Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: Br8cO/f8ts7JT3JqHewBNFTGJuLJJtiZq+IO/RLt1gs=
Subject key identifier: 6E:E5:96:30:7B:E6:94:B7:DA:28:6F:2A:6F:17:D7:ED:6B:06:EB:45
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 019655A64B9DD5E24DE3CB97573447B1E7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:01:23 +0000
Manifest this update: Mon 21 Apr 2025 00:01:23 +0000
Manifest next update: Tue 22 Apr 2025 00:01:23 +0000
Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: HyurFt167xiqLpBCKmhVfLVhRcfR47Dmx9jlqVpPibs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:4b:9d:d5:e2:4d:e3:cb:97:57:34:47:b1:e7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Apr 21 00:01:23 2025 GMT
Not After : Apr 22 00:01:23 2025 GMT
Subject: CN=6ee596307be694b7da286f2a6f17d7ed6b06eb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:c9:b6:a0:5e:eb:17:40:c2:17:cc:ef:68:
54:a5:d1:2f:d5:f0:5d:2a:b2:3e:7b:54:ac:45:92:
b8:5c:31:27:a7:ea:8f:f2:97:d9:70:bd:83:a0:f9:
68:5e:20:d1:8e:7e:9f:06:a2:11:da:84:ac:57:01:
67:0c:63:12:cc:c7:98:76:71:bb:3d:93:df:d1:68:
cb:d1:ef:61:b0:09:2d:6e:56:12:70:cf:7a:2f:61:
ad:d4:5b:89:41:ed:c7:ae:67:c1:e1:73:cd:d3:57:
62:00:28:69:99:95:41:08:35:6b:a1:f1:d4:99:53:
ba:ba:50:ef:10:52:2c:69:dc:28:22:64:ce:a6:51:
e8:a4:59:7e:f8:69:f7:de:3c:3b:b9:49:df:b0:dc:
53:8d:b2:0c:3d:24:b5:99:e9:48:c9:83:c9:35:2f:
8a:55:e7:36:42:58:69:6c:be:62:df:4b:16:d5:24:
ed:65:af:54:c6:17:c9:5b:39:4e:95:2d:29:7f:5a:
65:f3:74:c3:33:4d:88:87:55:ad:25:a2:40:c7:cb:
7d:76:a4:4c:c3:af:c0:b9:27:87:b1:90:99:f7:09:
aa:0e:3e:26:59:fe:5b:b3:6d:44:86:d7:40:0d:05:
7b:e2:ac:c9:b7:20:f9:5f:bd:40:12:a9:6e:40:82:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E5:96:30:7B:E6:94:B7:DA:28:6F:2A:6F:17:D7:ED:6B:06:EB:45
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:92:30:d4:c9:fb:7d:8b:9c:de:ab:e6:59:6c:2c:85:f8:5d:
f3:1e:98:6c:22:ad:4e:57:e0:b8:d1:e9:f4:18:32:ff:5f:27:
ae:aa:e6:54:8c:e0:f6:cc:4a:a3:a1:04:5b:03:14:18:e6:53:
b9:e6:37:4e:ce:42:fe:a3:e1:49:2c:a8:85:12:17:2e:67:a7:
66:7a:ff:85:c3:e5:7d:db:b2:42:6a:a1:ab:1b:f0:5f:ef:86:
81:06:ea:01:a8:cc:70:f0:7d:c0:b9:9c:25:32:bb:c8:34:d9:
59:86:e3:0d:6d:41:50:74:ff:bc:dd:fb:65:8d:c4:79:ad:b5:
2a:63:05:f5:66:2e:a6:fb:ae:83:cb:a3:05:63:b6:2d:d6:98:
93:81:5d:db:f8:0e:8f:87:a5:e4:00:3f:2b:4c:31:69:ec:46:
7b:18:82:12:5c:41:18:bb:2e:26:8b:bd:cc:65:f1:f5:7e:69:
e7:8d:0a:89:6c:13:03:a1:57:a0:80:17:a7:09:5c:66:17:28:
e7:72:3f:3a:39:98:78:cd:43:de:27:de:21:74:b2:c8:7d:6e:
23:57:e2:5d:cf:29:06:2f:a5:69:a7:85:08:6c:6e:9e:56:ab:
26:97:1d:65:38:63:a4:a0:fa:64:6e:e3:e8:09:e9:ae:d5:96:
75:0d:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:01 2025 by rpki-client