Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: wBoZf0r49WfToZEM4tqnHeSWI37/0wuxbV4EsWEwsEg=
Subject key identifier: 89:D9:EC:4A:D0:0E:44:36:E4:90:F5:03:E9:BE:75:53:5D:1F:46:87
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 019655DC9CB97A9B86DD078CF7518A2AF0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 01:00:43 +0000
Manifest this update: Mon 21 Apr 2025 01:00:43 +0000
Manifest next update: Tue 22 Apr 2025 01:00:43 +0000
Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: LW7v04mJBEYk1cucWNY3wanZxOKGV6eGQTRA9NjEiQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:9c:b9:7a:9b:86:dd:07:8c:f7:51:8a:2a:f0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Apr 21 01:00:43 2025 GMT
Not After : Apr 22 01:00:43 2025 GMT
Subject: CN=89d9ec4ad00e4436e490f503e9be75535d1f4687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:d8:8e:0a:76:e8:26:aa:e5:cf:d4:3d:0b:
21:98:5e:30:02:72:25:65:4e:a9:6b:a4:1d:06:2d:
df:00:39:b7:0a:a3:e8:ac:03:8b:b2:61:1f:1b:35:
91:69:be:ff:3f:88:09:8d:e9:ac:a2:b8:4c:3e:49:
d6:cd:85:13:3d:7e:8c:f0:5d:c0:49:17:6f:71:48:
8a:b3:79:66:7c:da:c1:15:73:51:36:54:01:a8:65:
61:b3:f6:3d:54:08:b9:20:32:e0:32:44:6a:7b:ba:
87:fe:8d:c3:2e:27:52:71:fd:78:06:63:22:80:82:
65:31:de:b9:12:1a:29:4b:6a:0d:20:58:dc:a5:88:
9b:69:b1:bc:dc:c4:34:59:fb:17:26:1e:c4:85:a4:
a3:23:34:98:e4:82:bb:4f:d2:de:b2:f0:0d:bf:2c:
9c:b0:21:b3:33:50:2f:d8:f7:a5:c8:52:9e:96:81:
04:af:e8:ff:78:b0:26:f2:8a:a3:25:46:95:ac:8b:
74:23:b9:81:a0:a7:85:52:40:db:2e:bb:83:1e:1b:
36:b7:ae:38:12:33:25:74:cc:2c:40:32:d6:f0:fb:
37:0f:14:7c:d1:b8:59:2c:92:fd:ff:d1:cd:64:a6:
0a:38:fb:31:86:ec:e7:06:90:67:ae:03:b3:b9:5f:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:EC:4A:D0:0E:44:36:E4:90:F5:03:E9:BE:75:53:5D:1F:46:87
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d1:47:a8:cd:0e:4d:c6:d3:08:f3:cf:8a:ad:e9:81:e4:41:
82:8d:b3:29:4c:55:b9:2b:b8:cf:65:1c:bf:b6:a5:ad:5b:60:
64:4d:6d:72:c3:dc:1c:19:0b:f9:26:58:f2:15:a1:29:4c:c9:
cb:23:0e:61:30:54:7b:60:f7:20:6a:f7:3f:4d:be:39:fc:75:
0a:a0:34:fd:92:f0:3c:7f:86:d2:a3:54:67:2d:ad:2d:18:b2:
17:85:b0:c2:1b:31:07:cb:81:a3:98:e5:2f:d1:b8:05:3b:2c:
32:c4:cc:67:84:2e:aa:bd:52:87:34:0e:a4:34:a0:1d:22:60:
b1:ee:40:cb:82:7b:99:fa:99:28:be:42:18:a9:41:9b:54:a6:
c8:6d:bc:85:07:f4:c3:6e:4a:be:a5:5e:ab:c5:65:af:13:ed:
a5:17:ce:76:f1:66:18:ab:43:78:16:82:04:cf:1f:24:7a:58:
43:f1:10:1d:54:60:ab:90:1e:e2:de:0e:54:8d:b2:ab:70:ac:
23:55:07:e1:8a:20:5e:0c:00:2f:fd:0e:bd:9c:70:3f:fb:39:
ea:f1:43:86:0b:ce:a9:f8:32:47:b4:c1:a1:c2:f2:39:34:de:
67:2b:50:36:d1:bd:a7:5e:2a:f7:b7:af:b1:7a:1c:de:1f:1b:
a6:5a:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:04 2025 by rpki-client