Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json)
Hash identifier: c+tf15RIe2+L/f802VgxiPweqfsylLKqdwx2Z5Qdfw8=
Subject key identifier: 1A:61:D9:35:97:D5:9B:46:64:72:98:3B:21:43:44:9D:2C:F5:8E:17
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial: 01964B90724821AF1751DDE4D4719EB54173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
Manifest number: 13AA
Signing time: Sat 19 Apr 2025 01:01:19 +0000
Manifest this update: Sat 19 Apr 2025 01:01:19 +0000
Manifest next update: Sun 20 Apr 2025 01:01:19 +0000
Files and hashes: 1: DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa (hash: QsmPHxvFnUbBb8Hdz5mPLnRJfO8cxjGYjuC9mmKC/hY=)
2: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: RWvXi2YpY7qCRS2AB4uCcmzxy6Q/j7rVms3MwnbxOZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:72:48:21:af:17:51:dd:e4:d4:71:9e:b5:41:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Validity
Not Before: Apr 19 01:01:19 2025 GMT
Not After : Apr 20 01:01:19 2025 GMT
Subject: CN=1a61d93597d59b466472983b2143449d2cf58e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:53:03:51:3c:d5:e3:af:2a:df:ff:dc:eb:
49:c6:d1:36:cd:07:5e:92:6b:5a:d8:f0:48:87:2a:
5a:7d:10:fc:fd:7f:6b:5d:64:70:0b:51:5a:4f:c1:
e4:39:10:44:3a:a8:d2:38:17:88:d2:ae:1a:ef:29:
e9:c0:31:4d:f5:6c:66:ac:14:e9:c2:fa:be:55:9d:
09:be:85:6a:83:44:53:4f:16:bb:f4:70:94:ca:2c:
44:a8:4b:16:49:b4:95:f3:13:4b:0b:8e:17:41:aa:
a1:82:d2:78:00:45:9a:1a:f2:9f:e3:19:3b:4f:c9:
a4:56:30:06:13:84:ff:e1:f4:57:2d:6b:45:12:38:
3b:ef:9a:37:cd:4c:4a:16:5a:7c:36:61:c9:57:fb:
8d:af:9a:92:31:13:07:ce:7e:72:f7:e3:99:6e:1b:
e7:06:15:a4:ca:09:79:35:e4:8f:41:46:3f:c2:c5:
aa:ea:cf:a5:f4:f0:36:84:4d:e5:ff:40:a6:1c:56:
ca:81:b6:5a:4d:8c:86:5c:88:6c:4d:25:f5:73:a5:
a4:5c:1a:1e:a0:11:23:d3:db:5e:f2:f5:17:49:f3:
6a:f5:7e:34:d0:6d:ae:d4:ed:da:f8:7a:8d:2e:9b:
06:e1:69:0b:df:35:f6:e2:3c:92:4d:53:4b:77:03:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:D9:35:97:D5:9B:46:64:72:98:3B:21:43:44:9D:2C:F5:8E:17
X509v3 Authority Key Identifier:
keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0f:3a:8d:7c:5c:f3:18:db:5a:38:7b:fe:66:aa:32:5b:7a:
f5:f2:b5:38:b1:48:9b:41:c1:ed:b0:91:8a:44:41:6f:9b:1e:
77:da:40:71:f9:81:3e:b3:80:f7:5d:8f:d1:c4:78:c1:78:65:
dc:2a:f9:4a:00:f3:f1:63:37:ee:44:5d:a4:38:0f:77:51:e2:
db:64:a6:3b:19:80:f3:06:f6:6b:af:84:3e:0c:51:3c:2c:cd:
47:55:e1:6b:bd:69:fa:47:d4:6e:df:37:a4:9d:a1:a8:44:c7:
b5:2c:b0:8f:f8:08:21:4c:b5:f1:fc:d3:2b:b6:a6:19:6a:75:
1e:1b:0f:26:08:d5:e7:4a:b1:6c:b0:32:9b:b6:c6:f9:3b:15:
9e:af:6a:e7:46:0f:78:48:7f:f7:8c:ea:88:d2:7f:39:cc:55:
87:a5:6e:ae:46:c9:74:b9:eb:24:d4:25:22:b2:01:59:d9:29:
fb:bb:99:53:29:1a:a8:ef:4a:17:5c:e0:e2:7a:31:e4:12:e6:
59:cd:bc:67:76:13:a8:ee:fc:64:77:c5:76:09:37:e3:23:6d:
04:d5:f7:6e:35:ed:6a:a2:bb:82:24:46:10:ac:e3:13:85:ad:
87:29:d1:78:57:e3:0a:59:1e:f3:6f:78:e6:cc:f8:c3:35:f8:
f7:5b:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:03:50 2025 by rpki-client