Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: CFkR3Cl7Y4CntgttP2AiuiOoYq1o5fIOpxW+MGyq0n8=
Subject key identifier: E1:7A:9A:B2:8B:D9:E0:40:0A:36:50:87:96:6C:D8:58:3F:DC:E2:74
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 01964EC76FB38A50B116F71C8C01CB2348C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 16:00:15 +0000
Manifest this update: Sat 19 Apr 2025 16:00:15 +0000
Manifest next update: Sun 20 Apr 2025 16:00:15 +0000
Files and hashes: 1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: 0Cq3n61vcongwtr8dltQgy974aj2sX3rcsu2Y0BNx40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:6f:b3:8a:50:b1:16:f7:1c:8c:01:cb:23:48:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Apr 19 16:00:15 2025 GMT
Not After : Apr 20 16:00:15 2025 GMT
Subject: CN=e17a9ab28bd9e0400a365087966cd8583fdce274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:1c:fc:19:60:9c:4a:cb:3c:05:9a:35:33:
18:ee:10:50:48:da:d7:69:cd:55:a5:24:e3:33:5b:
73:a9:02:a8:98:20:e2:80:a7:ec:67:e2:2a:c6:f3:
e2:3b:47:f2:9c:fb:3b:4e:cf:e8:1a:90:c1:84:78:
a4:a6:11:eb:2b:0b:bb:d8:38:a5:e3:bc:d5:48:37:
01:93:29:77:5c:b3:e2:14:03:41:3b:77:17:da:0f:
43:02:1d:27:73:2a:99:c4:20:26:0d:9c:dd:5f:95:
56:f5:9e:fe:18:48:d4:ed:05:63:c7:8a:c2:b6:27:
66:5c:22:dc:0b:1d:c6:bc:db:a7:b6:26:19:af:7a:
9c:43:1d:5d:ad:09:70:8a:0c:7b:0a:93:31:d6:bf:
04:a1:94:57:a5:01:ed:5b:b2:1d:ba:0a:7a:0a:f0:
69:67:a6:51:c8:e9:19:75:41:b8:9e:f4:92:74:1f:
8f:b0:5d:ea:58:32:bf:43:ac:fe:b4:db:36:66:63:
05:2d:a4:93:46:27:9e:2a:a7:1a:bb:4b:12:99:16:
3a:d3:5d:b1:aa:92:8d:1a:34:a4:19:25:10:48:90:
1d:87:f7:d2:cf:db:2e:60:20:bd:8e:cc:d1:a3:9d:
5f:76:c8:e8:05:ee:87:99:ce:b2:8d:04:d1:7d:40:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:9A:B2:8B:D9:E0:40:0A:36:50:87:96:6C:D8:58:3F:DC:E2:74
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fa:d4:bb:c3:f3:0c:5a:ad:fd:ad:b6:62:39:42:ac:f0:b4:
95:82:09:18:f5:0c:59:69:61:58:23:1d:86:cd:38:b5:95:b2:
61:b4:6c:00:c9:e4:2b:f6:4b:91:03:ed:98:92:f0:27:a5:a6:
62:a4:38:33:24:44:9f:5c:9a:ca:c3:89:ab:21:c6:50:2f:2a:
bd:d2:ab:45:c9:81:ed:bd:30:f5:08:d5:e9:56:9a:b8:32:12:
b2:b8:46:47:dc:3f:29:64:c5:2b:ee:74:91:6b:02:9b:98:dc:
12:e5:38:db:2c:fe:79:2b:c4:c5:8f:95:d7:9a:33:3c:88:46:
ba:5c:c2:5e:9d:74:15:6b:39:c6:7b:cc:28:cb:76:eb:f0:e8:
b9:36:89:65:c8:99:92:d4:99:4e:32:77:d6:da:f3:84:a4:d3:
ce:69:45:34:8c:13:08:13:69:6a:03:b7:8d:2c:51:65:55:26:
69:7c:53:0a:0a:2f:4a:28:0b:c5:60:c5:8f:a1:ff:4a:0b:7d:
31:71:d2:8e:c0:7f:3d:dc:33:b4:b1:fe:70:5d:62:1c:14:a6:
7a:5c:ec:b9:ba:00:af:41:cb:0a:66:63:7f:78:46:72:2d:7a:
10:62:f8:14:fe:b7:11:6c:38:39:84:14:4e:a2:63:5b:54:48:
ed:ae:e1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:28 2025 by rpki-client