Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
File: tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft (raw, json)
Hash identifier: BeDyj1U3Wak07c71nGgUvE8Rd4LqcDc6wI1SNVyIUh8=
Subject key identifier: 32:9F:DA:6E:7D:27:A8:69:C9:8A:F3:1A:9F:5D:8D:AC:FD:94:7C:FB
Authority key identifier: B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
Certificate issuer: /CN=b543ef9bc3c2132361c1240972a180912bf7a859
Certificate serial: 01963FF928A0B315EA8269A200F94BFC51B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
Manifest number: 10A0
Signing time: Wed 16 Apr 2025 19:00:15 +0000
Manifest this update: Wed 16 Apr 2025 19:00:15 +0000
Manifest next update: Thu 17 Apr 2025 19:00:15 +0000
Files and hashes: 1: 3_-c02s70_bWI80EfV5nMZhCjHg.roa (hash: 1ZDiW1elfufjNKaqhAw29FTOI2soWhXtopSXVjj/ruY=)
2: 9XYzuBVHhZfQ-Z8_PdIStP3gEJU.roa (hash: 45mg1wTAOjryTd4LOjOOGQdcDwneEtBdS+C0gsQtj+o=)
3: tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl (hash: JbY+8vyCNJomwmnBvjRfEMm1V/Ru46VJ5KWfxbA4Ccc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:28:a0:b3:15:ea:82:69:a2:00:f9:4b:fc:51:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b543ef9bc3c2132361c1240972a180912bf7a859
Validity
Not Before: Apr 16 19:00:15 2025 GMT
Not After : Apr 17 19:00:15 2025 GMT
Subject: CN=329fda6e7d27a869c98af31a9f5d8dacfd947cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:2d:7d:de:9a:4a:a9:7b:40:ad:ac:5f:06:
38:e1:7f:87:b3:38:ed:3b:8c:d7:a5:63:a1:1a:b0:
ef:b1:fa:9e:10:18:91:de:a7:ae:31:a7:b8:e9:a0:
95:1b:72:ad:f6:2c:53:08:d7:a5:ed:29:77:b2:d2:
49:76:ba:3b:a6:c0:8d:af:0b:d9:e6:e4:75:d7:82:
b7:66:43:6e:68:12:67:c8:83:23:31:07:bc:ed:01:
e1:ab:f7:f5:5d:11:53:a5:75:08:d5:25:01:f5:50:
60:61:76:db:33:83:2b:c7:00:af:e2:d3:63:ed:c0:
32:13:c4:36:8b:70:58:9b:02:34:08:43:a4:c8:51:
ac:3b:c6:88:f8:ff:53:0c:bd:a9:64:68:99:a4:49:
33:41:22:ea:cc:51:0f:fb:e0:49:b0:0d:82:d2:e0:
7a:4d:53:11:8b:99:56:ed:83:5d:a7:63:69:96:21:
b8:70:ba:f1:2e:72:60:ce:60:3f:bc:0c:34:ce:64:
2e:be:b3:fb:c1:2e:b6:72:f3:79:1b:5a:d8:2e:e3:
f4:a3:06:8d:56:31:d2:46:49:ce:1d:d3:97:39:db:
bb:a4:23:85:6a:99:fa:9d:d9:95:0b:08:8e:98:49:
3b:bd:f1:33:1b:50:8c:8a:b9:eb:c6:f8:4d:55:28:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:DA:6E:7D:27:A8:69:C9:8A:F3:1A:9F:5D:8D:AC:FD:94:7C:FB
X509v3 Authority Key Identifier:
keyid:B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6e:3a:ae:6c:94:3c:8b:b7:1a:5c:83:5d:31:21:04:85:c2:
3e:35:41:1f:38:3e:c6:11:48:a9:ea:c3:9f:f1:ca:59:8b:1f:
bc:da:4f:9d:88:7a:e7:8b:20:b9:f3:67:a5:77:28:1c:19:32:
2b:6e:e9:df:49:18:14:54:4a:b4:13:0c:9e:f7:03:0f:1e:08:
09:a6:cf:87:dd:8a:77:c7:4a:a4:fd:22:ed:cd:a8:6f:b1:5d:
e9:08:e5:68:a9:12:11:92:3f:42:fe:1f:92:7a:d0:6b:c3:b7:
93:cb:11:0a:5b:41:f5:a1:f9:01:d1:ab:b9:8e:96:63:b6:de:
de:a3:70:83:63:aa:b8:00:cd:81:3d:ac:89:fe:1a:d2:bc:3a:
d2:2e:11:0e:80:db:7e:fb:ca:0f:94:45:a3:8d:7f:4f:d6:87:
bc:39:e9:98:6b:b5:cb:f6:77:f4:24:78:c2:ae:a9:a4:62:93:
bc:a7:23:52:21:7e:e7:9a:1f:3d:30:1a:5f:db:61:37:e4:00:
5b:6a:b2:81:b2:59:fc:f2:f1:68:5b:11:3b:7a:59:f2:40:9b:
90:df:6b:92:79:7c:31:27:ab:ba:01:a5:32:31:9e:f3:5d:61:
88:fb:84:37:f2:eb:71:f3:6a:cb:bf:6d:e5:84:38:11:88:e9:
7d:61:e9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:06:03 2025 by rpki-client