Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: U/7Z80MEalhG4r5wptD/EiVO7LgLZ65Vg02b/86ZMJM=
Subject key identifier: DE:0D:49:21:63:6B:7F:C0:75:28:B1:91:25:D0:B6:BB:CD:9E:79:4A
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 019658700581BEA8D35CCA9465242321438A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 13:00:58 +0000
Manifest this update: Mon 21 Apr 2025 13:00:58 +0000
Manifest next update: Tue 22 Apr 2025 13:00:58 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: Wd6TCLA8NbgDUHIhbVXKgBQ9EXiMVqc10auZOP+/I5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:70:05:81:be:a8:d3:5c:ca:94:65:24:23:21:43:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Apr 21 13:00:58 2025 GMT
Not After : Apr 22 13:00:58 2025 GMT
Subject: CN=de0d4921636b7fc07528b19125d0b6bbcd9e794a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:95:4f:ae:38:7f:10:d8:05:de:8d:35:0d:
82:1a:5a:13:23:bd:08:32:c9:07:6d:96:c0:cd:01:
12:7a:45:2f:77:a2:bc:29:4a:28:c9:68:a8:1a:88:
f3:5c:72:99:1a:b1:8b:bb:66:e3:88:1b:78:fd:e0:
35:d9:b8:e3:ce:e2:d3:b2:54:69:58:0f:cf:1b:62:
8a:8e:d1:8e:10:7b:e9:a8:5f:93:6c:07:58:1a:04:
82:10:5f:c9:7a:f7:9c:8a:44:7e:fa:c6:5f:16:b1:
d2:50:a2:e8:b8:7c:20:1c:14:b6:4a:6b:3f:8d:a2:
f7:7a:38:92:d1:64:d1:e0:c0:5a:45:dd:1d:65:e5:
d5:d3:bf:9a:f2:7d:4c:57:6a:4b:3b:81:b2:c3:98:
ed:62:ab:71:be:04:d6:a0:fb:da:5f:24:40:86:4b:
f9:70:5d:2b:e4:c7:58:95:a6:7f:28:fa:8c:66:4c:
3e:3a:ad:47:c8:2a:9e:8c:16:fc:b1:0b:e8:67:f4:
b9:18:83:a4:70:de:83:eb:94:f5:24:87:aa:5a:b8:
d6:51:fb:f3:26:7c:5b:a7:30:e3:75:63:86:10:3c:
f2:66:5e:b8:01:10:6b:7a:4c:cf:dd:ef:d1:21:3d:
aa:a6:1f:90:5c:71:d6:a3:8f:fc:3b:ed:05:f4:50:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:49:21:63:6B:7F:C0:75:28:B1:91:25:D0:B6:BB:CD:9E:79:4A
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bf:eb:66:5f:f6:3a:75:60:2f:56:4a:1f:1a:50:43:16:22:
dc:b0:1f:18:2e:99:d9:83:27:d3:92:7a:26:02:8c:84:e2:78:
c2:a8:a7:3a:dd:94:d0:60:6e:73:78:4d:e5:d8:a9:1f:50:40:
e5:e0:9a:5e:70:bf:20:f3:a9:1a:3a:e9:0b:f5:db:1b:9f:b8:
eb:1c:40:3b:bb:31:5d:c9:cc:3b:85:d5:da:29:85:7c:0d:78:
08:93:59:b3:ff:ee:19:4e:a4:64:8f:9e:3b:c8:6c:e8:7c:03:
3e:ce:3a:d4:20:46:46:da:56:5d:4f:f2:e1:7e:a5:4e:ed:d5:
0c:7e:be:e0:3c:f8:e3:69:0b:ca:81:23:ef:0f:63:1a:ba:5b:
bd:a8:a0:4c:10:05:14:2f:59:77:87:c8:17:ea:eb:61:3e:2c:
aa:03:b7:e6:88:26:5d:ab:f6:ee:36:83:aa:64:dc:22:2d:54:
ee:ed:4f:3d:4a:f7:89:07:c4:32:d7:ee:0e:85:41:3f:15:2e:
52:d0:66:c2:c9:ee:63:d4:78:77:6d:ee:fa:bb:59:78:5e:f3:
55:cd:03:2a:76:35:d9:5b:3f:73:90:62:03:72:a5:ee:b5:79:
5d:4f:d9:80:c6:3e:9f:0e:91:e7:7c:15:28:72:a7:35:36:17:
5d:a7:66:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:26:07 2025 by rpki-client