08:7d:b3:b7:
d6:63:66:82:63:d0:e1:d3:6c:34:83:95:5a:4a:56:
3a:45:f9:02:4e:b8:fa:4e:4e:85:a8:2c:37:1b:19:
49:2f:f1:b2:2f:87:08:7f:5e:52:75:1c:b1:f5:27:
e3:f2:a3:55:01:84:25:5e:e9:4d:27:00:a6:a4:7b:
ac:9f:da:20:5b:a3:d6:a1:c0:c8:9f:34:0a:f0:63:
71:f6:a5:4e:a5:12:72:66:39:27:b2:47:ec:b9:a9:
a9:f0:79:aa:a3:0a:77:09:b6:c6:fb:b4:b6:a9:bd:
98:7c:0b:25:61:01:36:46:9f:72:e6:c7:83:f9:55:
24:d2:0f:c7:91:1c:25:e1:ac:70:2a:46:75:8e:3c:
c4:66:93:99:67:53:18:61:83:05:c8:3b:f3:88:70:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:5F:41:C1:57:DD:07:4F:4E:F0:D8:1B:96:92:71:6C:F7:84:3E
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8b:26:fb:7d:d7:4c:c4:41:37:84:23:2a:8c:d3:35:10:28:
87:74:bf:4f:52:b9:44:7c:ba:eb:3f:fc:79:5a:6e:81:c9:54:
5b:0f:2a:ad:5a:7f:41:1b:91:5b:c6:d6:83:56:a9:47:2d:23:
3f:5b:0a:28:ff:cd:f7:8e:6e:bb:ba:6f:f3:db:bb:69:64:e5:
36:81:92:e0:8a:97:50:d8:2a:f2:29:1c:ad:22:55:0d:76:39:
fa:5b:09:71:0a:f5:f3:21:fa:fd:ea:00:e4:a2:aa:cb:4e:99:
b0:70:05:65:59:b6:d8:fb:59:f6:1a:5c:fe:a2:a9:8e:37:d5:
b8:0d:be:07:c5:e5:08:b9:68:88:4c:b8:2d:7d:e6:35:7c:8e:
a2:85:eb:3e:fb:fe:16:ee:df:27:f5:7a:d3:15:79:7a:98:29:
87:d8:ee:72:22:63:5d:d8:e4:68:0a:79:16:b4:57:ba:1b:c2:
37:f1:c4:a6:41:11:3d:c4:0e:2b:66:fe:ac:be:49:5c:ba:20:
69:06:c6:26:52:ca:bc:e8:09:e1:8f:70:43:7e:98:bc:ae:bc:
94:59:e3:b8:82:3b:35:b3:5e:5a:8f:71:69:38:cc:71:01:db:
a0:30:b5:d5:20:78:ce:68:4a:6b:ff:a9:45:b8:52:28:b8:47:
ea:47:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:26:37 2025 by rpki-client