Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: sphLQIGhyXLLP5M9Ct8tGdJ3lQ9JyZ3CTlMUkKSPLXs=
Subject key identifier: 2D:F0:78:D6:86:86:47:06:31:1A:CE:19:E2:E1:97:B9:40:65:B3:CE
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 0196274DA73EC89DC48D8E5052A2DCD516AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 120B
Signing time: Sat 12 Apr 2025 00:02:02 +0000
Manifest this update: Sat 12 Apr 2025 00:02:02 +0000
Manifest next update: Sun 13 Apr 2025 00:02:02 +0000
Files and hashes: 1: DAiAlkKu2uIH3tPrZHXW35UovoY.roa (hash: ii+y3ES147W1gYE6b/JQu7S5U4fp3robU9GiKGcJGDs=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: BNTGQ7MEKgvP/oMmyG17zdL+wQwUagIQMJ7EFSu4wxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:27:4d:a7:3e:c8:9d:c4:8d:8e:50:52:a2:dc:d5:16:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Apr 12 00:02:02 2025 GMT
Not After : Apr 13 00:02:02 2025 GMT
Subject: CN=2df078d686864706311ace19e2e197b94065b3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:51:c8:76:1b:12:a0:8d:c3:17:5a:c8:cc:
13:be:1c:36:03:5d:71:99:13:3a:2c:0f:14:5e:06:
51:91:42:97:e7:4b:e5:82:0f:fa:2f:5b:96:23:3f:
84:cc:87:98:76:da:5e:af:0e:32:b2:97:22:bb:00:
21:1e:6a:7e:d1:ab:0c:ba:c6:53:70:5b:49:e0:a6:
a9:55:ce:a2:2c:41:7b:31:f5:2e:fd:86:5c:30:75:
31:07:a1:79:ab:d4:ba:e1:e3:3b:de:39:e5:b3:77:
73:b9:29:7f:a2:d4:01:6c:72:c5:61:06:8a:88:4b:
02:b8:58:66:d4:5e:5e:67:ad:09:0d:b6:30:3a:4a:
8b:5a:6a:72:a7:53:24:20:b1:0e:bc:d4:60:d7:58:
9c:f8:85:7e:b5:ce:79:e9:14:af:e1:06:24:aa:6a:
7d:22:31:c9:6c:11:05:76:7d:2e:65:bc:c9:7b:b1:
5e:51:e8:43:96:fa:50:36:10:ac:ae:a6:bf:68:49:
db:db:b7:14:3f:20:90:f4:1c:13:61:32:7e:dd:e3:
12:8f:88:aa:1f:3e:6c:c1:10:77:db:e5:2a:39:b3:
e3:21:ce:9e:ca:41:fc:38:4c:01:26:49:d2:24:2b:
c7:23:82:0c:01:5e:02:68:66:a8:56:1b:b3:56:33:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:78:D6:86:86:47:06:31:1A:CE:19:E2:E1:97:B9:40:65:B3:CE
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:71:31:bd:20:26:d2:9f:fb:85:df:ad:e0:e6:30:e9:5f:17:
3a:56:6e:d6:36:fb:cd:72:71:89:a4:af:ea:8c:f6:ed:ac:31:
80:e7:b2:43:11:57:10:24:49:92:18:15:47:ec:a6:ce:c0:e1:
cd:0c:69:62:52:69:84:2b:2e:91:c3:46:c6:9e:6d:3f:2b:b3:
c5:3e:e1:1a:c2:b8:2c:ed:07:bd:80:61:b5:a5:dd:8f:22:f4:
6e:a4:bb:70:6f:11:0d:42:af:ec:b5:59:09:6b:f2:45:26:dc:
3c:93:c8:29:e5:7f:97:d2:cc:1c:6f:25:e6:94:59:a0:5c:0a:
74:09:cc:6d:57:4d:99:8a:d9:7f:df:ea:f4:30:3e:e8:10:13:
d5:19:19:9c:dc:53:d5:aa:63:7b:1e:cc:ce:aa:fb:9d:bb:c8:
34:6c:30:5c:ef:04:98:aa:4c:ef:d8:ca:80:2d:d2:96:35:02:
dd:96:dc:8f:eb:0d:dd:21:51:73:b4:37:7a:9d:27:2b:9d:a1:
5f:36:a1:3d:63:08:40:7f:52:4c:e8:15:f4:f1:06:bf:47:4a:
21:85:2a:e4:90:d3:c4:a9:80:0d:c2:92:44:d2:4f:bb:ef:ba:
2b:61:1d:13:9b:0c:33:7c:a1:12:35:b1:ad:c7:75:47:19:c5:
19:78:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:42:53 2025 by rpki-client