Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: Ei5tyro1nIltGCW27AxOHhK2l7wrA2aWUy0k1MQ3/7s=
Subject key identifier: BD:F9:D7:7E:47:39:3E:06:D0:12:F0:3F:84:90:F2:CF:41:DF:35:8D
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019613FD6C567D87E2CDC40D22F39005F039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0948
Signing time: Tue 08 Apr 2025 06:01:37 +0000
Manifest this update: Tue 08 Apr 2025 06:01:37 +0000
Manifest next update: Wed 09 Apr 2025 06:01:37 +0000
Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: 6w2FDTraTiRiA8XTyJBP2NuoCq7vWTVrjPK4rKh6V1E=)
3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:fd:6c:56:7d:87:e2:cd:c4:0d:22:f3:90:05:f0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Apr 8 06:01:37 2025 GMT
Not After : Apr 9 06:01:37 2025 GMT
Subject: CN=bdf9d77e47393e06d012f03f8490f2cf41df358d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:dd:bd:34:64:b8:ae:f3:a4:68:71:5f:7f:
14:73:84:91:e4:50:96:13:88:2e:69:e9:ac:24:d7:
96:ee:7e:7b:19:4c:b8:02:39:f4:2f:03:7b:61:3d:
ad:4e:d2:ef:01:aa:2c:1d:a2:37:ef:af:52:6f:31:
0e:1b:45:f4:72:4e:c7:0c:cc:7e:bd:b8:69:44:0b:
49:77:07:85:8a:31:1e:a8:12:01:74:b6:fa:a0:fb:
c9:bf:e2:06:5b:ad:b4:c4:39:b9:22:d6:73:71:6b:
f9:67:4a:5a:2f:92:33:c1:50:87:20:f3:85:fd:27:
56:68:f9:32:86:24:3b:b9:62:56:41:30:75:49:0c:
3d:67:0c:5f:3d:7e:df:40:8d:9b:b7:7d:59:88:6c:
f0:b9:49:c9:3a:47:3e:95:29:86:82:c9:b3:c4:11:
4a:0e:6c:84:5c:26:b9:40:d9:b7:74:50:54:3c:9b:
f3:a0:cc:07:0e:8f:ad:88:1b:03:9c:8b:7d:a8:2c:
87:1d:c5:c6:11:b4:1b:34:5b:77:07:b5:f0:06:43:
be:5c:1f:51:3d:bc:0f:61:a2:8b:e8:32:7e:98:22:
a8:93:8e:19:f9:f3:42:4d:1f:5b:a5:23:59:2a:69:
13:f9:1c:70:64:38:2f:66:4e:a3:8a:1d:1c:3b:c2:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:D7:7E:47:39:3E:06:D0:12:F0:3F:84:90:F2:CF:41:DF:35:8D
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3f:20:ec:f8:7b:b2:48:5a:f8:95:af:d5:b0:8e:8e:8d:65:
a0:69:e7:73:57:05:5b:02:79:98:6d:4a:a9:dd:ad:34:9e:42:
27:b0:bd:50:b4:20:1f:34:ac:0e:d6:ff:4b:f0:4f:f1:4c:e9:
59:50:5a:3b:a3:be:3d:b7:03:03:64:a4:a6:35:0d:76:d8:b1:
f0:91:0a:a9:4d:7c:6f:41:4d:03:7f:c2:85:db:4f:bb:c6:c0:
bd:5e:5a:1b:47:f0:e2:d9:21:67:4d:26:4c:65:b6:1a:62:0f:
90:d6:d2:25:f6:1d:f5:e2:87:ba:9b:f5:1b:41:3d:61:95:c5:
c1:db:21:3d:c1:5f:36:1f:80:fc:a6:c2:8c:76:08:33:29:c7:
38:b2:8b:b3:cd:77:4a:0e:1e:06:ff:6c:ad:36:a2:63:74:b0:
ab:03:7f:cc:a1:0a:87:22:c5:46:99:05:c1:3b:95:ff:af:bb:
50:59:da:e3:82:eb:c6:a5:4e:66:7c:be:70:09:76:08:8e:2d:
8a:55:12:19:be:2f:51:c6:86:48:c9:29:1a:2a:63:f6:1d:97:
b8:07:fc:c7:df:85:86:fe:8b:35:72:88:b4:4e:a1:7d:8d:d1:
82:80:57:72:aa:90:ce:36:28:f1:ac:74:50:d3:1a:95:f9:d4:
8c:e3:51:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:39 2025 by rpki-client