Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: q2anhqAzqspxn8eMDW/velFau4nwPqRTpPRXh1gNKLw=
Subject key identifier: A3:7A:E4:D4:F3:EC:15:85:BE:1B:F0:82:D6:B2:13:27:3D:B4:08:09
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 0196439F47ABC46E2169FF779C9E491F3753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 031A
Signing time: Thu 17 Apr 2025 12:00:34 +0000
Manifest this update: Thu 17 Apr 2025 12:00:34 +0000
Manifest next update: Fri 18 Apr 2025 12:00:34 +0000
Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: oumV0fvgWzoXX6HybLrJfdjH8mASz08CjDb+dLW7THg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:47:ab:c4:6e:21:69:ff:77:9c:9e:49:1f:37:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Apr 17 12:00:34 2025 GMT
Not After : Apr 18 12:00:34 2025 GMT
Subject: CN=a37ae4d4f3ec1585be1bf082d6b213273db40809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:3f:e1:e7:d5:18:ed:d1:18:a3:6b:3d:23:
d1:d7:9a:09:8c:8f:22:61:62:10:2c:5a:f9:2a:9c:
8f:3c:70:0b:b0:43:8f:fc:bf:11:09:63:cb:bf:38:
45:c2:04:99:22:de:f8:89:a7:75:4b:75:7f:cd:ef:
9b:36:d0:a9:29:6a:a7:3c:ed:4c:3f:2f:2e:76:04:
3b:db:ef:9e:df:4e:d0:6c:27:ee:06:cd:6a:f4:a6:
49:3c:b1:68:df:d2:cd:9a:35:d5:cd:0e:ba:1b:99:
ac:da:a2:54:1a:3d:1a:4a:4e:91:21:7d:b9:8d:ff:
54:b2:64:bc:96:24:9b:31:6f:d1:3f:de:d9:da:ae:
82:44:08:14:ea:e7:b9:99:f4:4d:b0:b8:a7:ba:5f:
89:28:03:5d:ff:3a:ca:e9:fa:29:a2:d7:62:24:cb:
62:a4:87:80:28:aa:7c:a4:c2:6b:c7:a1:97:8f:92:
19:6b:bc:a3:0b:5e:f9:02:3a:2b:0c:de:00:b1:ed:
98:27:39:6d:1d:3b:e2:42:46:f5:f1:ed:97:46:60:
89:79:f6:42:7d:57:da:6d:d9:8e:b1:b4:26:2f:8d:
3f:f0:79:f9:42:b9:5c:05:73:c0:33:03:96:32:5e:
f0:9e:53:89:ed:3c:ad:7a:7e:8f:c4:2b:71:84:58:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7A:E4:D4:F3:EC:15:85:BE:1B:F0:82:D6:B2:13:27:3D:B4:08:09
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3c:a8:28:23:48:45:a8:d7:c7:5b:f8:71:ed:ba:09:ff:88:
4d:ec:1d:a8:25:0e:d6:b6:14:fa:b1:2e:28:20:c7:b6:f3:2a:
e4:80:76:94:04:3c:48:f6:f4:55:e5:d0:dc:50:6f:24:bc:5d:
e7:34:10:54:16:14:e4:ef:83:a7:27:92:22:6e:60:9a:03:bc:
45:ee:8b:d3:90:08:67:37:f9:7e:5c:87:9d:f4:7c:ed:b9:0c:
63:05:9e:30:4f:42:ef:d0:db:a9:04:ba:31:cf:9e:11:45:6b:
51:c9:78:77:fd:bf:15:10:27:3e:5e:ba:27:ff:85:04:e3:b6:
26:3a:5d:81:8c:e4:02:8c:6d:19:21:4f:bc:83:9c:57:6e:b6:
09:52:44:cc:d9:5b:85:0b:f0:09:f6:c1:be:01:0d:dd:75:90:
90:f1:d1:c8:37:f0:c1:0b:8d:91:88:4d:d8:53:f4:eb:1e:15:
8a:8e:23:1a:1a:2c:fc:d7:58:7d:eb:74:56:e9:fb:e3:3d:80:
da:57:76:60:01:86:ea:e8:4f:a3:f0:8b:85:3b:11:e7:0a:36:
64:84:04:70:b9:8f:2c:96:14:b4:34:b0:78:3b:b6:25:ff:f6:
ce:b4:ff:15:99:a2:0e:d9:43:8d:4e:b8:7a:09:a6:ec:94:b1:
fe:0d:97:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:06:06 2025 by rpki-client