Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File: 8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier: aRqxPskfB/Co9rBHXR7K6p3149e6PsAdHRNT2r+IxCQ=
Subject key identifier: 89:A8:D9:6F:02:D6:5D:E2:F9:21:D0:38:21:B0:AA:2E:EB:E5:54:D7
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial: 01962B6067DFF93B9443CEE18D9BFEBBBC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number: 1579
Signing time: Sat 12 Apr 2025 19:01:00 +0000
Manifest this update: Sat 12 Apr 2025 19:01:00 +0000
Manifest next update: Sun 13 Apr 2025 19:01:00 +0000
Files and hashes: 1: 3u5ZahOyBhUNG6vDZ4hRGCrx5AE.roa (hash: HJZxVsPJLjA3XvzP/RTBRhqyf06FeLW1mBD5DxrU/Io=)
2: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: CFNWMpgHfiDp9sGzN7wtnVh0n7rYOvsNB3xD4Sz9C1s=)
3: TbmmnzuLCLV_rT2NRsiOU33FB6o.roa (hash: 77EfzF4GhZr8ViG+a2ISE3I0NZzlCSQ7tOGtUqmlj6I=)
4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=)
5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:60:67:df:f9:3b:94:43:ce:e1:8d:9b:fe:bb:bc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
Validity
Not Before: Apr 12 19:01:00 2025 GMT
Not After : Apr 13 19:01:00 2025 GMT
Subject: CN=89a8d96f02d65de2f921d03821b0aa2eebe554d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:41:8d:b3:1f:1c:53:03:f3:2c:51:30:63:
0e:8f:e5:a4:8d:ad:88:9e:d2:f0:35:46:b1:1a:86:
b3:dd:62:cf:00:41:f5:3a:8e:60:a7:4d:bd:8e:01:
13:10:cf:69:e5:09:4a:32:70:df:70:cf:20:ba:99:
2d:6a:73:be:51:38:b9:4a:32:33:0a:7e:da:59:80:
6f:1e:66:0a:b1:3d:80:25:89:bb:dd:5d:57:17:55:
eb:2a:b8:40:a8:d4:0d:05:3f:f7:68:96:16:92:de:
80:73:a9:f6:0b:08:a7:59:29:cd:0e:11:24:6f:77:
9b:ca:7a:58:8e:5c:b1:8b:15:51:e2:7f:82:e4:5e:
a1:ed:58:da:c9:37:87:8b:4f:3e:9a:f3:22:f6:a1:
b0:88:86:3d:85:8a:15:fe:a0:3b:e8:b5:00:dc:01:
75:44:26:b7:20:61:a7:7a:e1:90:46:b9:31:b7:7c:
9d:77:0d:4f:b4:31:0d:2a:88:c5:ff:a2:63:ac:48:
31:fc:81:2c:03:75:d0:0a:ff:1f:39:c1:8d:a7:9e:
f3:93:c0:48:db:ae:17:bb:50:61:8d:49:ad:c9:58:
54:2a:95:c7:91:20:fa:d1:94:d0:18:da:f7:81:5d:
3c:0d:06:9b:ff:08:46:f9:99:23:2c:20:6e:50:58:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A8:D9:6F:02:D6:5D:E2:F9:21:D0:38:21:B0:AA:2E:EB:E5:54:D7
X509v3 Authority Key Identifier:
keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:da:92:53:68:13:fb:cb:88:21:1e:a8:e2:60:d5:aa:ea:37:
49:39:b6:3b:1a:7a:ce:4c:10:f8:35:e9:20:67:f3:66:f5:1c:
6d:3c:60:37:c3:42:c3:e2:9e:55:e5:0d:27:bb:61:ab:55:13:
89:6f:6a:6f:7f:1a:fd:77:66:f5:14:81:3b:f3:2e:b9:02:92:
22:5e:4f:79:c4:cc:ff:04:b0:81:ff:32:d7:86:89:46:60:b4:
fa:ba:8a:86:57:28:ba:de:d4:9a:b2:08:6c:7b:64:4c:03:d5:
3b:b4:cc:aa:c4:98:85:3b:c1:3e:2f:b0:f0:e1:d8:c7:a2:73:
c8:c0:dc:45:e0:a4:83:e6:5d:3e:90:dc:74:f5:ed:34:3b:fe:
c0:91:9c:39:53:81:63:93:36:fd:60:2b:70:b6:dd:c0:97:f7:
5e:e4:8a:82:86:96:63:e6:a4:c7:c4:11:10:c6:1e:a3:6a:8a:
c9:49:7a:c9:86:cf:0d:32:4b:6f:79:e4:b8:92:96:62:b9:2f:
52:f4:38:9e:ff:6a:e9:80:6b:56:af:b2:c5:d4:79:e9:07:d7:
f2:7d:29:26:5f:f9:d4:6d:43:4f:27:cb:e6:ef:72:65:61:5d:
c1:d3:cb:44:71:48:89:e1:6b:35:0e:2d:ee:2c:69:1b:cd:72:
81:0a:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:37:57 2025 by rpki-client