Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: SnlRuXMj4YAnx2/3kNbVbz7Q+asdiKxoIkeC6qvyra4=
Subject key identifier: 3C:C4:24:00:E5:BB:64:92:62:0D:04:C1:E4:7D:0B:3F:32:D9:A3:5B
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 019653EDFA7380511FCE8F0EFF87E11BC5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 0DD6
Signing time: Sun 20 Apr 2025 16:00:27 +0000
Manifest this update: Sun 20 Apr 2025 16:00:27 +0000
Manifest next update: Mon 21 Apr 2025 16:00:27 +0000
Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: 5N8WcVFSWfQijhwjJIilwcmaymgnzZ7mTOFsM0+d1BU=)
2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ed:fa:73:80:51:1f:ce:8f:0e:ff:87:e1:1b:c5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Apr 20 16:00:27 2025 GMT
Not After : Apr 21 16:00:27 2025 GMT
Subject: CN=3cc42400e5bb6492620d04c1e47d0b3f32d9a35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:ea:06:24:8b:22:ea:87:f8:fc:cb:a8:57:
dc:55:a3:0c:5b:ef:bb:94:99:5d:ed:d5:dd:30:b0:
2e:dd:6d:68:37:5d:18:73:d7:6f:df:99:59:7e:6f:
bd:29:0e:d7:36:ec:a1:94:ff:71:68:35:8f:7d:29:
94:3b:74:64:60:1c:ff:0d:6f:85:c9:17:0f:36:fe:
88:6c:a8:7e:e6:55:45:12:f4:a5:9f:3d:62:36:a3:
71:b9:95:08:35:1c:5a:04:c5:dd:48:13:d3:1d:e7:
c0:60:55:9a:f3:60:1c:23:2b:c7:d4:68:25:b5:70:
da:0e:6b:24:1f:99:1e:08:10:57:48:9a:22:2c:a7:
84:af:b8:da:c4:d2:b3:cc:8e:41:58:c7:e2:d8:cd:
93:8a:14:6a:e3:a2:84:04:39:0e:e9:5d:44:c8:51:
1d:d1:a0:4b:23:0c:30:97:09:55:8a:78:d2:4a:7d:
7a:73:a0:42:a2:27:45:65:42:7d:30:e5:34:13:83:
28:ba:eb:c5:8c:a7:9f:84:16:b3:11:02:93:30:19:
7c:75:be:d6:2e:54:00:8f:07:10:21:c1:ab:50:8c:
90:ee:8b:5f:92:18:94:e0:37:1b:4e:3a:45:b8:53:
64:a6:50:b3:79:7f:7f:1d:74:1b:a2:6f:60:b7:0b:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:24:00:E5:BB:64:92:62:0D:04:C1:E4:7D:0B:3F:32:D9:A3:5B
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2f:b2:fc:52:62:fc:c4:56:a8:a1:0e:76:a0:82:7d:93:52:
4d:fa:77:2b:11:62:a8:5d:24:e6:61:d3:80:97:75:65:59:cb:
84:14:e4:98:07:b2:bb:5f:7a:1d:ce:fb:f4:fd:c6:7f:e3:35:
42:26:ea:00:9d:0e:8d:d8:f4:fb:57:eb:92:a5:2f:b9:89:90:
6d:d2:f8:39:6a:a7:0c:71:b7:60:eb:c4:61:f8:f5:bd:af:ea:
4a:21:6b:33:9a:1b:94:db:ed:76:e9:6c:2a:91:2f:88:b0:aa:
21:2f:80:c5:8d:c7:4b:91:f4:78:37:4b:d1:6e:ee:5a:49:a7:
cb:05:3f:31:28:a2:c6:6b:6c:4b:2b:a4:24:83:37:70:dc:25:
8c:7b:89:07:36:2b:7a:20:9d:47:2f:05:f2:a5:67:eb:af:6b:
5e:4d:4c:58:39:1a:cb:9e:1d:c0:52:03:88:fd:61:8c:cb:7a:
38:7c:e3:7d:a5:af:40:c6:f3:3a:ff:3f:f2:f0:19:a4:88:4e:
e7:ec:fd:89:38:1b:e6:ee:a5:57:db:94:c3:d8:84:13:08:fc:
e3:b9:fe:ee:6d:d0:72:3e:14:af:f8:d3:79:a1:39:0e:7a:7c:
fb:c4:ef:bd:bd:25:bc:5d:51:0b:fe:ea:7a:16:4c:df:3a:d2:
71:0d:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:33:34 2025 by rpki-client