Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier: 3bcakG80M5qCoP4n5FDZCWkRH3K80i4DY4ranV/DrHc=
Subject key identifier: 67:6E:C8:7C:1B:46:AA:9D:5C:8F:FC:DF:61:B9:A6:59:2E:81:D7:21
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 019650482FB862B0DD58D52284738DE44194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 23:00:30 +0000
Manifest this update: Sat 19 Apr 2025 23:00:30 +0000
Manifest next update: Sun 20 Apr 2025 23:00:30 +0000
Files and hashes: 1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
2: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: IqWglYozf8igGII9QPK2mt4YWSeA4oCFLR6S2zhY3+I=)
3: vIkAtPh5Tl2_hiya1eEEhTQV1PM.roa (hash: Z8ir9Gg8yuo48v4Oy7SXMnM5WXoZ5P1PfUr/9PmcanU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:2f:b8:62:b0:dd:58:d5:22:84:73:8d:e4:41:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Apr 19 23:00:30 2025 GMT
Not After : Apr 20 23:00:30 2025 GMT
Subject: CN=676ec87c1b46aa9d5c8ffcdf61b9a6592e81d721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:72:82:32:38:ef:36:34:40:98:6f:a5:91:
5f:f5:7f:9f:2c:7c:0a:2f:a2:a3:b7:f1:30:53:80:
d6:53:2f:76:59:d8:96:2b:e6:87:fc:25:f1:d4:94:
f8:96:c8:9f:65:64:b8:f0:1a:69:19:9a:eb:60:b4:
70:09:09:91:2d:b1:ff:34:8e:21:46:42:54:1d:ba:
dd:fa:b5:86:12:35:6a:77:f5:a0:86:5e:a6:92:01:
1a:20:91:70:f9:95:27:f7:86:73:d5:2c:a1:ee:fc:
7b:9f:d3:50:47:cd:8b:94:91:43:44:32:fd:76:49:
67:4a:e0:2b:35:16:f4:9c:e1:8a:15:c5:1c:f1:09:
a4:c6:0c:33:4c:b0:3b:e4:90:64:fa:96:3e:68:6e:
9b:1f:db:62:0a:61:1b:1e:6c:e7:55:74:10:bf:29:
eb:11:14:cf:76:72:75:5f:9a:47:55:74:12:3b:b3:
ab:3e:00:10:6f:19:97:48:4b:e2:b1:e3:65:b7:f7:
d5:e1:e5:89:6a:0b:a9:93:62:79:d8:45:98:e7:cd:
74:94:a1:e0:14:19:cf:f8:e8:ea:f3:b1:8b:32:8d:
30:2d:2a:18:ed:75:a6:51:e2:ee:f2:3f:a6:52:7f:
82:46:69:18:4e:cb:fe:41:f3:8b:db:9f:90:8c:5d:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:C8:7C:1B:46:AA:9D:5C:8F:FC:DF:61:B9:A6:59:2E:81:D7:21
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f7:85:3c:30:c0:42:4c:3e:43:01:14:05:f7:c6:cf:41:97:
f5:16:18:17:d7:dd:2e:d7:43:8d:ae:a1:47:09:80:ae:81:16:
12:42:f8:5d:c6:e2:58:dd:ee:05:a4:07:00:97:3e:33:94:a4:
c3:b9:52:22:53:61:01:9d:13:79:ec:4d:ba:61:82:fb:fc:55:
89:ea:fe:e4:51:05:15:fa:eb:d2:43:fd:9b:bd:d0:93:c9:6a:
84:a6:04:a0:fb:21:98:b7:63:12:d0:d8:d0:6f:4d:67:2b:db:
6f:07:b8:a5:1e:b0:b2:e5:78:d7:06:26:cf:66:86:ce:f3:fd:
69:31:67:be:02:5e:a0:19:7a:64:e3:f4:43:02:d6:78:e0:76:
08:71:28:ad:b6:96:a6:11:4c:9e:84:25:56:14:8a:c3:0c:fc:
f5:95:ac:53:a5:19:31:5e:cc:8b:34:f7:78:1b:26:5b:e4:c2:
bf:8e:b9:d8:0d:c6:a1:76:5b:41:23:b4:32:59:38:6d:e8:d7:
c4:5f:2f:15:81:85:1f:4a:13:2e:5c:57:8a:9a:21:ed:13:5e:
70:fa:f4:c8:a9:01:a0:d4:15:b6:82:7b:3b:c8:16:86:4a:6e:
f7:e6:f1:ff:82:1e:92:01:e2:ca:bc:51:cf:cf:8d:b6:85:9c:
f9:61:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:04:02 2025 by rpki-client