Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: /FHNThcNBxMj1RnyePAQiq9BsLMtDp3aF5aU2XZb+XM=
Subject key identifier: BB:1A:7D:10:28:45:0B:F7:4A:26:45:23:B7:2D:D7:4B:CA:0A:DB:C2
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 01965191D39611919CA4E35E87E2CDE01CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 072B
Signing time: Sun 20 Apr 2025 05:00:33 +0000
Manifest this update: Sun 20 Apr 2025 05:00:33 +0000
Manifest next update: Mon 21 Apr 2025 05:00:33 +0000
Files and hashes: 1: XkoFzkhGOVU5LUerqTHh__leFZg.roa (hash: z0PB3OIVOF5qm40evjJvgBDDcdbv5T70mZxHdxYv7d4=)
2: lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa (hash: eG5bABtFszI7d/P1aStzKC6pmrIphfH8b15K2w83lWk=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: rsDdhBPXzTrvvW0HysvHBMKtjr2ibxDGUpVlIz4faTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:d3:96:11:91:9c:a4:e3:5e:87:e2:cd:e0:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Apr 20 05:00:33 2025 GMT
Not After : Apr 21 05:00:33 2025 GMT
Subject: CN=bb1a7d1028450bf74a264523b72dd74bca0adbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:be:d8:30:05:a2:42:34:89:ee:b6:70:83:
52:08:79:02:98:23:f6:f6:b2:88:c6:1e:4d:d8:af:
f0:8e:bc:e8:1c:f6:cc:b6:93:86:54:9a:ed:08:cc:
af:dc:dc:e4:27:40:b6:7a:44:25:5f:ab:74:84:05:
cf:d7:5e:8d:07:ab:7a:bb:b8:57:50:10:75:97:6e:
8c:11:ee:a0:67:f9:42:fb:2f:85:58:64:e5:ab:67:
c2:59:35:e9:0d:da:b7:b1:4f:2d:74:67:72:f4:c0:
ff:df:36:4f:97:9e:69:0b:16:18:91:38:dc:d6:0d:
e8:3a:8e:ad:be:05:ae:a9:2a:04:a9:f8:7d:6e:2d:
86:fe:e4:91:e1:de:18:d7:74:a7:23:9c:20:ee:d5:
2d:f7:59:26:ad:4e:43:70:5a:2e:e4:0f:fd:3e:7e:
c5:b2:f7:df:36:09:b0:79:23:5d:e7:25:0f:1a:d6:
0c:37:06:f8:d1:f5:00:fa:30:88:df:e1:33:48:e8:
35:3c:b4:3a:c5:84:c5:dd:14:6c:f2:91:e2:fa:2d:
32:74:3b:38:56:00:e2:1f:56:63:55:08:a6:9d:7f:
c0:d8:76:13:2c:96:ea:14:21:fc:23:db:00:42:85:
7f:59:8c:f2:e8:8a:1d:cf:aa:20:83:f8:da:2e:75:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1A:7D:10:28:45:0B:F7:4A:26:45:23:B7:2D:D7:4B:CA:0A:DB:C2
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a3:d8:91:48:28:73:8a:56:d4:e9:ee:7e:d1:75:b2:78:3a:
ef:61:e8:e3:a1:f3:07:d6:b3:14:94:06:61:7b:36:69:19:73:
49:37:41:59:c3:81:df:2a:2b:08:bd:b4:3e:57:6d:cb:b6:e9:
f4:9a:9f:7b:79:05:58:2a:ce:60:48:36:d9:46:b2:d8:bb:ba:
29:4b:df:05:5f:59:88:09:9c:87:23:94:e7:29:1e:c3:bd:d6:
0d:ef:cd:24:e5:83:d5:0a:11:64:c1:35:9f:73:ae:4a:d7:75:
25:84:e4:50:8e:86:0c:9d:94:48:46:bd:b8:eb:34:75:0a:84:
a0:6c:5c:fe:ae:0d:53:d2:c4:61:93:59:e2:d1:1a:3f:77:df:
ec:ad:94:80:a3:a5:c6:63:6b:04:00:52:48:06:de:3e:44:dd:
8b:fd:c6:9e:f8:f8:02:e1:7d:ec:ea:ba:26:61:9e:9a:dd:00:
63:73:7d:bf:64:cf:9b:f9:06:f5:ec:1d:e5:27:f2:f6:8b:79:
10:4a:74:21:f0:af:c8:07:13:1b:cc:bc:83:10:3d:52:d3:ce:
40:03:37:8c:41:8d:ee:16:93:15:fb:23:c5:0b:84:97:4d:53:
30:d4:d3:ef:6c:5e:7d:14:8e:08:35:e7:5f:49:97:55:29:c0:
83:1c:3b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:25 2025 by rpki-client