Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: ELAwGzKjwOeigKj2jJQZfsH2THw1qcDqre98uDdxQZQ=
Subject key identifier: 89:48:41:48:EA:47:A2:48:07:93:78:20:65:B7:26:DB:91:79:92:EF
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 01964FDAA46F113CFB2353697AEF1D3AEAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 21:00:51 +0000
Manifest this update: Sat 19 Apr 2025 21:00:51 +0000
Manifest next update: Sun 20 Apr 2025 21:00:51 +0000
Files and hashes: 1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: y1i7AHd4hdHWfCfosqYC/2ZXhGw1/mYPMrsiY8+DXBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:a4:6f:11:3c:fb:23:53:69:7a:ef:1d:3a:ea:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Apr 19 21:00:51 2025 GMT
Not After : Apr 20 21:00:51 2025 GMT
Subject: CN=89484148ea47a2480793782065b726db917992ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:34:83:7a:b9:f7:c1:ed:fa:31:bf:38:e0:
14:15:63:2e:f0:cc:54:0d:51:1b:9f:0a:6e:c3:da:
ae:fb:4c:94:ee:f3:f6:0e:ce:78:1f:b6:f8:75:24:
54:7e:6f:70:0a:e2:5a:7f:3c:17:88:f0:27:83:bb:
33:2a:f0:0d:74:07:f6:13:aa:f6:e8:9c:3a:fe:7d:
d6:80:15:cd:b3:47:c0:0d:40:f6:26:3c:37:a3:28:
6c:73:c8:22:5c:8f:54:cb:c9:09:db:a0:17:6c:59:
89:fd:94:19:ea:e4:e7:fe:f7:71:c6:12:26:dd:b4:
91:1d:3a:4e:d0:a2:83:37:ed:b5:aa:1c:18:ec:e7:
98:37:50:32:38:70:12:cc:ea:cd:15:ef:d1:95:26:
34:92:32:44:3a:c7:d3:e0:8e:22:d5:18:12:98:69:
32:98:fc:39:2e:ad:38:68:e4:5b:f2:79:39:16:e8:
f7:c9:e7:2f:3d:55:53:af:f1:44:3f:e7:5a:c3:ce:
53:f9:92:c9:86:6f:ec:94:de:3b:b9:54:ec:f3:03:
63:25:2a:d1:b1:90:48:f3:b9:23:e0:ed:f1:e6:91:
b0:b9:c8:dd:65:42:86:ac:50:c2:18:01:b8:5f:71:
04:4c:d9:56:43:cb:df:2b:5c:2b:5b:8f:16:dc:18:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:41:48:EA:47:A2:48:07:93:78:20:65:B7:26:DB:91:79:92:EF
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:25:03:2c:fe:04:50:f2:e5:67:4e:77:47:f8:de:e3:bd:1d:
a5:92:3e:74:ae:b1:74:46:68:0b:d3:23:50:12:6c:e5:59:0c:
c1:95:29:52:46:69:9b:7f:b7:e8:ed:3d:92:b7:ec:01:ed:1f:
02:3b:4d:74:22:4a:41:9a:ae:3b:a6:f6:50:0b:bb:e4:de:ee:
12:eb:a5:a9:b6:72:18:c4:68:30:ce:92:2a:78:d0:d5:31:5d:
f9:0b:8b:f0:4d:c0:6c:72:12:00:09:7f:bf:b8:43:6b:72:e8:
0e:a8:65:ff:2c:22:fe:4a:16:8a:9e:0e:27:db:c3:18:15:21:
46:78:0c:8e:82:5b:70:2d:f1:cc:8d:68:8e:b5:37:8f:94:74:
9d:9f:00:ab:1c:b6:7d:73:20:05:a7:42:67:11:59:73:2e:82:
e0:dd:ff:fc:10:9c:00:ce:f9:67:a8:9c:68:37:86:03:ac:e0:
d5:9a:59:b3:48:11:a2:3d:44:b2:bf:44:03:6f:6d:34:6d:66:
f8:8c:9d:c7:68:fa:c4:82:69:2d:8d:ef:4a:69:f9:9d:19:e6:
ed:42:52:ac:17:c3:f4:fd:11:d2:24:55:49:64:a8:ea:f1:e4:
d5:f8:81:51:8c:5b:c2:1b:5e:3a:3b:28:5f:4f:d3:18:47:c8:
80:1d:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:20 2025 by rpki-client