Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: 4PWd1YvsdDjYkdCJUrNQ4RoifX3S3MGL5ioZ9se0mf0=
Subject key identifier: F5:A2:92:1B:B3:EB:E1:12:38:33:68:43:5B:9B:46:7C:90:DC:5D:76
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 01963F1D832B9CE92792F65DE9C69264C1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 15:00:20 +0000
Manifest this update: Wed 16 Apr 2025 15:00:20 +0000
Manifest next update: Thu 17 Apr 2025 15:00:20 +0000
Files and hashes: 1: 3wD7YASUrL3NpA7N1DKGwyMvpW8.roa (hash: E3LCGPj2WzMDsMMPMtvTWx8+o6rGMeVTiLG80T025To=)
2: tCxsttlDEYs9pRw5Gm9iTgZyCBc.roa (hash: 0ZbwaGE5XpT8151KuGcEKOSEkVLV60MXa5tXdHShvII=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: gxl9pb6k8OZQq8ISs3CTnwy4/5XDBXRhERexrBABO1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:83:2b:9c:e9:27:92:f6:5d:e9:c6:92:64:c1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Apr 16 15:00:20 2025 GMT
Not After : Apr 17 15:00:20 2025 GMT
Subject: CN=f5a2921bb3ebe112383368435b9b467c90dc5d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:81:be:d9:ed:e1:fb:e2:ef:53:f1:eb:c2:
7b:36:e8:a6:6f:69:bd:85:a6:2b:a5:0c:9a:cb:57:
d8:08:18:88:fc:23:6c:50:c9:f8:e0:ce:f1:3f:23:
a7:83:2a:b1:c5:02:c4:ef:e3:b5:7d:20:98:de:c9:
53:4e:3f:bc:72:12:2f:4e:3d:e9:5f:d5:48:62:6a:
f9:8e:27:7a:41:8e:8e:18:89:28:33:8d:f5:c2:40:
37:4a:d0:81:90:9b:64:b9:62:8b:30:20:d0:cf:a2:
4b:e6:d2:c5:32:7a:32:7a:09:67:12:79:45:71:bf:
09:95:89:6f:84:3c:a2:8c:41:94:6c:38:2c:ce:6d:
89:6d:5e:80:b4:4f:64:20:b7:15:de:6a:4d:56:67:
a6:81:b5:a2:21:91:13:e3:3e:e0:c3:aa:9c:ea:5c:
29:f6:b6:33:d7:43:14:3e:2a:d8:d2:38:40:0f:cb:
bf:07:a5:24:c0:00:f3:2a:ed:ac:ac:ea:84:5d:2b:
8b:6d:ec:93:ea:1a:55:d1:28:64:66:60:09:68:19:
2c:8b:d9:ce:4c:2a:a3:0a:a4:df:c7:14:1c:fd:f7:
ea:1d:33:e2:14:9a:3b:02:91:28:78:09:95:34:ff:
8c:22:98:99:85:2b:c9:40:f7:bd:89:e0:c5:e6:33:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:92:1B:B3:EB:E1:12:38:33:68:43:5B:9B:46:7C:90:DC:5D:76
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:84:f3:e3:14:f9:19:9b:a7:29:68:03:07:44:13:4b:db:d5:
75:87:bc:77:26:1f:2c:e7:05:08:b6:44:d3:92:93:f5:62:70:
1c:5a:2b:45:6e:e6:29:97:4e:b8:f9:6d:f2:d5:f5:0c:b6:2e:
54:f4:d9:47:51:03:db:6d:f5:e0:59:6b:61:ae:53:bc:30:ae:
29:f2:76:df:bd:6f:f0:0d:ba:03:50:1f:b2:2d:01:f9:cd:d9:
59:14:53:77:37:e0:39:4a:fb:a8:a5:31:57:d1:01:48:da:86:
b1:f4:92:a1:1d:ab:9b:2c:10:1a:c0:93:ce:be:d1:d8:37:02:
eb:2d:ae:cd:0f:22:83:6b:13:18:b1:ad:20:e4:a0:29:79:94:
58:7f:75:ea:3b:ee:d7:5d:cb:68:66:47:89:71:4f:8a:41:53:
8c:b8:95:32:ef:1a:6c:6c:be:e4:9d:89:0d:b7:c0:dd:ba:62:
ec:bb:2c:9b:3b:f3:2f:d1:5a:c6:b3:cd:89:e7:d7:a7:f1:6c:
bd:37:5a:07:a1:d6:6f:8b:1b:6e:eb:67:5b:80:7f:9f:8f:4b:
a5:f4:9d:74:5f:89:b3:46:09:40:fe:6b:f3:b6:db:e6:b9:49:
95:8d:3c:a1:03:48:57:58:60:58:92:bf:6b:f0:57:d6:4f:3d:
4f:15:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:24:48 2025 by rpki-client