Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: pkSKYqhCMEyiwuuZJFqsXaZnO5BGb8qYx2e0SvYg7pw=
Subject key identifier: FB:22:04:FA:83:C8:EE:97:18:12:0F:0B:F3:1E:CA:95:74:F7:D2:02
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 01958B16CEE14F63BF5F004602BBF51D2DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 149A
Signing time: Wed 12 Mar 2025 16:01:22 +0000
Manifest this update: Wed 12 Mar 2025 16:01:22 +0000
Manifest next update: Thu 13 Mar 2025 16:01:22 +0000
Files and hashes: 1: 9tr6yx1y8_YEiVByZ-MjQoIJAHM.roa (hash: jRgj+xVS51Pyi7Ww5Lf3Hkb3VrgrulAoFq5wFotKWJs=)
2: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: WAf+9ySFP1gxcdEG28C/tu8noq6gITRZQk+GxBkynYU=)
3: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
4: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:ce:e1:4f:63:bf:5f:00:46:02:bb:f5:1d:2d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Mar 12 16:01:22 2025 GMT
Not After : Mar 13 16:01:22 2025 GMT
Subject: CN=fb2204fa83c8ee9718120f0bf31eca9574f7d202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:3e:1e:9e:9e:05:3f:f1:41:65:02:28:9c:
a7:da:ec:e2:cd:6a:c5:cc:fa:98:61:af:28:47:93:
c2:53:ca:3d:6c:10:74:8a:cf:07:38:38:5c:80:c7:
c8:bb:24:4b:31:91:2d:99:1a:02:17:ff:8f:a4:e3:
51:b3:82:83:8a:8b:49:af:48:2b:6e:b2:61:01:7f:
d2:d9:93:98:48:38:4b:8c:99:e8:80:bd:d5:9c:f9:
f5:df:85:e1:48:d5:2d:23:7d:5a:2f:2d:2b:eb:22:
b2:2a:ed:c5:b6:e8:8a:9c:6b:0d:8f:8e:46:a1:0f:
8a:c0:83:71:65:be:8f:03:ce:ec:08:1d:6f:76:4c:
b1:44:b4:11:03:4c:75:f8:01:2b:1e:74:8d:a7:af:
71:9a:31:1d:a7:b9:7a:1d:83:17:82:f3:0c:40:98:
6b:4c:30:6d:a2:a7:4e:f7:49:41:9e:a2:0c:ae:7d:
e4:94:4f:6a:e5:3f:1c:d9:1f:16:2d:f0:13:46:54:
9c:69:a2:9a:cf:84:80:05:b9:92:47:b0:6c:d3:ff:
ba:40:a8:f8:0f:e3:25:6e:0e:ef:72:1b:62:a5:4e:
d3:b7:35:dd:38:6b:33:79:fa:b1:9c:95:82:14:a5:
b1:02:14:69:0b:4c:b1:e7:ed:ab:e1:5f:e4:2d:9b:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:04:FA:83:C8:EE:97:18:12:0F:0B:F3:1E:CA:95:74:F7:D2:02
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c5:4e:6f:6d:95:58:bb:05:bb:da:66:06:83:96:cd:4f:a6:
15:d6:bf:06:98:32:c1:37:84:9d:f8:af:9e:55:ee:4f:cf:b3:
01:3f:01:e9:23:69:43:c2:b1:ab:b9:dd:53:6d:4d:d8:8d:e1:
79:31:b2:38:4a:23:15:32:d3:0d:80:fc:74:9f:10:79:05:1d:
41:ab:14:82:7f:2e:e1:fa:7b:c2:45:cf:4b:09:25:e4:81:4f:
29:60:65:b9:d7:1b:7e:33:3b:8e:4d:cb:bd:dd:ea:6f:b6:8d:
5f:be:23:17:fb:ac:82:ca:b6:be:2d:0b:82:a7:4e:1e:f6:a2:
ee:b9:5b:c2:b0:e3:fe:b6:07:52:dc:69:9e:41:74:63:5a:3d:
19:00:c7:8b:29:90:bc:b2:63:80:56:a1:f3:f5:fc:86:f6:57:
34:de:d4:eb:f2:b7:88:95:cb:e2:48:e7:e3:f9:19:b3:44:00:
67:ac:59:b7:5e:71:b8:59:68:9e:fd:0f:72:63:e5:52:10:65:
d2:b5:a7:28:22:f0:59:b3:f9:b1:d3:89:7e:5a:23:f3:cf:80:
bd:8f:af:d6:6c:1b:65:b3:92:ec:06:3f:d1:29:04:9f:db:cd:
dc:70:a6:f6:71:7a:ab:f9:68:f3:41:37:31:32:3a:b1:a1:e9:
5b:f6:13:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:38 2025 by rpki-client