Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
File: tF9VYNefBKktehUPPtjaQwir6jM.mft (raw, json)
Hash identifier: GBsgl6s3ca5GjwY+NmT3nH9z/7Y3uhOCgB6ySIClkkU=
Subject key identifier: CE:2F:36:69:44:D4:93:C8:08:67:E2:51:F5:B9:43:30:D5:68:02:FB
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 019611D7A819730BF40C480D6057D95A0601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
Manifest number: 1063
Signing time: Mon 07 Apr 2025 20:01:07 +0000
Manifest this update: Mon 07 Apr 2025 20:01:07 +0000
Manifest next update: Tue 08 Apr 2025 20:01:07 +0000
Files and hashes: 1: rFHksT2fJAQ7epdh-sMDgGR2SM4.roa (hash: Z/iFpAzmqAm2KrlQVqRFy4X3KTo7SXYWoBA5a7g2HG4=)
2: tF9VYNefBKktehUPPtjaQwir6jM.crl (hash: e1HlDDP4EU/cIU4eiXFSRr23oyMqJrwxHCqpEze1rEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:a8:19:73:0b:f4:0c:48:0d:60:57:d9:5a:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: Apr 7 20:01:07 2025 GMT
Not After : Apr 8 20:01:07 2025 GMT
Subject: CN=ce2f366944d493c80867e251f5b94330d56802fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:ee:bd:91:ae:ae:4f:56:21:2d:66:61:bc:
7f:2b:99:21:03:c4:42:16:e8:40:a1:be:29:b2:58:
b1:f7:4a:59:18:81:07:66:0c:59:ba:ee:f4:ae:ae:
ba:06:22:c4:57:3a:01:8e:4a:76:c7:cc:2c:0c:76:
2c:51:81:78:d7:d5:28:23:db:58:1d:b8:ac:c7:a7:
41:3b:7e:52:5f:3e:cf:6f:14:ea:7c:c1:4f:30:39:
0e:ab:25:38:3e:20:eb:0e:4a:61:29:ec:0b:97:e4:
31:8f:bd:81:67:17:02:84:86:5f:e9:5b:d3:6a:93:
d6:02:72:e0:44:b9:4b:26:99:2b:27:d4:9f:53:32:
74:f7:df:6c:d3:e6:a3:37:eb:7c:97:2e:4b:1d:31:
c9:31:57:be:08:1c:17:ef:44:a4:bb:f7:db:b1:96:
e9:71:25:84:1a:f7:94:3e:94:8e:6d:fd:c4:35:5a:
ab:2f:ba:81:c5:60:27:18:98:70:03:75:0c:72:1f:
8b:aa:19:8a:d8:37:99:bf:ec:b9:24:fd:ba:5f:56:
7f:c8:20:11:06:eb:e5:d1:bd:c4:ba:ff:5e:6f:92:
03:b4:71:0c:ec:94:00:a4:bf:f4:92:76:14:e9:54:
4e:b4:87:96:af:13:dd:4b:9d:43:91:18:ed:0c:ba:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2F:36:69:44:D4:93:C8:08:67:E2:51:F5:B9:43:30:D5:68:02:FB
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f8:82:9d:56:2f:1b:aa:34:9f:65:9c:f3:60:66:52:85:f8:
20:08:48:d7:35:5d:27:79:98:1a:16:e0:49:7d:95:46:8c:03:
0a:d9:68:e3:af:9a:7e:d1:8e:41:37:79:52:91:8e:4d:66:30:
08:b0:81:99:d2:0b:5a:ec:5c:59:48:dc:cf:e7:40:b3:7a:1a:
ac:bf:47:e9:80:bb:73:5b:ba:54:da:00:09:e8:fa:73:61:16:
8c:51:65:b0:98:1b:30:d3:2f:f3:65:b8:d5:85:2a:01:28:67:
5a:92:ad:da:0e:ea:c9:3d:94:1f:7e:a8:7c:01:fa:ca:60:ea:
41:b9:dc:14:00:00:5e:d8:32:64:61:e3:26:3e:24:24:e6:96:
f0:42:12:53:81:ea:b4:29:b6:ca:74:34:af:64:90:e8:c8:bb:
ec:e0:73:4f:b6:4f:32:23:1c:d7:2f:a5:eb:92:38:b6:b3:f3:
66:72:58:1c:11:60:1d:62:00:ef:52:6f:c6:6d:a9:aa:54:cd:
c3:91:5e:79:73:3e:95:a1:1b:24:bf:74:1a:d6:4e:1e:a5:3f:
7f:d3:78:ec:be:86:9a:f4:70:e6:91:ae:06:fc:b9:93:c8:40:
da:1d:82:b2:57:45:9f:18:74:74:87:bb:24:31:9b:87:35:14:
3e:ca:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:47 2025 by rpki-client