Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
File: TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft (raw, json)
Hash identifier: 5NmpZ09mXLGyEHOghCw2LK3F7Gfwf4W7u3FtOIofLQ0=
Subject key identifier: FB:43:BD:83:1A:3B:8F:AA:1D:A1:8B:A0:37:54:0B:9F:A8:B8:FC:F8
Authority key identifier: 4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
Certificate issuer: /CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Certificate serial: 01964B22148CE013C91CD02ACA78293FBB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
Manifest number: 01A1
Signing time: Fri 18 Apr 2025 23:00:46 +0000
Manifest this update: Fri 18 Apr 2025 23:00:46 +0000
Manifest next update: Sat 19 Apr 2025 23:00:46 +0000
Files and hashes: 1: 1-QbsigNOAsIOrzATvCDKf5YVw3s.roa (hash: gWNRwRZG0Ifn0uSFb+Au9uZSZqHds/SqKOwbteITnow=)
2: TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl (hash: 3uPBMt9DPPBwXZ+X6x2Ep9UIBAFjMM8S/WJUJauhJ4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:22:14:8c:e0:13:c9:1c:d0:2a:ca:78:29:3f:bb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Validity
Not Before: Apr 18 23:00:46 2025 GMT
Not After : Apr 19 23:00:46 2025 GMT
Subject: CN=fb43bd831a3b8faa1da18ba037540b9fa8b8fcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:b8:5d:8d:f7:17:a9:7a:62:a5:b7:b0:93:
ee:8d:d5:52:ff:75:6f:20:b8:83:62:ee:3d:2e:87:
fb:9b:12:3d:db:aa:c7:49:46:23:a0:f3:a8:ea:b6:
ba:fc:77:5d:d7:7f:c2:8e:47:11:12:2b:e2:5d:17:
f2:ba:b4:ae:45:a7:0f:00:fd:25:08:7e:6a:9f:94:
a2:7c:e1:36:23:df:42:ac:9c:32:36:2b:32:14:17:
45:ca:f5:c4:38:0b:69:11:b0:1f:67:12:8d:2d:c8:
f5:6c:cd:0f:df:5d:ba:cd:19:ac:f6:50:09:07:2f:
50:30:35:a8:35:c6:75:0c:36:ed:c9:47:3a:2f:c7:
35:3d:50:a4:a5:83:45:3d:0f:76:dc:0e:e3:c6:0b:
01:f6:a2:b8:0e:b5:b5:0d:91:54:16:57:7a:5f:b6:
5c:b3:ea:1b:ca:ab:f4:37:e1:f2:12:fa:bd:9c:7f:
0b:cb:01:61:66:77:2c:d0:26:60:11:94:1c:94:0b:
81:ef:d7:82:ac:1f:56:da:94:f3:9a:f5:45:c1:e5:
32:f1:84:53:87:48:4b:6c:12:a6:59:fb:95:a9:7f:
5a:f7:55:5e:3c:94:01:9b:d0:32:f1:bb:47:90:84:
ce:b2:a7:1e:14:9f:00:25:15:61:40:b2:08:1e:05:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:BD:83:1A:3B:8F:AA:1D:A1:8B:A0:37:54:0B:9F:A8:B8:FC:F8
X509v3 Authority Key Identifier:
keyid:4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:78:eb:f9:c9:a5:ca:73:36:df:41:05:dd:5d:51:35:a1:5c:
c8:13:a8:83:5b:32:56:bc:6b:c0:6e:cb:d3:d7:d6:a7:25:a8:
33:2f:f3:23:56:75:0e:82:69:cf:d7:62:64:55:f9:00:ed:db:
4a:44:aa:c5:a6:f4:0f:e6:ef:53:a9:86:db:5c:cc:f9:ad:e2:
8e:93:3e:03:ec:7d:25:29:a3:f1:e2:37:17:48:21:63:f8:a2:
89:bf:b7:12:5d:85:6d:c9:dc:13:81:0e:49:6f:50:67:f5:9d:
e2:91:3d:65:a5:63:cb:7c:90:00:1a:89:2e:89:67:c1:62:d4:
85:0f:17:16:69:7a:f7:22:3e:e1:d7:46:4b:d1:8b:f5:64:df:
bc:ea:14:b6:c7:a6:d9:74:67:37:ff:c4:b4:0f:72:f4:02:ea:
b4:73:17:e6:c3:62:43:51:5b:ea:f0:14:b0:cd:29:9d:58:19:
4e:2e:91:69:85:e6:20:4b:87:3a:fa:f5:4d:8a:04:7d:bb:25:
65:23:61:a5:cb:0f:f0:ef:56:fd:36:81:cf:7d:70:77:7d:d8:
12:18:52:2f:f8:d8:1d:07:28:73:a4:95:4e:71:9b:21:c6:a6:
a4:2d:84:2c:80:7d:fd:4b:9f:51:0a:7a:42:60:6b:b3:76:6e:
b8:2e:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:26:43 2025 by rpki-client