Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: d/NRfr2EeAEe+Sw+bcAvK2mm7zmoi/krXiDCc6A4WYE=
Subject key identifier: F1:C7:2E:B5:6A:B1:B7:71:7F:DB:7C:68:34:5E:DA:C5:FE:4A:F6:07
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 01965EE092F2C3B0ECEE5AEB5456ED3CA91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0B83
Signing time: Tue 22 Apr 2025 19:01:37 +0000
Manifest this update: Tue 22 Apr 2025 19:01:37 +0000
Manifest next update: Wed 23 Apr 2025 19:01:37 +0000
Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=)
2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: zqyqPRD5J4JD4QhkKhmLVuus0YokF05h/4hTzNQrLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:e0:92:f2:c3:b0:ec:ee:5a:eb:54:56:ed:3c:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Apr 22 19:01:37 2025 GMT
Not After : Apr 23 19:01:37 2025 GMT
Subject: CN=f1c72eb56ab1b7717fdb7c68345edac5fe4af607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:3d:26:64:c4:7d:76:83:ba:86:88:89:66:
07:73:5e:6b:a0:ca:48:0b:19:8e:b4:47:62:20:7b:
f6:94:7e:80:de:91:4e:a2:35:83:c0:51:ed:86:47:
4d:81:2a:55:a6:87:b5:5b:3a:3b:41:4e:95:b4:59:
d6:24:1b:33:07:b9:19:bc:a9:29:40:23:ae:3e:ff:
09:19:68:8e:a7:76:be:5c:02:61:3d:85:51:d1:78:
d6:dd:73:ed:4d:c4:12:aa:4f:8d:87:8c:d0:40:b0:
12:08:70:64:07:fc:c3:58:c5:dc:8d:bb:f4:5a:f5:
9e:4c:4c:4b:84:3b:92:8c:38:32:17:72:c7:95:ec:
73:bc:f0:d8:5d:c2:8e:09:04:95:e1:98:d9:45:da:
62:d8:f3:eb:32:5c:89:98:5b:76:ba:ca:c7:8e:af:
63:75:fa:0c:50:cc:dd:d4:71:91:c8:08:c2:a9:4a:
d1:33:5c:61:b0:11:95:98:98:c1:9e:33:d7:8c:f9:
58:3a:6e:de:5c:46:46:46:d1:48:da:6d:3e:e9:f7:
ca:5c:b2:8d:35:4f:fe:45:d1:44:7d:b0:8c:70:cd:
32:27:b2:f9:0c:58:7a:81:bd:c6:5f:36:de:33:2c:
70:e7:d6:2f:6e:78:a2:0c:c5:17:63:8a:a6:90:c4:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C7:2E:B5:6A:B1:B7:71:7F:DB:7C:68:34:5E:DA:C5:FE:4A:F6:07
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fc:69:e1:e9:2d:40:40:6c:59:1f:72:6f:8b:bc:c9:e9:fa:
ae:24:f6:e3:6b:8f:91:e8:c3:60:3b:a5:8b:a2:ed:3d:c4:bb:
29:43:8b:a9:c7:3b:77:f2:a1:10:00:b0:98:3c:df:ae:35:6d:
5c:0a:94:07:e9:59:4c:cc:5e:35:b9:ba:1c:30:1b:ad:9b:74:
29:d3:31:2a:7d:29:d6:ed:db:cf:a0:6f:c0:78:cb:c8:70:4b:
bc:3d:0a:ed:90:72:57:1b:cf:3e:98:3e:b8:4b:2e:72:32:61:
61:4d:ff:85:02:70:23:09:5a:62:2d:8b:ee:ff:aa:21:93:e6:
07:99:09:ac:ab:ca:3d:71:bb:ff:fd:08:cb:14:7d:e2:7c:88:
e0:87:5c:b2:97:c4:35:bc:bc:de:f2:e1:42:6b:f3:7c:b5:74:
87:b3:9a:df:59:39:b4:88:b3:a3:a8:80:ec:c3:bd:5f:d6:a7:
ca:d9:4c:b2:ef:5b:7f:7e:b9:1e:f6:bd:10:a0:12:1c:6e:7f:
82:6a:16:df:09:2b:80:b1:98:71:fa:34:eb:0b:1e:14:fd:6b:
5d:8c:72:a8:2f:10:3e:fe:bf:15:81:12:a2:d8:01:4e:d5:24:
c4:53:3b:ac:3d:35:f3:63:90:cc:da:21:e7:a0:e5:cf:4d:11:
b4:0f:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:31:54 2025 by rpki-client