Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: N0YLc7WtfxytVLWOUo4Wn495OSuxyXV7BPs/lIuNljc=
Subject key identifier: 3D:1C:82:17:20:4C:C9:F0:06:2B:BF:69:5A:4C:23:8B:10:97:26:E1
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 01964A0EFEF790F627B07357F56B82101E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 18:00:18 +0000
Manifest this update: Fri 18 Apr 2025 18:00:18 +0000
Manifest next update: Sat 19 Apr 2025 18:00:18 +0000
Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: wNVrz5RLTpJFBTXEFgYxkJckZB6saJ74IKZD8JwtdDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0e:fe:f7:90:f6:27:b0:73:57:f5:6b:82:10:1e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Apr 18 18:00:18 2025 GMT
Not After : Apr 19 18:00:18 2025 GMT
Subject: CN=3d1c8217204cc9f0062bbf695a4c238b109726e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:67:86:98:30:8f:8e:fa:a1:00:5c:8d:b8:
1a:2b:5f:24:8e:3c:db:b2:c1:1f:a9:bf:87:d1:97:
65:68:78:ce:c4:45:27:69:42:47:88:7a:ea:b9:7e:
5c:26:a1:bc:d2:e9:27:7e:d2:5c:f4:7d:aa:d4:6a:
dd:44:4e:cb:ee:12:83:2f:67:9b:90:c9:fe:a6:96:
86:e9:ab:79:5d:bf:49:b7:ed:4e:f3:45:20:01:e1:
df:b5:e4:dc:a4:0e:fd:ca:cc:e1:97:ef:7d:20:fa:
68:60:3a:c7:b1:1e:45:7f:7e:17:b2:ae:c6:8c:69:
83:94:35:23:fc:fd:b9:44:72:47:24:d0:a2:8e:b5:
45:d0:7c:d6:db:24:e2:1b:d9:ab:a1:a2:1a:ca:67:
53:a2:46:b0:94:84:d8:95:7f:23:33:76:d8:c9:7e:
dd:8e:35:1c:09:f8:86:f8:f4:37:db:f3:5a:62:f2:
b0:da:9a:6a:3b:4e:99:ed:73:64:9a:cf:40:33:2a:
38:30:92:ce:72:2f:e8:44:f5:6c:54:d1:6b:d3:db:
54:2b:ce:ac:2d:a5:bd:91:e7:1e:62:d4:92:a4:75:
59:9c:36:f0:b9:1e:f7:b7:d6:a6:87:a8:b1:79:54:
4b:76:23:8d:5b:82:2d:7a:6f:40:fa:26:70:04:68:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1C:82:17:20:4C:C9:F0:06:2B:BF:69:5A:4C:23:8B:10:97:26:E1
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b7:78:80:cc:8b:9e:d3:c5:aa:55:8b:a3:c5:4a:e0:a6:1c:
03:55:7e:af:3a:1a:45:d2:22:53:72:ee:50:7d:a7:3a:97:17:
50:75:e5:17:f1:02:d8:b1:2c:91:29:74:d3:24:2e:a0:23:01:
f5:1e:5d:cd:2c:e7:6c:51:c7:43:62:b2:ed:23:b1:2a:3d:17:
26:4e:27:0b:4b:57:43:c0:32:26:aa:d4:07:d0:ce:c9:a8:a7:
42:64:7b:45:7e:ce:40:e7:1c:3f:c0:d7:64:7b:04:96:38:87:
a4:7d:ad:73:f9:ef:1a:71:58:6b:9d:6e:3f:bd:ab:70:e0:81:
1f:77:b8:9b:9b:72:65:b1:3e:a3:eb:90:c2:39:a4:0b:24:3f:
dd:b6:81:d2:39:25:1b:c4:5c:6a:c4:5d:5c:12:0a:31:93:56:
52:dc:c0:41:68:75:f5:71:17:91:bf:f5:80:7e:22:04:b1:36:
dd:2f:80:f3:b0:b5:5c:14:a4:b3:3b:31:dc:75:d4:00:80:dd:
ad:3b:50:6d:39:1b:65:ed:a1:35:72:69:69:f8:ba:f6:92:45:
60:de:3d:14:19:ae:37:55:ad:8e:3d:00:04:bf:63:14:4d:01:
d9:3e:9c:dc:69:f9:e0:1e:b2:6f:03:b4:a7:dc:f2:69:48:a0:
9e:46:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:03:41 2025 by rpki-client