Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
File: tNftFLjVGiC67HtmDwioDNz4F78.mft (raw, json)
Hash identifier: z1vLTcoN6KZW+zsy7aFStsUx1OzUnqykwJ7XldngsmU=
Subject key identifier: 82:91:3E:3F:B6:5B:FE:79:76:77:51:1E:56:16:00:92:34:05:62:D8
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 0196451FD8B668589569E4F33915BA998EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
Manifest number: 1456
Signing time: Thu 17 Apr 2025 19:00:37 +0000
Manifest this update: Thu 17 Apr 2025 19:00:37 +0000
Manifest next update: Fri 18 Apr 2025 19:00:37 +0000
Files and hashes: 1: VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa (hash: 4Hkp0WmvBYBS95p1FHn/M3/EZ2GIH50SPjU4ACziYZE=)
2: YVY9twtvMqgJ8wFpvv3lKZVmEkQ.roa (hash: 17qlPl9D+uyL5rzeTz5pj3TELME7ziHzDZ+/fRR9Vec=)
3: tNftFLjVGiC67HtmDwioDNz4F78.crl (hash: EqhVY9elGMGI2nZalfe/b586rJWzciciz0klA1y3PS0=)
4: y_HvmHHGVlKjcbTPtfwbbemE9ts.roa (hash: 8SIoZagJaVQOy82S0A9ugj7Iv6sEqZZHPMha1KNQ3uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:d8:b6:68:58:95:69:e4:f3:39:15:ba:99:8e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Apr 17 19:00:37 2025 GMT
Not After : Apr 18 19:00:37 2025 GMT
Subject: CN=82913e3fb65bfe797677511e56160092340562d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:a1:37:9e:f1:ca:55:77:e0:85:d8:10:d1:
b5:02:6f:7a:96:69:a8:51:0a:e6:4d:8d:c2:7f:98:
80:59:58:e7:80:3a:21:80:91:f2:3c:e1:ca:5f:b9:
40:18:24:91:cc:7c:04:83:10:fa:27:7f:8b:07:45:
5b:8b:05:04:c9:73:fb:e1:e9:db:5e:f9:31:75:ea:
16:d6:db:17:f5:be:94:67:22:a0:74:26:50:19:13:
ff:cf:0c:b5:08:ba:fa:a8:fe:85:86:23:d1:51:e2:
34:26:71:ef:71:ca:ee:34:67:b5:95:6b:dd:1f:93:
47:6d:19:79:5c:9c:ec:3f:64:af:43:70:df:3e:e1:
da:0e:5a:d3:30:57:7e:f3:25:18:ce:73:f5:20:3f:
c0:b4:95:6a:c2:2a:1a:c1:03:a9:e4:ed:cd:e8:ed:
84:ae:e0:9b:77:22:1e:39:a7:70:be:61:60:c4:7b:
d7:ea:63:4c:eb:ee:2f:b9:de:ef:26:40:4d:19:2d:
8e:3e:8e:4d:75:97:c7:25:11:1f:f2:6f:c2:d0:3a:
8e:a7:69:d9:7a:45:aa:3c:6d:e3:5d:aa:18:24:16:
c3:eb:b9:f9:b2:db:9b:70:6e:35:7c:c8:43:2e:e2:
dc:d2:c0:76:96:64:ca:2e:23:be:bf:ec:02:9f:6c:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:91:3E:3F:B6:5B:FE:79:76:77:51:1E:56:16:00:92:34:05:62:D8
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7a:bf:76:3e:9d:22:e9:2c:a7:04:08:e3:aa:a0:ab:46:54:
27:3e:f7:de:33:a2:5a:fb:68:93:ed:53:1b:95:c5:76:a9:39:
a2:f8:fd:91:83:af:88:f0:c9:a3:69:b0:d7:92:34:c4:f0:3d:
70:a9:db:b9:ee:29:5b:7b:35:17:d8:a1:ed:bb:d4:b2:f2:5e:
ed:b8:cc:b4:b7:d4:72:3a:e1:b6:b9:e9:20:7c:ba:6f:77:3d:
6d:ca:9e:a0:56:9a:47:74:83:39:37:cd:d0:b5:03:5d:3c:6b:
b1:d6:70:ef:f1:4b:57:4c:8f:f2:fa:e1:01:8e:9a:67:07:f7:
61:cb:1c:1a:4a:1a:55:6c:53:04:fa:10:33:71:0b:6d:44:d9:
91:ae:5e:2c:2a:30:77:43:80:62:b7:83:7d:1b:d1:8a:84:bb:
d9:eb:b4:f6:13:23:d2:0e:bd:e4:61:9c:49:a1:e2:b0:05:57:
10:d9:5c:f0:8b:d1:7b:60:47:77:d7:48:a1:ac:de:6e:47:ba:
b4:99:58:ba:ab:09:95:92:b4:e4:c0:47:b8:3e:76:51:fb:41:
a3:19:c2:bc:94:55:1c:24:a4:11:27:a7:3c:d1:9f:c4:15:e5:
d3:60:c3:f3:ba:c3:1b:54:df:ed:3c:1a:69:74:10:c0:ee:f2:
93:59:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:26:29 2025 by rpki-client