Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File: tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier: PvUPk5EeVWMdZd8/AEc7OzrrWwEwa+d9/u1D/UmY7C8=
Subject key identifier: 0C:07:5B:CE:22:95:3C:74:10:77:AB:57:82:1E:B5:4E:FC:10:3E:58
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 01960F7B4D6A6CEA56932F0D7D8B439C3B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number: 14E8
Signing time: Mon 07 Apr 2025 09:01:01 +0000
Manifest this update: Mon 07 Apr 2025 09:01:01 +0000
Manifest next update: Tue 08 Apr 2025 09:01:01 +0000
Files and hashes: 1: fyxM_h2WX6rYIy5hg25YZB5O2CM.roa (hash: 9Ti3G/owzw7kR0D0MPQYXnuvUJArE0MI+SK12KJz4Yg=)
2: shF1G42LQitQPvZfxehzohMRUrU.roa (hash: g2S5jc6HR4fQzCYw/zOiH9jd1mhIq7ZtkSDHMtrwc4E=)
3: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: iiDUBOyrfjTot5N1RaHkLbe289SZA6QHXAD2Q65mNlI=)
4: zyYFRHKcIrTD9dtbNer5GUgk4uk.roa (hash: j/jB5+az+sxCe92XxmcMBTNdT2rTViq3Gn9CJHgWFM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:4d:6a:6c:ea:56:93:2f:0d:7d:8b:43:9c:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Apr 7 09:01:01 2025 GMT
Not After : Apr 8 09:01:01 2025 GMT
Subject: CN=0c075bce22953c741077ab57821eb54efc103e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:51:63:3d:ff:53:95:8e:0a:d6:c5:5b:f3:
7b:1e:c6:4f:26:c8:6e:d8:9d:0b:63:3c:59:ec:35:
16:92:2c:c0:f5:a9:3e:01:42:b3:53:92:0e:a6:e3:
42:4c:6c:13:62:7a:4a:ca:41:a5:ce:f8:b4:00:03:
00:e4:7e:0e:76:e3:58:85:75:00:be:70:39:31:73:
53:75:01:d2:cf:2e:4b:63:43:d0:3c:d3:f1:57:25:
3a:21:4f:ea:1b:ed:c9:46:74:81:e1:fc:1c:55:dc:
58:5a:4f:e2:17:d9:0b:11:8f:cf:62:9f:a5:36:52:
48:48:1c:2b:38:12:b8:6f:62:99:7b:5b:47:c1:1e:
b8:fe:82:b8:3b:48:e0:17:c6:99:4f:09:4f:87:7e:
43:8a:f5:81:4f:f9:9b:50:6d:b8:d4:0d:b7:98:8c:
91:f8:4a:4a:75:de:59:45:15:1b:bd:85:35:14:de:
9b:90:8b:23:f4:d0:47:6d:58:35:19:8f:8c:93:91:
03:4b:7c:04:be:ac:8d:ee:9b:5c:d9:30:91:66:cb:
d7:77:c7:4f:c1:a4:66:41:d2:d4:b2:2f:60:42:88:
9c:22:c3:2f:ac:09:1f:83:92:d5:55:fc:48:e8:e0:
0e:dd:9f:9b:4a:b8:dd:88:4b:70:f7:a6:25:4d:65:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:07:5B:CE:22:95:3C:74:10:77:AB:57:82:1E:B5:4E:FC:10:3E:58
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0d:a6:00:ca:e2:1e:aa:c7:19:71:eb:fe:8b:ec:d4:c4:e1:
1b:64:78:c7:a8:14:05:0c:9c:e8:6d:d0:ef:1c:9a:32:b0:25:
21:97:ff:1e:d7:fc:6e:26:c5:7e:56:db:b1:2a:8b:d8:b9:5c:
0b:41:38:eb:d5:e4:07:5e:f9:92:9a:17:b9:30:4b:9d:ed:1d:
ca:82:c4:b2:62:5e:9e:59:df:d1:dc:26:46:30:56:e4:21:72:
a6:8a:7a:f5:e9:e7:52:c9:99:9a:2f:30:a1:54:99:e3:9d:75:
1e:d4:9b:14:46:dd:97:35:a6:97:84:d0:64:55:27:9c:88:08:
44:53:a4:82:47:35:2e:6b:07:58:de:f6:63:3f:83:2a:e4:8c:
3e:82:39:c7:f3:ed:61:48:90:f6:76:c6:f4:fe:8b:ef:ab:33:
ab:2c:91:91:0d:3e:92:95:93:2c:08:69:bc:03:63:80:08:f3:
67:a7:65:4e:f4:3a:e6:c4:c8:64:df:48:67:f4:89:97:e9:33:
f6:63:93:5c:c1:94:ed:08:63:d7:35:ef:84:bb:c4:d3:14:9e:
52:8f:9e:5b:f7:b7:2c:80:86:41:05:c0:f8:cc:22:d7:e6:bc:
0c:d7:9c:a0:79:b8:95:c5:26:b0:89:4c:05:41:eb:45:99:7d:
d5:25:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:32:44 2025 by rpki-client