Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File: tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier: PPOTpgxYxvmNWztqSzQM/zlHAktxq5QyBHea9TISXYw=
Subject key identifier: B7:CA:3D:D4:71:84:47:09:2A:66:F4:0E:8B:32:39:7A:B5:6C:77:AC
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 01960E31D93E1E1C8F0697043D4726E0C603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number: 14D9
Signing time: Mon 07 Apr 2025 03:01:09 +0000
Manifest this update: Mon 07 Apr 2025 03:01:09 +0000
Manifest next update: Tue 08 Apr 2025 03:01:09 +0000
Files and hashes: 1: 4lhTaQhjom1qkpeBd0ZsbdWiEJ4.roa (hash: XdHlLCQ2Kh6iuUQP6DmaSkVFP47PPhEh+iIit9uDq/c=)
2: Loamkgq2liGt_WerD0xhgg9VD4c.roa (hash: HJiMbQmWc3n1Lwl3vm8HBtMiaI2Ev5JS4MMKRu/Y4gU=)
3: kTZKdp3t576jj7V1laKryCYz0Og.roa (hash: HbtSMYd2T/15rtkOhZspTZMKwAPA+sik9h0BqyVd10U=)
4: rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa (hash: UNrRcAyslLxjeDmqjrPzHbwMyZ4AtgV3GxOrJgdzxQg=)
5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: vYjLBe9m0IWXWQzlH1yj0180wGTX+V5Q1F+KVp41FPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:31:d9:3e:1e:1c:8f:06:97:04:3d:47:26:e0:c6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Apr 7 03:01:09 2025 GMT
Not After : Apr 8 03:01:09 2025 GMT
Subject: CN=b7ca3dd4718447092a66f40e8b32397ab56c77ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ac:43:38:f9:62:6e:f4:93:ea:b2:4a:e6:8f:
48:29:3b:46:67:76:19:0f:27:3a:91:28:67:b7:b1:
a1:24:cf:c9:73:c6:e3:57:47:06:e1:ad:b7:78:d8:
fb:60:84:4e:95:87:53:f5:56:c9:3c:e7:bb:b3:a9:
08:31:df:bb:0d:48:dc:8c:6e:e6:7f:73:c8:83:f2:
20:29:35:4d:61:52:26:35:26:9c:4e:da:12:69:43:
b0:dd:0f:e8:8c:5c:5d:5b:b5:13:11:d4:3e:90:8f:
75:57:fd:4c:92:f0:ea:d4:ab:e7:15:6f:6c:d6:3d:
7b:9e:87:b7:f1:d0:8d:a4:45:5c:e9:4a:4e:58:78:
bd:3e:fd:07:cf:7a:0b:30:d7:d4:80:be:48:58:7f:
fb:14:81:0f:fc:5c:33:ce:35:a7:12:18:ca:19:74:
79:05:3a:c7:62:4a:53:23:f0:f5:b7:a9:da:02:08:
6a:91:e1:97:f2:bf:88:7e:15:04:60:0e:b1:91:2d:
26:f5:68:fd:b6:59:5e:5a:de:d4:fb:8e:f7:1e:17:
b9:e7:b1:00:5b:05:9c:98:fd:a3:ca:ce:e2:50:a7:
3b:00:74:f6:68:ce:dc:86:3e:58:9e:59:d1:31:b6:
d0:c5:ca:04:5e:68:e5:50:db:49:d1:23:d8:5a:b3:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CA:3D:D4:71:84:47:09:2A:66:F4:0E:8B:32:39:7A:B5:6C:77:AC
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:33:85:b8:da:3c:98:29:bf:cd:7a:e4:62:ef:5c:83:32:b2:
e0:2a:dd:bf:72:64:d2:ae:8c:58:e0:2f:95:3a:b7:e7:30:31:
4b:18:86:72:e9:b1:34:27:3d:84:be:f4:11:9d:68:8b:db:5f:
a5:48:3a:10:7e:0b:80:5e:63:29:f6:7a:95:60:9b:37:b7:aa:
c9:39:26:4d:0e:29:5a:e7:a0:7d:29:67:97:84:e0:2c:e1:14:
54:4f:07:3c:ea:65:e3:38:70:69:9f:cf:41:39:d0:30:0d:49:
c7:36:e4:d9:7c:de:f5:92:64:e3:63:4d:e6:7a:78:90:bf:0e:
81:32:fb:f0:00:ea:e3:02:50:33:6b:2b:00:d3:28:3c:68:29:
6a:b5:cd:44:fd:a1:04:cf:3e:59:81:31:03:b6:a3:63:a1:9a:
1e:17:6c:98:e7:81:a5:f1:ca:e1:f7:fd:4f:1a:5c:d7:65:5a:
53:ed:32:51:e4:fd:5f:c6:e8:f7:8c:48:68:51:ad:fc:28:48:
92:60:53:99:a3:4a:37:ff:a9:64:fd:04:2e:b1:14:5d:da:2d:
3d:03:a6:c4:ab:e9:2e:e1:6f:ef:41:40:ce:ea:a4:7c:22:1c:
35:f1:84:d3:a2:9b:f3:bd:f0:2b:7d:9c:09:55:ae:4a:6a:5d:
bb:a4:3a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:54 2025 by rpki-client