Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: qtvMiN6GCBwKFvsTfaHu8vahDfmpBx+9fpx8m1dfE0c=
Subject key identifier: 21:E6:36:B8:86:7A:CE:AD:E2:84:8C:8C:38:AB:B9:BF:AE:47:58:6A
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 019603AE001808EEE3F216E27FB59A8A8255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 14A8
Signing time: Sat 05 Apr 2025 02:00:57 +0000
Manifest this update: Sat 05 Apr 2025 02:00:57 +0000
Manifest next update: Sun 06 Apr 2025 02:00:57 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: g5Uoag6M4vCu7dJYWVycSYm4rUU.roa (hash: Ngolk11LXJPCpKR9MzzdDkX8Nba8dwgngUE2uQJceUA=)
4: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
5: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: txPL+Gqzv/XYGooKw/IX6oxy0ex6WzbpZqvhTWjzRMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:ae:00:18:08:ee:e3:f2:16:e2:7f:b5:9a:8a:82:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Apr 5 02:00:57 2025 GMT
Not After : Apr 6 02:00:57 2025 GMT
Subject: CN=21e636b8867aceade2848c8c38abb9bfae47586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:1f:6a:be:90:57:c9:10:cf:2c:d7:f0:f4:
b3:10:dd:c4:99:27:7f:54:fc:cb:9f:67:d4:43:4e:
1b:0d:0b:9f:7f:51:f9:f8:9c:a8:84:8e:c7:11:67:
7f:70:2b:27:91:f9:35:04:24:c9:f3:bc:8e:d1:7a:
91:c3:20:5c:10:4d:49:51:f3:52:1c:21:84:18:b3:
93:49:bf:05:35:a0:1f:2d:7b:bc:40:dc:18:2b:7a:
19:a5:94:bd:4b:cd:12:14:0b:50:d7:df:46:6c:e8:
0c:d7:f3:d7:0b:9c:ec:1f:59:3f:0b:09:f1:74:0a:
a9:91:9e:eb:d7:76:76:56:96:f9:c7:eb:7b:af:57:
f6:3d:e2:5c:27:e5:ac:bf:28:13:f2:70:ba:c2:30:
f6:55:09:ea:e9:c2:1f:17:e9:a7:3b:2d:c1:15:e6:
f3:af:3b:32:f0:24:9e:06:fc:02:1f:07:44:fe:32:
d3:8b:e8:95:ee:aa:9c:1a:ab:16:b1:43:1a:0f:fe:
af:23:2a:f6:3b:75:4d:0a:fd:f4:4f:c5:b5:ef:e6:
f7:99:fb:f7:9e:75:68:09:97:47:d5:ea:00:fd:9e:
86:8e:c6:7e:f3:ce:3b:57:36:55:41:07:58:b0:dc:
d6:47:d5:00:86:e5:76:98:35:e3:46:0d:79:cf:e9:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E6:36:B8:86:7A:CE:AD:E2:84:8C:8C:38:AB:B9:BF:AE:47:58:6A
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9d:00:c8:54:ec:0b:14:3c:6c:22:34:56:64:12:23:4d:69:
f3:4e:c5:99:2a:bb:24:5d:a5:3e:cb:c9:dc:b5:29:1c:99:1b:
a5:9c:66:6c:a0:a6:16:4e:6c:0b:93:5f:ad:bd:24:67:03:dc:
c8:99:9a:38:27:85:d3:45:15:2c:f2:2b:a0:3b:e9:05:9f:1c:
59:55:c1:3e:0f:43:02:67:4a:65:32:8a:6b:1c:43:0a:b8:2a:
e1:7e:04:bc:fc:2f:ec:d8:49:b7:de:19:ad:37:24:15:70:0f:
0c:b1:87:c3:28:d1:3e:bb:4f:a2:91:28:d3:d3:34:df:52:bc:
32:33:2d:58:55:29:1c:6b:b0:df:2d:8b:2d:74:29:18:74:16:
7e:ef:f8:8d:87:1f:ab:20:22:84:22:84:40:72:12:73:31:2e:
b6:e6:29:8c:6c:92:35:57:ba:1c:2b:08:b6:84:ec:03:c9:e3:
7c:80:24:a0:7a:d2:f3:f1:01:a1:cd:7f:8b:ed:c1:4d:4d:e9:
b0:20:30:cd:6a:0f:21:7f:b4:64:36:3b:9e:9d:f0:f8:d9:80:
05:c8:7b:2a:aa:ee:7d:f0:89:58:6f:6c:41:b7:89:c7:ba:b1:
50:c5:29:a4:58:24:1e:f2:94:39:79:e8:01:45:85:60:2d:dc:
5d:fa:dd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:19 2025 by rpki-client