Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: HZaaa2KLys5JAHzSZG1TPa5/L/PpJI0jyVvM6MekV/0=
Subject key identifier: EB:3C:2B:31:A6:85:BB:B3:96:C5:B2:75:77:98:7B:A6:36:10:40:66
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 01964BC696D775704391DF1A300498E6AD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 0F4A
Signing time: Sat 19 Apr 2025 02:00:27 +0000
Manifest this update: Sat 19 Apr 2025 02:00:27 +0000
Manifest next update: Sun 20 Apr 2025 02:00:27 +0000
Files and hashes: 1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: KAjSlQpM95T4VnIGGN4gdhDDGgGqxwqe7VMa3X+pG/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:96:d7:75:70:43:91:df:1a:30:04:98:e6:ad:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Apr 19 02:00:27 2025 GMT
Not After : Apr 20 02:00:27 2025 GMT
Subject: CN=eb3c2b31a685bbb396c5b27577987ba636104066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:f2:cb:4b:8e:ce:bc:5b:ec:72:94:0c:1a:
d6:ab:1a:96:2d:35:b3:8c:c5:42:a3:f9:c6:f3:9b:
68:4e:3e:df:77:57:7e:dc:e7:ab:9f:3e:f9:b8:5e:
bd:48:c1:c4:95:53:4d:4c:5b:93:9e:ff:82:80:7f:
0c:ed:a6:8e:63:2f:e2:17:3e:58:5f:bf:48:11:13:
68:94:10:24:09:53:e5:58:11:33:4a:97:25:34:79:
98:5a:9d:b1:9a:dc:27:f5:07:af:ae:4d:81:27:b2:
5c:69:8d:92:8d:aa:b5:3a:82:6f:ff:ed:3e:b5:02:
ea:07:43:b6:82:ce:6d:19:29:9b:09:88:c1:a2:a2:
ce:ef:16:32:a2:9e:42:03:4a:1e:26:99:c3:14:0e:
ed:bf:d2:ce:06:0c:46:c9:ed:35:be:ba:c2:cc:44:
ea:72:66:f7:2d:77:05:7c:3a:0c:8e:d7:47:1c:a7:
77:d8:f8:1e:ab:93:ca:a9:c7:c5:52:59:df:26:97:
2d:8e:4e:8a:1b:43:38:06:c4:f9:f4:4e:15:b0:e9:
c7:c8:12:6f:bd:86:87:6d:e0:8e:0a:58:71:04:d3:
27:4d:52:d7:3c:6a:c4:50:1b:44:c3:c3:b6:af:0a:
2e:ac:e6:3b:d0:e5:8c:1b:2d:ca:a0:60:c7:56:d8:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3C:2B:31:A6:85:BB:B3:96:C5:B2:75:77:98:7B:A6:36:10:40:66
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a8:53:ee:37:d0:91:c2:8c:a0:16:2d:b3:e9:2e:32:d5:82:
86:de:a2:27:a7:b8:be:19:f7:4b:be:0b:a9:83:4f:76:97:ee:
ef:9f:ff:a9:57:b8:fe:12:04:dd:f8:a5:1c:e6:45:d1:23:25:
74:62:b1:f9:bc:e3:7d:86:e7:5d:db:d9:a1:c0:42:67:27:87:
d8:40:af:33:c5:8c:57:14:0e:cf:26:21:03:55:87:05:40:18:
79:3d:af:74:52:26:72:26:a2:5f:45:59:ce:f0:8a:69:59:f9:
24:6a:83:ae:5a:26:f7:82:14:25:8c:51:d9:39:ae:48:3e:1d:
d9:c9:1c:a9:13:09:5f:d6:da:e4:69:4d:d1:4c:6d:1d:ec:45:
f2:dd:79:95:ea:11:59:55:7a:e8:ea:54:14:b6:86:6f:cf:b4:
a7:1c:d4:35:7a:2b:13:f5:d0:89:d5:63:5c:24:d3:f0:8b:50:
c7:4b:91:f0:b5:a4:6f:d7:84:01:61:49:98:2f:d7:49:ae:6f:
27:8b:ff:11:31:0a:62:40:26:c4:28:06:bd:ea:a7:86:39:16:
a1:b5:79:23:9e:87:88:1e:57:fd:b1:71:29:e2:46:e1:8a:e5:
e4:aa:9b:2c:bd:69:51:65:e3:98:2e:4c:ab:f9:b6:fd:02:9e:
8b:f1:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:21:48 2025 by rpki-client