
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: bo3yEifPKpbCEH2V5mEqKWwJri9jek+YS2fkDUvjuQc=
Subject key identifier: A3:68:F0:2C:E9:A7:C0:1F:F5:73:3E:5D:FF:AB:96:BE:FF:60:77:FD
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 01963C8B0A634F2790D735B173E2F134651F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 1102
Signing time: Wed 16 Apr 2025 03:01:07 +0000
Manifest this update: Wed 16 Apr 2025 03:01:07 +0000
Manifest next update: Thu 17 Apr 2025 03:01:07 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: tp/giZYEYnr8re5CYiYoHuuS/AxJVg2GEMb7CTAMMtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8b:0a:63:4f:27:90:d7:35:b1:73:e2:f1:34:65:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Apr 16 03:01:07 2025 GMT
Not After : Apr 17 03:01:07 2025 GMT
Subject: CN=a368f02ce9a7c01ff5733e5dffab96beff6077fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:59:1d:7d:e9:20:6c:6b:2b:43:d5:00:ff:
1e:c3:72:af:53:4f:6e:3b:c8:d8:92:69:1c:64:cc:
40:66:85:ed:74:7c:2e:39:d0:94:65:38:0a:ee:45:
05:a6:05:2b:0d:f7:b6:07:ed:78:ce:8e:ae:6f:c7:
92:88:a2:cd:4f:1b:19:cd:4c:34:59:0c:6c:27:66:
89:13:7c:44:d5:fe:c7:dd:4d:c9:bd:35:2f:50:b8:
2a:d3:8b:c7:65:1e:28:34:10:4a:45:9a:33:c0:9a:
2b:12:17:cd:22:c4:50:5c:39:40:6a:5a:e7:0a:76:
19:0f:19:e3:fa:10:39:cb:8f:54:e9:a1:2c:c0:0e:
41:1b:ef:2e:09:84:16:26:c5:b1:25:f0:48:26:d1:
d5:82:cb:b7:b7:3d:3c:c1:38:65:d1:0f:61:7f:71:
c7:b8:93:f0:43:b9:c1:de:89:b4:e2:7a:3d:dc:b7:
81:96:6c:4c:4a:09:60:68:b9:69:2a:80:8d:9e:5e:
60:3c:f2:d3:d3:12:5d:68:5c:c0:42:b5:62:88:c4:
32:fd:a7:41:21:75:c6:6e:fb:cf:2c:7b:e3:7b:a4:
9f:41:95:e4:f4:35:37:e3:94:75:c4:25:8a:03:4f:
76:4a:f1:f5:57:5a:eb:44:13:e6:86:0d:e1:eb:5c:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:68:F0:2C:E9:A7:C0:1F:F5:73:3E:5D:FF:AB:96:BE:FF:60:77:FD
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e6:e1:c2:16:5c:d6:0c:54:c9:63:d1:e1:31:f2:71:f8:8f:
70:db:ab:55:ee:65:db:01:f6:ae:08:a3:be:0a:33:c3:13:8e:
0f:34:f4:30:38:a3:f1:09:35:73:6d:19:e2:2a:81:25:38:b1:
93:d5:bd:73:9e:c0:0d:2c:c1:ed:f6:55:2d:7d:8c:37:37:60:
44:b4:f9:c1:4e:cd:34:e9:ff:f3:cc:07:03:05:3a:84:96:0d:
f3:b5:17:ea:62:3f:2a:5d:30:3b:19:56:49:33:a9:80:66:5c:
9b:3a:bb:62:14:33:9a:07:5e:79:00:e2:6e:5f:7e:52:18:cb:
3a:d0:8d:63:58:83:5c:ce:2e:31:8c:89:08:29:a7:98:cb:53:
0b:98:7a:77:73:e1:01:5a:b0:8e:b0:83:77:c9:29:4c:d8:bb:
0f:f4:3a:01:ab:e4:47:79:06:30:e3:4f:6f:38:10:7e:08:aa:
44:52:d7:3f:8b:32:e7:e8:d1:44:fe:97:2c:09:b4:01:0c:77:
b2:a2:02:70:56:12:e7:19:63:dc:fc:fa:6b:ce:16:82:44:02:
d1:d7:d1:f6:c8:4f:74:ff:3e:be:fb:2f:c6:dc:54:b9:cd:4c:
8f:7c:76:b5:02:1f:53:5f:1d:cf:93:6b:46:17:3e:a9:c6:40:
67:09:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:17:45 2025 by rpki-client