Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: RK1zn/VagLVH9wG/5XLO02gUje+US69aLxOmKZKhPNo=
Subject key identifier: 20:2A:C8:27:77:53:C4:57:96:9B:05:A3:96:02:4E:4A:2B:4D:B3:81
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 0196222625A548A583DA6E7635A65A98691B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 14F2
Signing time: Fri 11 Apr 2025 00:00:47 +0000
Manifest this update: Fri 11 Apr 2025 00:00:47 +0000
Manifest next update: Sat 12 Apr 2025 00:00:47 +0000
Files and hashes: 1: 5d1Rsk4FP5GLfjvT0EmBWD5qTow.roa (hash: NqA84KX0Y0A9uS0K8Q/J20+otaYRcSGIUSuIKX3VI7s=)
2: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: mOx7jIGR7QYI4eLHi5v4nftl3adUQTwskuOo08zhwJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:22:26:25:a5:48:a5:83:da:6e:76:35:a6:5a:98:69:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Apr 11 00:00:47 2025 GMT
Not After : Apr 12 00:00:47 2025 GMT
Subject: CN=202ac8277753c457969b05a396024e4a2b4db381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6d:c9:39:5f:7c:02:de:22:ac:c3:34:58:a1:
f0:0d:56:f4:78:4a:1c:ca:2f:9a:b6:77:5b:a4:fc:
26:98:93:4d:88:2e:9a:92:39:cd:e3:f3:a2:a0:42:
23:0d:03:55:a4:d0:cc:f5:2b:dc:ca:ac:90:e4:ee:
80:55:1f:8e:01:58:47:fd:fc:bb:84:c3:e4:50:b2:
d0:e7:b8:60:77:97:e0:bb:e0:49:16:40:c6:73:2e:
7d:77:b9:9c:2a:a8:70:40:96:a5:ad:1a:b3:06:8b:
af:5a:84:d1:a2:19:80:81:17:dd:72:04:9b:4f:26:
41:1f:55:0f:d5:5e:3c:82:68:14:e6:3d:25:e1:37:
cd:d9:e0:47:00:22:2c:2f:04:fa:f0:7a:a7:b6:37:
4a:b7:cb:1f:8e:d4:f4:53:71:9c:3c:32:b0:6a:54:
a9:d8:86:00:27:39:08:80:a7:64:8e:07:a7:c9:9c:
1b:9a:6a:c5:d1:77:eb:7f:2c:bf:6e:fa:21:20:b1:
ae:a9:5f:66:b6:d6:65:f4:c8:5e:1f:8e:e0:8f:5c:
50:ed:0e:07:70:b7:3f:ee:cb:1b:ec:f6:44:a4:7e:
47:c7:6a:cd:ea:ac:0e:2b:8c:da:97:f6:57:1a:0c:
32:1d:aa:bc:f6:cb:17:96:b7:93:a1:72:71:66:e7:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:C8:27:77:53:C4:57:96:9B:05:A3:96:02:4E:4A:2B:4D:B3:81
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:03:c6:b9:64:f8:11:af:19:fb:4e:93:8a:2e:f4:06:30:22:
cd:ad:ff:9a:60:40:03:19:db:44:63:0b:71:81:61:f0:81:14:
e6:a9:28:09:12:5b:4f:a2:fa:16:de:34:3b:e1:b6:0e:d8:03:
2c:cb:bb:05:66:38:68:01:7c:83:ce:ff:b5:c7:2a:55:79:79:
a8:6b:df:df:ae:b5:c6:1a:2a:b8:71:6b:80:db:ec:53:3e:85:
77:b8:3f:f7:63:00:ef:78:68:e7:e6:e0:c6:4c:e8:9d:c1:93:
30:61:08:98:ea:cd:18:c1:02:dc:e4:fb:37:7c:16:16:70:10:
5a:bb:8b:ea:96:bc:1a:fd:49:84:ee:a3:e5:7b:8f:5d:ae:f3:
2a:3d:f4:96:7f:66:83:49:b2:eb:63:9e:17:02:e4:9f:8a:fd:
bd:a3:10:71:96:9c:99:ec:77:c8:16:8d:b0:aa:fb:a9:bf:af:
18:aa:97:be:30:d5:96:4b:8b:9f:d2:0b:ab:b0:4f:b1:1f:23:
2e:5f:20:1b:ed:51:fc:10:c4:6f:a3:27:1e:ce:3f:a8:24:e5:
d7:53:50:fe:9d:8d:10:bb:83:d0:ee:44:bf:7c:c5:c6:64:4f:
49:27:bb:67:a2:81:cd:30:72:47:f9:de:99:57:1a:da:4a:88:
33:23:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:41:34 2025 by rpki-client