Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: 72mhPHbXkVRw2udso1IuSImHgF1Q/sJazlsIqMhh1ls=
Subject key identifier: 2F:18:46:60:8C:E1:8F:DB:D1:EA:8D:C2:C6:C0:4B:8C:20:30:90:3F
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 01963BE638E3E934C3DE4F6B221812AB4B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 0CE4
Signing time: Wed 16 Apr 2025 00:01:05 +0000
Manifest this update: Wed 16 Apr 2025 00:01:05 +0000
Manifest next update: Thu 17 Apr 2025 00:01:05 +0000
Files and hashes: 1: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: PnnvwWVLshQnWEwYjTK+VEfZTkPuk+ewSS4KvQS9aXc=)
2: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (hash: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:e6:38:e3:e9:34:c3:de:4f:6b:22:18:12:ab:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Apr 16 00:01:05 2025 GMT
Not After : Apr 17 00:01:05 2025 GMT
Subject: CN=2f1846608ce18fdbd1ea8dc2c6c04b8c2030903f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:23:d0:8d:94:ef:8b:48:d9:00:c5:c6:dd:
b9:13:77:b7:0a:db:c5:ea:07:cb:ec:a6:67:d4:b7:
63:f8:a6:f7:a3:77:49:4e:03:6f:5d:e6:43:e7:cb:
fb:08:53:71:57:bc:75:5c:45:a2:c8:e8:2c:ca:b3:
aa:33:68:57:d4:a5:2b:23:ed:3f:09:61:6b:f3:3f:
e2:b9:f9:f1:bf:84:33:26:15:39:07:7b:df:23:ba:
4b:59:44:ff:58:89:4a:1c:82:93:8d:0a:ca:b5:48:
eb:cd:f4:ec:14:3a:f2:18:15:a9:dd:b1:5b:4b:f7:
6f:09:48:2b:08:d8:9a:ee:15:ed:69:53:bf:40:bc:
fe:aa:22:0e:75:76:76:53:5d:88:bc:e4:f9:84:16:
1a:55:21:5b:2c:52:8a:00:dc:dd:25:00:c7:19:f1:
fe:12:9e:d9:a3:ea:5f:f5:31:b7:1d:ee:a4:27:7e:
c9:91:ae:fd:20:61:79:ee:af:18:a2:4d:a1:98:66:
90:98:ce:80:69:7d:52:e3:2b:d4:28:c3:42:07:66:
c9:bc:3e:ee:7c:12:ff:2b:ff:75:e8:71:d4:3e:f8:
05:9f:cd:25:38:7f:4a:18:1e:e1:ae:f3:30:96:ea:
7e:01:8f:27:7f:7a:12:db:e9:43:8e:6d:11:e6:06:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:18:46:60:8C:E1:8F:DB:D1:EA:8D:C2:C6:C0:4B:8C:20:30:90:3F
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2d:47:36:f9:57:94:fe:78:9b:6b:cc:b7:3b:54:c6:ad:fc:
21:08:0c:14:e2:39:b0:2c:95:bc:ae:6c:14:f6:4a:96:d2:64:
66:02:03:d2:4c:0b:c5:d0:0d:89:c0:4c:71:a9:6e:2b:44:99:
50:4b:eb:f8:06:c4:6b:c3:0f:b1:b8:14:d4:36:ae:49:e7:55:
34:ae:68:da:63:66:da:11:d4:6c:36:c0:33:49:a4:9b:b5:33:
eb:8c:94:1d:a6:6a:e7:55:1e:75:ca:cc:98:66:42:f8:42:3e:
ba:25:bf:34:b2:c9:dd:ef:d4:dd:cd:29:b8:72:31:4d:19:9c:
d1:b5:db:d8:b9:ad:cd:91:62:3a:b6:ac:96:2c:bf:c5:55:53:
68:c9:bc:57:92:5f:66:86:07:ab:a3:3b:65:71:63:8b:4f:92:
15:1b:48:98:18:0c:29:8c:29:cc:89:5c:de:55:48:2a:76:3b:
3b:c4:8f:e2:5a:cd:da:f6:ed:e3:3f:48:09:d4:7e:57:05:37:
41:cb:f6:cb:38:b8:21:df:46:0e:c2:d7:75:49:09:9d:2a:70:
05:c1:ef:70:11:46:79:eb:2d:52:71:9c:77:9c:48:73:35:96:
41:4c:b5:bb:f1:6f:29:40:ce:22:3f:06:1e:3f:b7:c3:6b:d4:
72:54:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:26:25 2025 by rpki-client