Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: 72ebiCQO/AyCxTmgNDWoB4ZzpCphUhkw1LGZv4G3Eac=
Subject key identifier: 3C:01:0B:1C:C6:49:CC:25:70:80:03:52:5F:1E:E3:FC:9F:90:72:66
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019648FC8B76CEA20B59A48B8E067F00ACF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 125F
Signing time: Fri 18 Apr 2025 13:00:32 +0000
Manifest this update: Fri 18 Apr 2025 13:00:32 +0000
Manifest next update: Sat 19 Apr 2025 13:00:32 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: E8nzgu+anxyL0JIs9Qe7BaHQyNjxCgR5WUvewwmSbR4=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:8b:76:ce:a2:0b:59:a4:8b:8e:06:7f:00:ac:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Apr 18 13:00:32 2025 GMT
Not After : Apr 19 13:00:32 2025 GMT
Subject: CN=3c010b1cc649cc25708003525f1ee3fc9f907266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:99:bb:50:63:78:67:be:a1:b5:a1:f5:2d:
57:ce:30:b4:83:a5:83:36:53:40:29:c7:df:a6:be:
3b:40:bd:dc:4e:5d:3a:db:8c:df:68:8a:56:8f:81:
a7:da:2d:f8:07:11:5e:af:cd:5a:49:3a:8f:f2:01:
8a:28:b2:85:91:1b:69:6d:0c:e5:30:5c:a4:fe:bf:
c9:7c:75:03:5b:53:cb:3d:09:7b:a6:fb:84:c7:0d:
46:d6:80:29:de:87:81:36:27:6c:e3:0c:a4:a7:48:
da:a9:87:62:55:e1:4e:e3:35:a4:fd:f7:27:15:47:
2d:60:d8:e1:d3:fb:9b:4f:a5:a9:62:8a:58:c2:cf:
c5:b2:2b:0f:b3:68:8d:38:c9:b6:e7:3f:38:1b:24:
1f:ff:f6:ad:bd:b4:d6:c2:01:f3:13:b4:d0:b4:c4:
4e:3c:74:bd:22:b5:39:a7:2c:52:18:5e:93:f7:66:
77:8a:78:f2:b1:9e:3d:2c:b1:a4:16:9c:9d:08:b3:
26:0d:bb:ec:b3:f6:eb:d5:a5:6b:f0:f7:67:a2:9c:
c8:d4:ce:0b:6c:4d:6f:4a:d3:f1:71:ff:b5:f2:e0:
e4:c7:ee:c9:26:da:09:a3:39:d0:be:fa:dd:86:34:
07:df:e3:19:ff:2e:9b:ea:57:3d:cb:b2:bd:27:f7:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:01:0B:1C:C6:49:CC:25:70:80:03:52:5F:1E:E3:FC:9F:90:72:66
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:34:2f:32:f7:fa:12:d7:71:de:e4:1f:17:64:39:a5:76:bb:
81:54:93:8e:81:87:9c:73:97:df:4a:af:e7:39:ca:fc:e5:90:
ed:ba:1c:4f:87:ef:e7:11:f5:80:86:7e:f3:81:8f:a2:31:ea:
7e:16:ed:20:8a:ef:f6:66:8e:6b:c5:3f:c1:be:9b:e8:c2:df:
2b:d4:9b:1e:4e:15:e2:99:6c:32:40:16:3d:46:85:c3:6d:a6:
c9:c8:39:99:fa:4f:e0:f0:a5:cc:5f:af:1a:f2:9d:86:e2:eb:
50:13:b5:5c:f2:9e:ab:9f:bd:77:fd:2c:2b:b8:73:9a:a9:e7:
7c:be:2d:fd:b7:63:c0:70:50:b4:13:e8:1f:49:ad:d6:1d:51:
53:a5:9a:1c:de:33:e7:c0:8d:83:75:a8:87:96:07:d2:3e:26:
e9:e7:0b:08:b5:e0:51:b1:98:61:54:43:bd:2d:ed:52:d3:83:
1d:63:ff:eb:1c:bb:7f:bd:5a:97:a8:33:71:6b:82:e4:4d:26:
d5:27:f2:70:8a:6d:81:0c:f4:4f:62:44:4b:cb:4c:a8:21:90:
d9:ab:99:ef:b1:38:d7:53:10:38:2b:e0:16:8f:e9:eb:7b:12:
95:26:a1:20:d8:ea:c6:c9:ee:99:d9:1e:81:1f:f6:98:0a:6f:
7c:6e:1c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:12:59 2025 by rpki-client