Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: bAeroWJ8Td27M3lbfogobwKQejMUwQEUEHEjYo1pSiI=
Subject key identifier: 47:01:25:5B:52:6B:92:AE:9B:EB:61:D1:B1:55:F1:A6:83:70:BB:15
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 01964A7D0ACA1666C2B41557D89697E02701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 14FF
Signing time: Fri 18 Apr 2025 20:00:30 +0000
Manifest this update: Fri 18 Apr 2025 20:00:30 +0000
Manifest next update: Sat 19 Apr 2025 20:00:30 +0000
Files and hashes: 1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: kcRytGlxmYzNw5jWe8Rf7/q4LL/rM5/sefwsr8hsPSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:0a:ca:16:66:c2:b4:15:57:d8:96:97:e0:27:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Apr 18 20:00:30 2025 GMT
Not After : Apr 19 20:00:30 2025 GMT
Subject: CN=4701255b526b92ae9beb61d1b155f1a68370bb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:22:3c:e3:63:01:7d:bd:04:ec:23:a7:f3:
01:39:cd:ff:81:af:c7:35:7e:7c:34:57:d8:3b:81:
b3:aa:ce:f3:2b:e6:e5:cc:24:06:1d:b0:40:78:6a:
b6:9c:92:15:ef:b9:8f:14:a0:bd:5f:d4:23:cf:2c:
f1:d3:cb:a2:2f:f6:47:00:eb:84:77:67:76:cc:22:
d5:9c:2b:6b:12:87:e0:36:fb:d6:1e:55:4f:a0:2f:
4e:73:4f:93:a1:e3:5b:1a:c4:7a:4a:fd:38:09:37:
f5:f9:2c:4e:5e:a4:b2:c2:81:1e:18:e5:24:09:18:
62:02:37:12:26:3c:63:cb:2e:97:1f:fd:6e:96:75:
16:55:b9:8b:5d:d3:21:94:68:37:33:c7:71:cb:55:
43:1e:ab:aa:19:40:c1:23:95:e7:8b:25:24:52:1d:
24:07:cd:d4:4b:8b:dc:09:a7:a2:60:ca:35:ae:f9:
db:d4:ad:6a:14:4c:38:ab:47:bf:79:7f:16:6b:49:
75:e1:ad:c7:8f:fe:8f:06:ed:98:57:76:8a:a5:88:
e2:7d:2b:1c:a8:91:91:bf:a1:0a:4f:a3:43:7a:14:
a3:66:35:79:eb:88:a4:ae:06:8c:88:a0:f4:11:0b:
8e:3f:b1:a1:de:1d:6f:be:7e:e2:5f:a2:f2:63:45:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:01:25:5B:52:6B:92:AE:9B:EB:61:D1:B1:55:F1:A6:83:70:BB:15
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:80:18:dd:3b:c2:59:b8:25:1c:17:03:68:b3:38:28:45:94:
6b:a2:f2:44:4b:a5:26:2c:e2:1e:0f:c8:92:7c:72:23:54:74:
99:b5:d0:22:12:33:10:8f:ec:44:88:a4:c6:01:45:79:a8:99:
ba:05:82:bb:26:f9:42:61:55:01:88:e2:a6:1c:84:73:dc:12:
a3:7a:4c:f6:1c:aa:16:0d:ae:a9:58:2c:8e:bd:09:aa:89:a8:
8e:24:69:06:f5:bc:d5:6d:fd:ec:b3:a8:ee:7a:2c:59:9c:ce:
b0:e9:77:5e:eb:18:77:ea:6e:81:02:55:3f:4c:c2:2f:88:87:
b7:e8:bf:7e:a6:32:3d:00:2d:fb:07:1a:18:94:45:11:cf:ae:
00:e1:0d:28:f4:8d:80:05:35:b0:27:d6:f0:34:9c:24:02:25:
68:e6:9c:d5:92:0d:c4:1b:e8:21:9b:ff:28:18:08:9f:23:43:
76:8b:42:6d:41:52:7d:56:69:3d:41:84:1b:53:49:8c:75:92:
5a:c6:ef:ff:10:b0:ca:c7:c7:24:2b:5b:b0:b6:da:3a:5e:91:
9a:29:32:aa:ef:8b:04:19:e1:e3:55:54:a2:18:7f:5e:83:f6:
bc:fe:95:ea:ca:44:9c:4d:ad:ad:04:4e:7e:fa:12:f4:04:23:
f0:d3:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:42 2025 by rpki-client