Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: ffE1OIcj/KZ+cmuOBNmcAC/GcNDVa2C/ECGvKLsLQfY=
Subject key identifier: 60:7E:88:7A:4C:69:E5:3F:30:A9:F1:6B:77:18:74:C7:7B:7C:CA:C6
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 01961357ED128EC25DE624BCEA7030B85482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0531
Signing time: Tue 08 Apr 2025 03:00:51 +0000
Manifest this update: Tue 08 Apr 2025 03:00:51 +0000
Manifest next update: Wed 09 Apr 2025 03:00:51 +0000
Files and hashes: 1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: j2pWZXS9Jq9I6otkua6n11b8gk+T+w+SdahKGK0b8Ew=)
3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:57:ed:12:8e:c2:5d:e6:24:bc:ea:70:30:b8:54:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Apr 8 03:00:51 2025 GMT
Not After : Apr 9 03:00:51 2025 GMT
Subject: CN=607e887a4c69e53f30a9f16b771874c77b7ccac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:b5:7a:63:0b:62:9d:d1:fd:33:8c:71:f7:
61:34:5a:19:dd:6e:cd:60:d0:fd:ca:e9:e4:e6:f8:
00:c3:09:94:c5:d4:2f:3c:68:76:44:3d:2f:33:e9:
65:da:90:15:64:8d:ba:d9:33:d9:35:67:bb:92:05:
c6:9b:d5:4f:c1:45:12:aa:50:50:a2:c3:e8:47:ae:
65:ab:9c:04:18:9b:af:6d:d4:72:e7:73:2b:bf:bd:
c8:92:c2:f0:49:f9:e6:ac:96:d2:9c:85:89:0a:0b:
14:d8:97:af:36:fb:85:c2:84:66:ed:9c:f8:86:ee:
06:f9:38:cc:ce:d7:fc:3a:f2:f7:1f:dd:ec:5e:00:
c7:ae:2b:84:65:9a:58:e8:59:00:1c:c9:94:0c:89:
fa:53:04:1d:e9:97:5b:65:61:af:4b:b6:77:16:59:
70:47:69:db:6e:d1:88:50:37:fc:c6:3f:98:ca:d4:
05:38:22:d2:68:62:e2:4f:13:44:bf:7d:68:10:a6:
36:43:79:95:06:bd:4f:85:46:b2:e0:14:4e:3f:3f:
3c:4c:3b:16:1a:12:1d:8f:30:58:14:8d:4e:84:9f:
be:06:7c:dc:de:a4:e6:87:29:a4:12:bb:dc:6d:92:
23:8a:01:41:20:f9:db:c8:5b:de:83:6f:76:f1:53:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:88:7A:4C:69:E5:3F:30:A9:F1:6B:77:18:74:C7:7B:7C:CA:C6
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fa:2f:2b:b2:33:a8:5b:7b:d8:7e:1e:75:55:dd:b5:c0:3f:
3e:72:80:6a:7a:9b:a5:c9:8d:b4:a7:e8:a0:34:b0:8d:35:17:
b5:17:cc:23:b3:b2:48:4a:77:63:a5:e6:89:b6:66:c7:3d:50:
8d:25:7d:f8:bc:d6:22:44:66:62:0a:1b:31:9f:6f:90:d8:10:
63:d7:7e:bf:65:b5:0e:27:54:57:05:5c:0e:39:8c:78:05:5d:
1e:01:29:f0:a6:cd:fd:6c:78:ac:2b:2e:f1:07:0b:ef:ff:35:
27:cd:cd:48:a1:99:08:5f:55:f8:e7:10:c0:9a:a8:c9:23:0b:
5e:42:bd:f2:0e:e3:1a:db:f7:5b:3b:6a:9d:2b:8e:85:78:7d:
da:31:d7:5e:12:5a:2d:fc:9a:e5:71:c7:cb:b2:c4:da:a7:85:
c3:52:5b:f1:56:63:51:58:e9:c6:62:8f:63:ef:79:b6:b9:ee:
b0:c7:38:5a:53:78:fb:c8:eb:12:cb:18:be:ff:f4:b9:1d:d2:
fc:14:2a:ec:a9:e6:09:f3:f3:84:aa:ba:ef:da:49:9b:0f:b3:
18:9b:d2:3a:da:21:0c:63:8a:65:bd:ba:b6:f1:c6:f0:4c:1f:
61:12:79:9e:8d:f3:bb:12:09:bf:72:10:60:63:53:e2:88:75:
21:7d:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:49 2025 by rpki-client