Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: mSsloHIGSWGE2L1Mp015GUyXifVYMuANZ3tbugKHmyM=
Subject key identifier: 94:28:99:42:08:44:53:E0:3A:CE:1E:99:95:81:44:91:66:59:E1:66
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 01964030390D5DEF9C3A563BF41C1EE98100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 14F7
Signing time: Wed 16 Apr 2025 20:00:24 +0000
Manifest this update: Wed 16 Apr 2025 20:00:24 +0000
Manifest next update: Thu 17 Apr 2025 20:00:24 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: 6culBYE7L7KCa0qugR9NmhTrWtV2sCvp4htKC5FgiAg=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:39:0d:5d:ef:9c:3a:56:3b:f4:1c:1e:e9:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Apr 16 20:00:24 2025 GMT
Not After : Apr 17 20:00:24 2025 GMT
Subject: CN=94289942084453e03ace1e99958144916659e166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:9a:61:08:ae:76:04:27:88:95:0a:6e:6b:
de:7d:ce:6b:f2:44:ac:ac:b4:17:af:7c:ea:18:77:
88:dd:7b:f8:4c:b1:b7:3d:f3:67:46:7c:7b:f4:bb:
f6:74:5a:75:47:a2:d8:00:b6:0b:16:63:88:51:72:
0d:1a:a1:5f:e8:6f:c9:82:e7:15:ba:bc:ff:28:87:
15:64:83:87:f2:26:61:65:4d:85:42:91:cc:58:8a:
53:67:79:ac:1e:48:51:43:48:be:4a:06:f9:8d:e9:
cb:40:52:05:37:be:2e:ec:eb:0c:75:3e:e6:0b:f0:
ef:90:38:e2:ca:98:54:27:2e:f2:82:77:e8:af:94:
16:9a:8f:87:61:28:98:23:01:44:1d:9e:93:35:5a:
5f:f3:c2:7c:4c:6a:7b:b4:db:42:c4:cb:e5:6d:e2:
02:51:25:d1:c7:a9:77:9b:39:1c:9c:20:33:13:51:
c1:b1:92:b2:14:48:34:6e:2f:b8:50:7c:f4:42:0c:
54:f6:72:d4:c7:4d:f6:76:95:49:cd:c4:f3:f1:21:
90:1b:53:ff:c8:92:00:21:51:84:3e:b6:d8:a5:c0:
b8:a6:a5:5c:11:96:7d:d7:e4:88:7c:10:ff:68:83:
5b:6d:e9:54:20:56:12:f3:38:5e:02:e0:0b:de:97:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:28:99:42:08:44:53:E0:3A:CE:1E:99:95:81:44:91:66:59:E1:66
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ed:9c:94:6a:90:83:41:0c:cb:3d:95:e8:c1:a0:c9:c0:d4:
71:9c:90:51:da:10:4c:ec:4b:6a:3b:43:c0:c0:ee:78:d1:25:
12:97:f4:e4:83:f8:a9:cc:33:31:f6:61:d4:87:67:a9:a1:15:
a8:1d:1f:89:39:09:00:3f:cf:08:cc:21:4b:e3:86:30:9c:e0:
f2:69:87:f2:b0:4f:f0:5a:e9:17:42:22:a3:9c:ee:42:67:14:
57:7f:c4:92:df:39:79:48:0d:e5:12:19:82:bb:a2:8d:21:a8:
75:de:48:75:c1:ad:69:6a:69:26:5b:ba:5a:34:e1:14:ce:f6:
69:c1:db:21:eb:5c:93:2c:17:fa:ff:99:52:cd:63:4c:2a:50:
6e:6b:2c:23:33:c0:81:07:dd:ae:b9:83:2f:cc:9c:5d:7e:8f:
2e:04:14:03:a9:c9:38:76:cb:ba:ac:99:6c:1f:05:1d:8e:f2:
7a:5b:ba:06:78:26:58:5f:b2:14:0f:40:71:30:88:41:0a:5b:
47:b4:cb:92:9c:81:c5:3e:db:51:4e:f4:27:5c:ad:e7:6a:54:
b3:a0:87:f3:fd:2a:f0:e6:74:c1:b5:d0:ad:d2:e3:94:4b:55:
26:c6:db:7f:48:61:a9:22:e2:12:2b:9c:11:34:1f:71:e1:1c:
c8:8a:55:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:11:08 2025 by rpki-client