Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File: tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier: /A7mSW78LtPBcyoKehq/fpfV0WmpOXMcFKqpWZ5L3kw=
Subject key identifier: 9C:77:54:8A:24:4F:4A:33:98:9F:7B:4E:98:E6:62:03:3F:AD:2F:97
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 019606785A1CEEC17BD58081FE3B990D9CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number: 0C32
Signing time: Sat 05 Apr 2025 15:01:12 +0000
Manifest this update: Sat 05 Apr 2025 15:01:12 +0000
Manifest next update: Sun 06 Apr 2025 15:01:12 +0000
Files and hashes: 1: G-MfEPKVAO3gG6FWFm64IjE9etc.roa (hash: 17DK6/B1VAGDpSySwax9kvYRuaqz8V+CPv08iSwisLc=)
2: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: BRIMBltXbB3xfFeV6OQQRfahHz2kswEgHX6MUHrf9t0=)
3: tVfNb6vANMjkCnwkn_zqjQ9R46g.roa (hash: sIFbcv+pjLFEVXCoeuZdGPtO8JDvf+xPKrDKXkHq+5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:78:5a:1c:ee:c1:7b:d5:80:81:fe:3b:99:0d:9c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Apr 5 15:01:12 2025 GMT
Not After : Apr 6 15:01:12 2025 GMT
Subject: CN=9c77548a244f4a33989f7b4e98e662033fad2f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:5b:9f:6d:14:77:aa:4e:5a:d6:30:67:c4:
f8:2c:b3:92:56:0f:5a:54:a5:76:15:fc:05:88:7e:
4d:2a:c5:2d:57:96:b1:ef:b0:32:b2:af:65:34:1b:
d6:4f:6c:61:fa:22:ac:5e:c9:b3:21:21:5b:b6:aa:
3a:0a:59:7d:da:c7:a0:24:bd:a5:6e:6c:c9:de:96:
94:fd:1c:07:60:c1:9b:68:e4:d1:53:f4:d2:92:62:
06:f4:c9:de:b5:a6:f3:52:9f:47:43:81:bd:a0:39:
60:1e:fd:77:5c:0b:7f:6a:a8:32:2a:2b:30:51:e1:
fa:d9:d2:b6:6c:fb:20:31:64:5b:cf:ae:d0:0c:cc:
63:c3:7f:1f:6d:55:51:38:d4:ea:cc:77:e4:83:1a:
4d:9a:14:fa:dc:04:eb:d5:e4:a0:cb:da:e3:a8:9b:
bf:0e:64:4c:61:a2:25:ed:cc:2d:15:aa:0c:41:44:
a8:4d:46:e2:36:d2:cc:f8:00:e9:2f:a6:56:84:1c:
66:e6:3a:0a:b8:04:4c:6f:f2:ee:4d:b8:84:c5:4a:
86:9d:0b:27:e7:34:93:2e:70:64:21:89:64:ce:82:
4f:d3:0f:8b:fe:cb:e0:fd:f3:31:a6:c7:25:0f:a0:
10:02:01:fc:ee:a8:7e:9d:ee:37:2a:19:c8:a7:ec:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:77:54:8A:24:4F:4A:33:98:9F:7B:4E:98:E6:62:03:3F:AD:2F:97
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:97:36:6a:23:a5:7b:7a:43:e6:47:59:40:1b:74:16:6a:
b8:64:64:93:83:ab:f2:38:4b:72:e5:c5:10:a3:7e:5a:04:51:
0a:1c:06:33:36:25:f6:fa:0e:04:6e:51:f9:a1:be:1a:25:6c:
2a:fa:c7:b1:94:ef:6a:96:c1:5f:bf:af:3d:91:70:78:62:dd:
ce:95:10:81:1c:c5:0e:e7:af:2d:8c:3b:af:af:b2:65:89:f5:
a2:c9:f5:cd:5b:7f:02:55:00:e0:03:f3:27:2c:b9:d2:c7:a9:
69:56:fb:a0:4e:bd:63:41:e1:17:46:fe:16:00:be:c2:7d:aa:
94:cc:17:84:86:04:42:83:f9:c6:c7:d4:10:5a:20:12:ff:bf:
93:b2:aa:54:60:63:ec:af:80:26:34:c6:0a:4e:8e:fb:08:50:
dd:6c:f5:36:ab:91:fb:da:d1:dc:3b:b9:e9:7c:55:93:db:ec:
68:b5:10:a7:e2:de:8f:0d:53:c3:96:74:02:06:ba:0e:56:3e:
24:7a:bc:ae:44:77:31:a1:2c:1f:74:c5:4b:18:6b:c2:c8:1c:
a2:ae:65:b7:45:dc:40:9b:9c:15:5f:c8:ac:b4:07:df:e9:40:
6e:c7:88:e8:2d:af:01:3a:2d:1b:e9:60:09:ce:e8:83:72:df:
2b:7d:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:22 2025 by rpki-client