Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: lhgvKmDPfkxGVIwhvWdhuHf4YjRIMpjLOiKsoAKmaUM=
Subject key identifier: 95:BA:45:75:E7:AC:8F:B6:EA:AD:7D:7A:73:6C:BE:4C:62:9E:85:6C
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 01964632BB912EEA99AA53ACF06624FDDE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 1100
Signing time: Fri 18 Apr 2025 00:00:51 +0000
Manifest this update: Fri 18 Apr 2025 00:00:51 +0000
Manifest next update: Sat 19 Apr 2025 00:00:51 +0000
Files and hashes: 1: iP514Grfm7HoMaMSlriqRZUp57w.roa (hash: uxTzsQkoKG+2gHXofBTy3Sd+QDMMkyYiw3WNGMp0rf8=)
2: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: 0uSf36m7pnzZOzudIR6t+sCPZ5fiIQHMdvOTOc88vCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:bb:91:2e:ea:99:aa:53:ac:f0:66:24:fd:de:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Apr 18 00:00:51 2025 GMT
Not After : Apr 19 00:00:51 2025 GMT
Subject: CN=95ba4575e7ac8fb6eaad7d7a736cbe4c629e856c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5a:79:dd:1e:60:39:16:10:29:38:0c:07:7d:
76:c8:fe:e6:bc:40:4c:8e:2f:ff:ec:61:de:34:c2:
c9:78:c8:7b:1b:45:1d:60:c2:f5:6f:59:a7:e0:48:
ef:10:9c:9a:88:77:94:6c:82:9c:07:c9:8b:7c:af:
ef:71:a6:4f:b9:67:13:37:82:8e:99:ff:ac:d8:18:
37:ae:e1:e7:36:be:dd:00:8e:ad:4f:a7:43:73:05:
cc:b7:70:b3:90:93:b9:a2:8e:81:da:e3:02:5b:74:
dc:69:92:b6:e1:b5:5e:44:80:fe:70:51:e2:16:e2:
80:88:03:9c:c1:7f:f9:4e:6f:35:4b:e9:f2:db:b7:
a1:40:01:60:92:5d:63:f2:ed:51:b4:ad:63:42:52:
d1:1b:4d:f3:8b:38:a2:6e:44:37:12:6b:56:71:41:
1a:66:5b:a7:df:f4:e7:3d:1a:23:96:3c:9b:18:29:
f8:fa:c6:95:f5:25:b5:83:d0:7b:de:0b:a1:1d:8c:
98:cd:ca:e0:5c:38:75:8a:71:75:b1:ba:2a:d2:95:
76:40:34:30:5f:35:5a:56:c9:01:5f:33:73:24:05:
8c:1d:f4:f1:89:70:4f:36:70:94:26:01:c2:95:48:
e1:5b:81:1b:54:f6:30:58:be:2e:54:ee:22:b8:33:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BA:45:75:E7:AC:8F:B6:EA:AD:7D:7A:73:6C:BE:4C:62:9E:85:6C
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:55:8b:74:8c:e5:25:d1:77:f2:37:1a:d7:1b:1a:66:ce:ec:
47:0d:18:c1:30:c0:e8:d6:63:25:42:91:4f:b7:20:ba:67:ca:
49:03:dd:c2:34:c9:6f:1a:44:a4:b6:61:2d:3f:22:fb:6d:86:
a0:a4:aa:ae:c3:66:6a:f0:14:6f:ca:11:48:85:3c:0f:05:59:
6c:43:0b:e8:f8:43:c1:b7:9b:88:f4:fe:e5:7b:7a:f4:52:67:
40:52:60:b5:f2:f3:8e:0b:db:33:84:75:fc:f3:cd:f8:6a:7c:
e7:b3:f8:e3:3d:00:e9:48:f0:a9:e0:af:ef:4e:05:31:98:5f:
39:0e:1c:b8:29:f0:11:58:11:04:df:76:ee:94:08:08:94:49:
10:16:2d:f9:08:7b:58:b3:a0:53:7f:a1:0b:4d:1f:fc:ef:77:
1e:62:58:1c:22:cf:c6:3c:3c:5b:70:08:e6:ad:0c:96:07:88:
a5:c4:e9:40:b5:ac:41:d6:e4:e8:f4:ba:d5:22:31:6e:4d:36:
09:f2:84:42:2e:ac:ee:6f:7f:7b:d9:92:ed:3d:68:d6:52:13:
63:b1:7e:ce:16:24:32:a8:16:9e:30:ed:f1:0f:ef:46:91:ae:
c7:89:60:d9:62:24:1e:fa:0e:50:da:4d:b3:af:9c:b5:89:33:
98:9b:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:51:49 2025 by rpki-client