Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier: lh/29YVgoZj3igKVwy2mzAPMIbE2YH+3gNay0EUHQ14=
Subject key identifier: B3:68:9F:88:E3:D8:01:41:61:FF:14:80:38:D7:0C:7C:61:A8:C5:49
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 0196146AF6B4F2C9CD2901BCAEDEF550D2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number: 0BA6
Signing time: Tue 08 Apr 2025 08:01:16 +0000
Manifest this update: Tue 08 Apr 2025 08:01:16 +0000
Manifest next update: Wed 09 Apr 2025 08:01:16 +0000
Files and hashes: 1: 3R1qEXucRzxQh626HSW1D35Fl4s.roa (hash: LtQHe1lS81VaVTgB7dK3iqoJ6l+gsJCEbPPIKSQ56qA=)
2: shBZifpLlKUixrRLPCki_9Cdo5k.roa (hash: vUCEHBiQ5vk3QwGcMpMB9RyrWPTOpvKerhzJgaIKpHk=)
3: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: GBWc9w2ojlDnskClzFEElJOiFHHfiCW+9msA2ElgJQs=)
4: xPMhM3gDhaqkEeW-0RAQthU0wZQ.roa (hash: +K0EshtD5Pam9WJWgjYOHCV5ZtA/67vGEzp1bYJI+K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6a:f6:b4:f2:c9:cd:29:01:bc:ae:de:f5:50:d2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Apr 8 08:01:16 2025 GMT
Not After : Apr 9 08:01:16 2025 GMT
Subject: CN=b3689f88e3d8014161ff148038d70c7c61a8c549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0f:a6:9c:19:9b:4a:c8:c2:40:ff:4a:c5:94:
0a:4f:1e:18:ed:4f:bc:a1:c7:c3:06:38:e3:7b:84:
d6:b8:75:96:c4:99:e2:fd:9b:df:71:1a:4f:cd:6c:
5c:2a:e4:5e:31:0b:53:11:56:ba:5b:bf:da:f0:c2:
21:e8:d2:fb:d8:d7:18:97:b9:d2:26:35:0d:14:ce:
37:f8:47:e6:88:b7:f4:61:1a:fa:1e:c9:7b:77:9e:
6c:e9:33:3a:5e:b7:df:06:cb:1a:85:b1:36:88:e2:
70:5a:f8:6f:51:31:ec:f0:0e:46:14:1e:56:51:cf:
07:28:5e:fd:49:3b:33:88:80:b4:42:14:be:c5:b1:
8e:de:4b:89:8d:4f:b7:de:d3:c6:14:5f:ce:f2:41:
2c:6c:0c:a2:99:82:d2:04:2c:6b:1c:c6:5c:8b:f0:
86:51:b5:ad:1f:b9:ee:a3:b0:5e:71:fb:44:b4:ec:
62:ce:b8:ca:5d:1b:46:80:aa:64:3f:d1:17:34:fd:
86:82:54:4e:14:0c:f1:17:2c:f1:1b:60:e7:84:b3:
bb:71:4f:ab:b2:43:0f:d4:6a:e4:a3:c7:e4:71:21:
83:d4:47:e6:6c:f2:4f:96:cf:8f:64:72:2e:27:49:
6c:ce:fb:f8:cd:c9:a5:45:65:6c:96:85:4b:58:85:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:68:9F:88:E3:D8:01:41:61:FF:14:80:38:D7:0C:7C:61:A8:C5:49
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:09:84:a2:4f:77:f2:3b:ba:96:23:19:8a:0c:a3:de:91:61:
d3:cd:70:94:3b:1d:eb:35:b2:aa:2c:02:d0:58:5e:b4:56:59:
76:19:c0:9c:10:cc:f2:88:86:86:34:19:af:fb:c1:cd:de:fa:
3a:34:3b:9a:42:d7:75:0e:a8:26:a5:e3:7d:5b:52:95:79:75:
41:3b:70:d8:56:e3:b6:7e:bf:f1:ef:43:69:18:5e:4c:b6:c9:
89:70:3a:fd:04:81:0a:bc:ca:33:58:d8:4e:55:2f:03:fd:20:
36:d7:74:a3:26:c0:be:05:c5:17:93:3f:df:b3:44:88:73:65:
af:8b:25:c6:d4:d9:42:8d:40:50:10:25:5d:3a:34:44:cd:99:
86:d4:b6:64:17:00:75:61:c5:5c:30:30:39:3e:77:3f:9e:74:
4a:5c:76:5c:67:45:fb:63:46:9e:ef:e2:8a:39:c7:df:fc:6d:
36:21:4b:3e:dd:c6:d0:46:67:45:6c:a1:d5:db:b4:1a:2d:4c:
6b:e8:04:d1:09:2f:41:ee:48:31:dd:73:10:45:4c:51:02:fc:
9b:d2:6f:87:ee:15:f5:e6:37:d6:5d:cd:af:ec:1d:98:3f:32:
85:07:f0:4c:0b:01:35:1b:53:17:d7:24:45:01:48:11:75:f6:
d1:1d:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:47 2025 by rpki-client