Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: bZTYLy4miUlO4ykGVIVmQ9t2RBfVt42nw+72D8gcvyQ=
Subject key identifier: 6D:AE:A8:88:68:53:B8:81:3B:31:EB:08:39:A3:0D:59:04:57:FD:33
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 019642C3F63C12CEF618D6CD5A5534EF3285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 1502
Signing time: Thu 17 Apr 2025 08:01:00 +0000
Manifest this update: Thu 17 Apr 2025 08:01:00 +0000
Manifest next update: Fri 18 Apr 2025 08:01:00 +0000
Files and hashes: 1: P-haGLcvZvQGvLFpnob9lOaXmTs.roa (hash: 4zCg+GccZn/4aPxyfbii7VCbnRc/Ws0LuYTysih4ku8=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: HVZ778USa10XaElc+iCJY2QsuQhwSL6BJVmM2pj+yWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:c3:f6:3c:12:ce:f6:18:d6:cd:5a:55:34:ef:32:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Apr 17 08:01:00 2025 GMT
Not After : Apr 18 08:01:00 2025 GMT
Subject: CN=6daea8886853b8813b31eb0839a30d590457fd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:44:d0:a2:66:62:b1:bd:c5:9d:57:f3:85:
bd:15:f8:a7:15:29:93:98:29:f1:7c:f9:ff:b0:c2:
38:33:3a:fc:54:cf:06:09:b1:56:3b:c9:e3:d3:01:
bd:ad:f3:ca:09:68:b2:61:65:f2:8e:00:71:49:b6:
53:da:1d:df:c8:bb:41:e4:cf:58:ba:2b:14:22:8e:
21:96:66:eb:77:ab:ee:b9:55:ca:03:30:5a:1b:cd:
c4:c2:ea:c1:aa:5a:51:bb:da:26:3c:78:bb:f6:c3:
57:4f:9b:b8:45:8d:b5:20:37:43:f4:b2:1f:11:c8:
b0:bb:76:7e:03:76:96:c7:df:6d:d5:f1:59:88:47:
98:c8:15:a3:d5:41:62:da:01:87:eb:44:01:08:89:
a4:f0:3a:50:94:39:bd:61:ef:3c:32:fa:e1:e9:2d:
a1:f0:95:90:08:dc:c1:8f:f3:5d:98:28:8f:7d:93:
fb:a4:68:8b:3a:e8:14:ac:bb:d2:43:db:03:bf:e5:
9a:d0:61:ae:3c:e7:00:51:e0:b1:f0:0c:c5:04:ec:
7c:b2:1b:c4:b0:27:cf:94:be:6b:40:2a:8a:be:7f:
e4:5f:e9:21:d9:f6:68:71:a3:c9:6c:af:44:3f:92:
c9:ad:67:ef:ea:9e:a4:48:73:f4:9a:c4:a6:8e:86:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AE:A8:88:68:53:B8:81:3B:31:EB:08:39:A3:0D:59:04:57:FD:33
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1c:2b:3a:c9:ce:49:3f:79:6a:81:c1:42:5d:7d:88:a8:a4:
98:2a:73:bf:dc:78:43:30:20:69:81:48:8a:26:ee:3f:fc:d4:
33:f0:c9:c1:54:c4:2e:83:78:0e:ce:55:36:a4:aa:47:01:f5:
6a:fd:42:86:b9:9f:54:e2:0a:11:05:e7:91:09:97:89:49:27:
a6:e2:4d:f5:85:17:e8:39:c0:ff:ec:09:ec:80:21:be:3c:a3:
ba:4a:b6:cd:2f:f8:71:a9:6c:b9:f3:8a:32:8d:1e:f3:d8:fd:
fc:23:95:c3:40:8e:86:b3:70:26:a7:62:15:56:65:cf:fb:21:
f8:a9:a5:b2:46:35:40:4f:1a:93:7e:f9:55:34:7e:68:01:e8:
22:12:52:0c:00:77:de:b0:3d:f7:b8:f8:4b:e7:26:d4:e6:0a:
ca:a6:a7:74:43:39:2d:44:dd:0f:73:c1:65:82:c5:af:8c:49:
43:82:85:84:ce:b7:75:df:23:cb:1d:47:c9:02:a9:1e:65:b3:
d6:cb:79:03:3b:cf:cb:98:0b:60:da:f2:06:52:09:57:df:6c:
f7:5d:4c:22:e6:6e:ff:7f:ae:3e:fe:5b:95:5b:7d:45:0b:63:
6f:8f:b7:9b:c3:8f:e1:67:f6:4d:d7:d1:1e:b1:e9:4a:fc:99:
dd:7c:4f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:36:34 2025 by rpki-client