Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: OfeTgwmVoFNlMCcqTy0f8AJjZDXPnq3pHwHzeeCmoRQ=
Subject key identifier: 70:ED:09:A6:23:77:45:7A:58:1F:3A:0D:0D:49:F8:51:1B:FD:DC:07
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019578D8FF6FBC9FAF6A0061F35180FBADBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 148C
Signing time: Sun 09 Mar 2025 03:00:41 +0000
Manifest this update: Sun 09 Mar 2025 03:00:41 +0000
Manifest next update: Mon 10 Mar 2025 03:00:41 +0000
Files and hashes: 1: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
2: p6rvh-AV0bmaoiN047zHywpJoqY.roa (hash: tR6pKJ08cGe9+fwUehgymwBvOx1rePcqoTH0w7NDkm8=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: zkF5rnyOP30lIvTXPl/6dyJmz7IjiaoomR3nq3sXIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:d8:ff:6f:bc:9f:af:6a:00:61:f3:51:80:fb:ad:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Mar 9 03:00:41 2025 GMT
Not After : Mar 10 03:00:41 2025 GMT
Subject: CN=70ed09a62377457a581f3a0d0d49f8511bfddc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:4c:6c:7a:55:f8:62:a9:d4:eb:73:b5:73:
2f:3b:b3:ca:46:81:94:15:b8:3e:65:bf:24:ed:a9:
59:c9:44:d6:85:88:ca:6f:c0:b4:36:c8:a0:86:fe:
aa:46:c2:f4:22:12:19:14:01:11:3a:5f:6a:7b:1a:
e1:c5:9b:b1:9e:89:de:c3:eb:7e:8f:ff:64:b4:e8:
19:72:1b:1d:d0:53:cc:8c:c1:b2:84:ff:98:3c:f9:
a7:39:9e:10:5e:63:44:08:ff:a4:9d:16:8a:f1:bd:
af:87:0a:bd:5e:52:03:05:2a:1d:13:77:69:87:01:
db:49:b5:6c:66:f2:7b:83:22:67:41:cb:ef:05:e7:
7a:f4:b1:9f:49:8c:44:4d:fb:ed:77:cd:34:28:5d:
c2:89:4b:ae:d4:d2:3a:7e:e1:3d:14:9a:97:ef:bc:
94:da:16:d1:ef:7f:d1:a4:ae:fa:50:5d:f1:a9:e6:
d8:e5:e6:94:49:31:64:e8:0e:18:a2:4a:42:87:77:
cf:57:e5:c6:f3:c5:e6:67:d2:20:3f:b2:0e:63:cf:
5d:61:56:bb:5f:14:86:8b:d9:8f:4f:66:2e:ac:34:
28:e2:20:ce:cc:df:ba:95:42:7f:ea:f5:ee:07:77:
13:97:4b:c0:c0:3c:86:cd:93:ab:99:cd:91:e9:c8:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:09:A6:23:77:45:7A:58:1F:3A:0D:0D:49:F8:51:1B:FD:DC:07
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b6:cf:7f:6a:df:bd:f6:94:4e:28:c7:d0:34:76:f4:c5:b4:
7c:cd:9e:9b:52:c2:36:ac:45:8e:d3:64:85:00:32:db:25:d6:
92:c6:4c:ee:41:07:d3:cf:20:32:06:83:72:b1:11:67:3d:dd:
9f:02:96:9a:59:68:3b:a7:2f:07:cd:df:7e:5e:54:ba:c1:c2:
39:73:70:b8:1a:68:e7:b7:5a:63:51:37:01:30:3e:53:db:23:
69:a4:47:26:24:37:e5:ef:fb:e7:63:82:18:9f:41:1d:33:4e:
02:8c:ca:aa:d1:63:ac:4d:02:b9:bc:c8:dd:4a:1a:48:ce:3c:
99:e2:cc:8d:99:3c:c4:8d:54:36:29:f6:e9:c9:df:22:a2:2f:
fd:9f:42:33:d4:a0:4f:88:c5:31:8b:0e:e1:4c:44:70:85:45:
08:d6:55:f9:f4:71:79:8f:e5:93:f5:2f:f1:b3:84:75:2d:8b:
d7:e7:55:8a:68:e3:6f:68:2a:58:54:78:94:d8:e0:0f:31:8d:
7d:4e:93:db:aa:2c:93:d3:69:52:b4:5c:d3:50:8e:8f:0d:1a:
07:04:90:4f:3e:e3:8e:0d:df:78:38:f7:c0:cb:59:6c:64:45:
ee:9d:c3:a9:44:92:50:cb:9c:47:bf:ad:9c:da:1f:8d:b0:32:
17:2f:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:35:20 2025 by rpki-client