Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: MXZ9B20gGp8GFbmlAiHN+ji1fNSZr9//3hAdcVDbryY=
Subject key identifier: 95:68:FD:45:E8:7E:49:3E:8C:44:02:D6:3A:E9:EF:00:31:76:01:88
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 01962AF2E641FE9C14B245ADDF7A82927A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 14ED
Signing time: Sat 12 Apr 2025 17:01:23 +0000
Manifest this update: Sat 12 Apr 2025 17:01:23 +0000
Manifest next update: Sun 13 Apr 2025 17:01:23 +0000
Files and hashes: 1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: Co+BUL6NJT/3H+kc1GFD4A8gCJepcePzji5+a2B6d2Y=)
4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f2:e6:41:fe:9c:14:b2:45:ad:df:7a:82:92:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Apr 12 17:01:23 2025 GMT
Not After : Apr 13 17:01:23 2025 GMT
Subject: CN=9568fd45e87e493e8c4402d63ae9ef0031760188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:5e:20:f9:cc:b6:3b:d3:3b:4b:0b:3c:f0:
ce:cb:65:53:1b:ea:55:b0:39:c9:8a:e9:3d:58:98:
7d:53:51:39:6f:49:7a:f0:f5:bf:39:b4:5f:2d:f0:
c6:06:01:78:4a:41:8f:15:42:c8:1d:c5:3e:05:5c:
91:f3:d2:f6:0f:2e:ed:ac:4a:6f:9f:09:8e:70:b7:
75:9c:3f:d1:34:7d:f0:43:04:3c:37:9b:fd:a8:c2:
fa:a4:2d:c5:c1:d7:25:c6:77:bb:27:76:02:4b:8f:
89:9a:7c:48:b7:b2:ff:35:67:68:cb:94:80:dc:6c:
b9:b3:b4:25:2b:45:fc:9f:48:8e:5b:4f:36:70:48:
c2:59:86:92:b1:34:75:46:61:28:6c:0e:c1:16:8a:
fe:f2:18:8d:b4:64:aa:64:b3:0a:d8:63:02:5b:1e:
50:00:c8:af:13:48:59:9c:fc:21:b2:e2:23:e9:8d:
97:14:c0:d3:ca:59:cd:83:42:fe:5f:69:6d:4f:cf:
8f:10:ec:1f:61:17:fe:f3:24:9c:74:af:f8:db:11:
6a:5f:18:26:19:4d:58:16:9a:1e:2c:1d:9b:78:f8:
e6:3a:b1:e4:3c:32:6d:25:19:fd:ae:05:5f:2e:37:
13:74:ed:11:90:92:39:c5:48:e4:80:13:5c:fa:b8:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:FD:45:E8:7E:49:3E:8C:44:02:D6:3A:E9:EF:00:31:76:01:88
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ee:83:c5:1b:69:33:c1:1d:41:5a:87:f5:76:fa:10:5d:3b:
fa:11:91:2a:3c:38:b7:cb:1e:84:d5:bf:87:25:f2:f1:38:b3:
61:7b:b3:af:03:80:2c:2f:b6:82:6c:50:09:c9:6e:bd:0a:bf:
56:f1:af:c5:2e:b8:f5:0b:6b:d0:e0:04:05:eb:02:63:0d:f1:
a8:8a:c8:0f:ee:29:03:54:44:75:64:c1:a7:da:36:41:96:0e:
b5:3d:f7:61:eb:7a:d8:e9:5f:c3:1f:e2:de:59:8a:16:9e:30:
c7:1f:b2:2c:ce:86:97:c5:23:6f:3c:1e:54:c8:f9:8c:08:3a:
ef:b8:d1:66:47:ea:60:e7:3e:b0:0b:be:b1:50:e3:28:53:cb:
15:76:15:e9:42:2d:03:80:f3:e1:bd:df:e7:b6:03:4d:90:c9:
40:25:ff:80:69:23:ce:2a:15:f4:e6:57:b0:3a:64:2a:9f:db:
29:cf:e5:b8:71:f9:5e:5c:5f:63:28:07:b4:98:be:31:9b:44:
0b:99:16:23:a1:e4:34:73:ba:62:09:b5:e2:67:93:6d:f4:b5:
21:ae:96:8a:e1:c0:18:ee:16:41:5d:6a:8d:4b:54:89:51:75:
b9:66:1e:61:2c:c6:91:22:fa:6f:28:86:08:bd:23:d8:27:19:
aa:07:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:58:01 2025 by rpki-client