Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: dQrOE3SVUrt0t66KHPVMkH6kfDSW71a9X8zzscz9QB4=
Subject key identifier: 40:61:40:FB:E7:F2:89:30:41:A2:BC:42:12:FF:6A:9E:16:96:A4:D4
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 01964DEC78D2ED681107A7CAB279AE383B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 12:01:05 +0000
Manifest this update: Sat 19 Apr 2025 12:01:05 +0000
Manifest next update: Sun 20 Apr 2025 12:01:05 +0000
Files and hashes: 1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: 2wQrPw8XaHr2aj6RBnpthRUee1ulAPbbwx2ynwHxbM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:78:d2:ed:68:11:07:a7:ca:b2:79:ae:38:3b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Apr 19 12:01:05 2025 GMT
Not After : Apr 20 12:01:05 2025 GMT
Subject: CN=406140fbe7f2893041a2bc4212ff6a9e1696a4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:00:18:2c:05:ff:43:82:7f:8c:1b:af:46:
4e:92:53:11:1b:58:4f:c9:b7:dd:ea:ca:e8:d9:4e:
37:85:3b:52:09:47:d8:4d:08:d1:b8:a6:85:0c:70:
a3:93:aa:1b:5d:c5:2d:86:23:27:b8:18:c5:08:6c:
df:82:fa:c8:9e:e5:20:a2:36:dd:73:c9:1d:d8:03:
18:4d:85:15:81:27:a6:6c:c8:43:01:cb:09:9b:56:
76:82:f7:d0:19:79:1f:14:4c:c8:55:44:11:ce:73:
06:8b:5b:06:47:97:22:d3:e0:80:f5:6d:65:a7:37:
d3:a7:92:60:4b:80:a3:5c:d9:59:ec:f0:0c:e2:d7:
4d:47:3f:24:9d:91:7f:2d:5c:7e:44:0b:80:86:d0:
e1:9c:36:94:3b:6f:e9:b0:03:77:da:71:ac:22:7c:
87:3e:14:8b:c3:c5:7c:89:e6:ad:b8:98:90:20:3e:
fc:06:e4:c2:1b:23:6b:02:8b:fe:dd:e9:4f:d9:e9:
b4:02:be:6e:6c:5a:9b:dc:38:17:6a:85:96:bc:02:
7f:25:a6:25:be:6b:ec:49:29:ce:75:13:ad:e0:73:
70:a6:65:a0:f3:61:7b:3b:38:3a:20:d3:53:24:fb:
82:75:37:31:c5:aa:d4:cd:3f:52:c8:2b:fc:c9:dc:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:61:40:FB:E7:F2:89:30:41:A2:BC:42:12:FF:6A:9E:16:96:A4:D4
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b0:1e:97:38:6d:c4:35:65:a4:99:db:ae:0c:cb:e2:96:29:
dc:b1:63:d5:c8:ce:f0:ee:8b:b0:0b:17:3b:ef:25:7f:88:33:
1b:48:dd:63:88:da:23:c5:cc:22:d8:2e:85:6f:a3:b0:82:8f:
f9:5b:59:8e:c9:c5:c3:01:cc:db:13:5c:a6:d5:de:f0:01:27:
dd:f4:93:44:4d:03:43:16:bb:36:6a:d4:a3:6a:a8:37:39:4c:
f0:33:39:4e:98:68:1a:86:d4:72:9d:a9:08:d9:61:d6:74:e1:
41:42:fa:ee:4f:c6:61:8d:34:3e:28:05:97:b5:20:6b:0f:e1:
bb:4c:96:a9:b8:a1:85:f7:4b:0e:2a:67:9b:71:85:39:d8:b0:
71:7c:1d:8c:6d:7b:67:7d:32:17:54:d3:54:67:4a:6b:48:ca:
45:94:fe:99:7c:71:cb:ce:4b:d6:ec:9d:4f:f2:8e:b4:ce:dc:
d9:01:2f:a6:60:8f:41:30:48:07:4b:59:96:aa:53:d9:0d:5d:
68:41:2a:b1:dc:f4:e6:4f:4c:ff:9e:b7:b2:a9:b9:b0:1b:66:
25:e7:fd:f0:aa:d9:81:62:ba:2b:4e:24:33:be:1f:11:99:0e:
ce:de:4a:cc:2f:ee:89:95:c6:13:07:8b:e0:11:85:20:ca:28:
54:84:f9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:23 2025 by rpki-client