Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier: SNsSfSY17jDmiKYihaQLdDZTxrH+aZMVz2MymLyi4Zo=
Subject key identifier: 98:FA:F1:C2:24:F7:B6:35:27:4B:37:3B:87:28:25:BA:CE:64:E7:DA
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial: 01962C7393028696307D1E8739227E7057EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number: 14E8
Signing time: Sun 13 Apr 2025 00:01:33 +0000
Manifest this update: Sun 13 Apr 2025 00:01:33 +0000
Manifest next update: Mon 14 Apr 2025 00:01:33 +0000
Files and hashes: 1: Gqb6OgiiPyPHWY86Q4S-zwTF1xY.roa (hash: Os7YNQWNXg8f2DoDK3e2S/uuUULEf5X8h6dOyySYafw=)
2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: UOlbjTMRseoP/2B5kGkS5MEu6WBDQmFeQIS+JGv18dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:73:93:02:86:96:30:7d:1e:87:39:22:7e:70:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Validity
Not Before: Apr 13 00:01:33 2025 GMT
Not After : Apr 14 00:01:33 2025 GMT
Subject: CN=98faf1c224f7b635274b373b872825bace64e7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:fc:21:43:45:38:1c:d8:89:a7:64:ec:77:
83:82:4b:d6:b6:99:49:00:b3:9a:6f:9f:18:8f:e4:
41:95:e5:ac:49:3d:4a:17:0c:71:0f:fd:97:84:98:
b3:1b:2d:53:bc:a7:3c:16:29:6a:b8:41:ea:af:9a:
10:a6:a2:26:16:21:6a:b7:01:70:7a:f1:ca:a4:22:
4b:b3:11:72:50:7f:f1:ff:3c:a4:0f:45:26:ea:8e:
c3:7a:fe:2a:00:7f:fb:01:da:0f:26:16:3a:ed:d7:
5c:54:55:c9:7a:43:32:1d:af:d7:b0:19:33:28:e7:
f4:83:70:80:35:5a:4f:cd:49:bd:b9:fd:26:cb:7c:
ba:5e:9b:01:4a:79:b1:07:b4:c7:56:6c:a7:88:2c:
44:27:ec:b5:c7:e3:2a:43:b5:77:d2:c8:d2:8f:d4:
d2:af:2b:9a:33:4b:f9:42:56:3d:9f:3d:f6:09:a3:
35:40:f6:11:80:c5:20:f4:df:6e:f9:9b:b8:44:8f:
2e:e5:76:88:ab:fd:e1:11:53:12:f3:e8:0f:c3:ed:
38:76:d1:91:75:2c:e3:26:1b:d8:6e:eb:91:5f:03:
f5:3e:65:6a:89:f3:9d:94:49:8c:99:0f:5e:f2:b5:
92:48:4c:57:f8:99:ba:bf:96:4d:3c:09:9b:ad:23:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:F1:C2:24:F7:B6:35:27:4B:37:3B:87:28:25:BA:CE:64:E7:DA
X509v3 Authority Key Identifier:
keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0f:9e:ac:41:a3:36:57:55:5b:53:5d:cd:fb:e4:04:e8:8f:
33:77:b1:03:00:6f:fb:5e:8d:3b:87:d3:00:a3:a4:3e:d8:c7:
39:5b:8e:fd:38:4c:55:4c:84:06:a7:5b:1c:57:ef:3a:7b:73:
8d:fb:95:ed:94:24:cc:73:c8:3f:b2:65:01:a0:ee:11:fe:78:
73:98:ba:54:c0:17:00:eb:38:4e:04:23:ba:f5:25:4e:e4:08:
7e:91:ea:94:3f:ad:14:b1:e5:14:c2:47:e8:9e:4b:f4:85:b4:
6b:b0:25:b8:0e:65:7e:69:f9:a0:2c:a2:3a:30:0f:72:3e:e4:
6e:d6:e9:39:0d:6b:fa:ef:bc:d4:dc:98:79:ea:f3:7f:d1:94:
9d:48:b2:0f:d9:b3:e7:d6:e2:bb:74:ed:df:12:08:7f:f0:ee:
2c:b8:d7:83:9c:18:7b:32:ad:f4:0e:d1:28:c6:dd:c9:c7:03:
58:c4:39:f2:11:14:43:a6:0f:d8:d6:56:23:39:a4:e7:ad:1f:
3a:2e:80:59:88:ae:cb:de:3a:19:4c:da:08:d2:7b:b4:33:89:
89:ff:4a:4a:6e:19:2e:c0:d6:2a:74:b9:06:5a:c5:4c:48:44:
0a:96:10:2c:7f:0f:38:52:2f:75:20:74:c5:ac:17:bd:a7:d9:
f0:33:0b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:15:45 2025 by rpki-client