Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: qrLXCxcTqcOhojfBZP8kTN+UrFOOfTMWS45lN3i5zcw=
Subject key identifier: 85:C9:55:3B:27:85:50:89:BD:D6:38:AA:6A:94:53:81:B9:E9:CD:CF
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 01963F54E364EE1C9A99206EADDB0B7942A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0941
Signing time: Wed 16 Apr 2025 16:00:49 +0000
Manifest this update: Wed 16 Apr 2025 16:00:49 +0000
Manifest next update: Thu 17 Apr 2025 16:00:49 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: adRLmkFq4sqLarnFCncBErc23jQYVehK8J98Hxuhv7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:e3:64:ee:1c:9a:99:20:6e:ad:db:0b:79:42:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Apr 16 16:00:49 2025 GMT
Not After : Apr 17 16:00:49 2025 GMT
Subject: CN=85c9553b27855089bdd638aa6a945381b9e9cdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:3f:7e:bd:28:f4:21:e0:5f:d6:19:7d:7b:
09:d3:19:af:4d:95:1e:ee:7e:26:13:33:40:9c:4d:
3d:53:c8:6a:14:d8:59:e5:cc:1a:4b:9a:1f:62:f2:
c7:f9:ea:98:d6:35:8e:46:05:da:cc:b6:83:90:b0:
f2:61:30:db:f9:d7:f9:9c:30:4f:3c:9e:e8:29:67:
0a:2c:33:1e:18:5c:92:37:20:a3:a2:0f:fc:70:3f:
30:7a:dd:8d:c1:06:43:67:09:85:0f:d8:87:50:12:
70:f0:88:69:bf:fe:f8:6b:81:64:7a:86:44:41:ae:
3e:55:62:b1:17:f6:64:5f:31:44:0c:1b:96:fa:a8:
83:8f:33:c0:45:e0:68:06:fa:ac:6a:9e:cb:85:38:
54:b4:32:71:bf:71:9c:f9:ee:61:5f:f9:fc:42:c6:
3a:88:c6:9c:cf:7d:83:50:fd:84:ef:a6:a4:e2:89:
35:05:90:a8:6d:69:45:19:eb:ac:0e:da:e1:73:42:
62:d8:94:86:05:91:31:5f:ee:d3:46:6c:91:d4:f8:
46:f3:6c:13:4b:39:9b:2b:42:20:b2:e0:f9:fc:ba:
8a:b9:9c:f7:6e:6a:fa:3a:f8:54:98:be:16:4f:77:
0a:e7:00:fc:30:eb:fd:aa:99:88:4f:1a:3f:d4:70:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C9:55:3B:27:85:50:89:BD:D6:38:AA:6A:94:53:81:B9:E9:CD:CF
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0a:41:67:bb:b4:01:b9:05:de:4a:b7:35:2c:69:b5:c1:6f:
91:bd:b0:7f:03:6c:df:ce:a2:f9:81:ca:cd:e2:99:b7:25:d2:
39:c7:5e:25:fd:01:f6:ea:02:c6:03:44:e8:5e:57:5a:97:63:
79:5c:2a:45:b4:73:a7:df:44:33:04:b4:e9:b9:79:1c:da:1c:
7e:49:02:9f:f5:06:5e:80:a3:83:f5:99:93:73:b0:1e:91:f2:
52:6f:5e:f2:76:de:82:f4:f4:a2:1c:d6:8b:49:47:50:39:b2:
28:42:fe:b5:52:16:51:12:18:71:21:20:7d:d0:45:2f:9a:46:
96:cc:f1:0e:30:f0:a8:63:3c:6b:8f:01:e1:54:c8:58:f6:07:
b7:f2:bc:2d:85:e0:d4:44:e4:d8:00:64:1c:bd:a7:01:d7:eb:
f8:d1:54:78:47:03:6a:59:2c:f9:26:ba:11:be:f3:2e:af:e9:
3d:54:55:38:89:39:bb:ef:7f:72:24:ab:74:66:42:7e:4b:3b:
21:64:8c:00:c5:2b:8c:50:0f:19:00:c0:84:df:74:fa:74:dc:
80:d6:cb:1a:9e:9f:9b:d1:73:a9:39:25:99:8c:96:c5:28:94:
47:df:75:d6:f2:9e:de:f7:ee:9d:30:11:8d:2b:8e:52:08:ae:
2c:de:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:04:54 2025 by rpki-client