Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier: dTlYH2WtUZmtnaSH2Ryd+TZngXGZ0cy1LdzXfAH0AAQ=
Subject key identifier: F7:70:F6:A0:8D:2B:1B:A9:85:CD:66:53:D1:72:2A:58:01:DC:36:37
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial: 01960188C037F2E7271ACCF2A7F8ED40B6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number: 14D0
Signing time: Fri 04 Apr 2025 16:01:01 +0000
Manifest this update: Fri 04 Apr 2025 16:01:01 +0000
Manifest next update: Sat 05 Apr 2025 16:01:01 +0000
Files and hashes: 1: R61HPMD68kIaSjuhapTR2hk_o_k.roa (hash: eWM7uVRHKJ0h/TzbbEISOsoLOvqx2gFtMEnPl7A/Y18=)
2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: wCsgWN8GgLjJC+9To6A50Qj9brTKUdmJqtOwTzuSmjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:01:88:c0:37:f2:e7:27:1a:cc:f2:a7:f8:ed:40:b6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Validity
Not Before: Apr 4 16:01:01 2025 GMT
Not After : Apr 5 16:01:01 2025 GMT
Subject: CN=f770f6a08d2b1ba985cd6653d1722a5801dc3637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:7e:53:3a:b1:4f:d1:7b:a2:37:64:17:75:
51:83:df:ec:dd:24:77:38:66:98:ed:87:0a:da:6d:
2a:2c:43:80:79:83:54:4c:c5:00:83:22:64:a6:61:
b8:28:03:d1:ac:32:9f:8e:33:a9:fc:ee:56:58:9c:
86:22:2a:e8:67:64:79:6d:6b:4f:60:7c:4b:5a:39:
69:2d:34:8f:7a:d8:65:2f:fb:04:b3:50:fa:8e:23:
2f:84:f0:06:b8:39:98:30:94:ff:b2:b6:64:e6:a0:
29:07:00:55:7a:c7:08:63:53:11:95:9a:26:20:1e:
7d:78:ff:3f:fb:ac:fd:d4:6a:ea:92:ef:35:38:df:
5d:19:85:bb:a4:59:46:2d:6e:13:a5:e0:93:43:3f:
2a:39:22:18:ce:31:97:91:3a:6b:af:52:c6:40:80:
b3:74:44:a0:30:22:71:22:71:f4:bf:9b:97:26:87:
63:4e:62:af:d2:87:27:bf:fc:c8:47:25:b9:ba:60:
64:54:da:ba:2f:0a:0f:2f:75:80:93:bc:0c:1f:f0:
05:c8:90:1d:a4:85:1e:ff:77:25:c5:24:c7:a8:ab:
35:fd:d6:d8:e4:76:a6:34:59:cb:ff:a6:a0:83:16:
d9:0c:87:e0:d4:74:d8:20:19:48:c6:11:bb:f2:df:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:F6:A0:8D:2B:1B:A9:85:CD:66:53:D1:72:2A:58:01:DC:36:37
X509v3 Authority Key Identifier:
keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:88:a7:c5:a3:38:32:95:dd:9c:fd:e0:34:fb:9b:2b:4a:39:
23:a4:89:c8:45:af:be:bf:f8:ca:69:50:57:4f:9d:31:f7:e1:
a8:b3:31:f7:0c:13:ef:e5:d0:10:81:12:64:90:a8:85:1c:06:
84:93:eb:c2:72:c7:df:2c:0c:63:a9:05:fd:ba:35:0e:28:1d:
b5:6b:04:59:9e:9e:3d:8b:2c:9a:80:7e:1d:91:09:f9:31:12:
87:f3:49:c7:f2:c5:bd:ce:c7:03:c8:ff:ab:cc:43:a4:6e:a5:
f2:5a:8c:3c:86:fb:b2:44:70:f2:49:53:3e:9f:90:87:a6:7b:
02:1c:79:1a:81:12:bf:27:10:96:66:ec:b5:81:1d:93:3e:16:
12:ae:ef:8f:a9:42:f1:9a:ad:cc:70:5e:41:cc:51:45:0f:4d:
fb:94:6f:0e:a1:3d:e4:4f:a8:1d:d7:9c:2c:aa:a3:b1:50:26:
c1:45:23:19:51:ba:ac:99:18:ad:87:95:08:2c:45:bf:e4:9a:
44:55:34:41:0e:42:ae:87:a3:bb:18:72:f1:b2:b5:5b:dd:11:
39:34:f9:24:cc:1c:c9:a4:91:19:17:77:32:c6:25:c6:ae:b2:
50:de:68:8b:be:05:94:ed:48:52:ea:57:d5:ac:9b:20:20:bd:
98:03:37:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:16 2025 by rpki-client