Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier: 91lW7BxKjCRizGBkRoZlObm0OMePfTQ0e6ILyDObcW0=
Subject key identifier: 1E:F8:AD:DC:33:59:88:7D:68:82:A7:22:EB:BD:A9:45:7F:7E:B7:2E
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial: 0196526D79713B4A73073316FB92C3B86AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number: 039F
Signing time: Sun 20 Apr 2025 09:00:28 +0000
Manifest this update: Sun 20 Apr 2025 09:00:28 +0000
Manifest next update: Mon 21 Apr 2025 09:00:28 +0000
Files and hashes: 1: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (hash: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=)
2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: DhpPknjBXjyUmSyaiAQ4EkW+0T0cXHtl7I9xKNrkAPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:79:71:3b:4a:73:07:33:16:fb:92:c3:b8:6a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Validity
Not Before: Apr 20 09:00:28 2025 GMT
Not After : Apr 21 09:00:28 2025 GMT
Subject: CN=1ef8addc3359887d6882a722ebbda9457f7eb72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:3f:be:22:18:f5:2b:3b:fb:8d:b7:b5:92:
cb:f5:83:f4:38:a6:f9:b6:db:26:7c:69:2f:78:2b:
d3:a9:9e:70:41:15:ea:25:bb:05:39:71:0c:24:32:
40:7f:08:43:20:ae:04:80:4e:72:38:05:f0:8c:f6:
36:03:d1:82:26:b3:7a:65:48:ba:cb:e7:4d:42:43:
0a:62:41:6c:de:a7:8f:c6:04:2f:2b:20:91:75:5e:
07:2d:65:27:57:2d:66:6f:37:d4:fa:38:9f:34:c4:
1b:32:2d:3c:6a:db:71:30:5b:ea:7b:e7:a3:ca:12:
4f:62:70:f7:04:98:9d:5b:c9:c0:fd:59:3c:75:ec:
81:17:8d:f0:e7:38:62:f0:4a:5a:1b:39:64:a5:be:
9e:42:b9:da:41:8e:54:3a:06:6a:c4:e1:43:c0:fb:
2a:de:ab:e4:8c:2f:5d:cf:70:10:95:3c:38:1a:75:
b6:62:75:05:79:61:a7:b6:14:4d:fe:74:6b:bc:ca:
86:de:bc:f1:21:85:e0:8f:b8:b2:26:83:cb:02:0f:
b5:a1:da:46:33:e5:fb:cf:77:b8:1d:f7:8d:ba:af:
3e:d8:50:4c:41:4d:9a:09:8a:db:fc:cf:c7:0b:15:
33:bb:e3:1d:06:15:21:df:85:2f:df:ad:34:f1:02:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F8:AD:DC:33:59:88:7D:68:82:A7:22:EB:BD:A9:45:7F:7E:B7:2E
X509v3 Authority Key Identifier:
keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8f:e5:fd:ea:90:e0:f1:a3:8e:0a:a9:cf:b7:04:48:75:26:
2c:58:ef:41:a5:27:6e:a9:d4:d0:5c:93:b9:d3:08:83:b5:13:
ed:ed:50:08:f1:99:9c:42:59:36:46:da:ba:66:50:df:6d:84:
ab:12:96:f2:7e:0e:0b:ab:08:c4:c8:ef:c7:94:a3:52:81:62:
4b:30:3d:e2:61:93:0a:20:fc:c7:91:c2:4f:8e:0a:8a:94:12:
e7:f6:39:be:dd:c8:ac:36:0c:47:c8:ef:69:9e:44:f9:3e:22:
96:3d:15:e5:3a:9d:15:8e:04:61:88:6e:e3:5e:7d:f2:0a:23:
db:f5:e2:65:d6:50:9a:e2:7e:dd:95:dd:94:0d:6b:64:f9:ba:
45:3e:9a:a2:f8:97:09:a6:45:54:9c:87:83:19:37:a7:11:d8:
84:7f:9b:c7:46:26:39:0a:af:0e:ae:b9:79:ee:9e:74:5b:06:
0e:49:5b:a3:17:09:88:7c:90:d2:f4:b3:e2:a8:8b:b0:e5:63:
11:c0:11:ed:24:2c:44:de:e5:b2:46:08:5b:ea:6c:fb:fc:a0:
6e:1c:6e:15:18:a8:48:d0:44:9d:54:c8:a0:31:a8:99:5d:3c:
fd:42:9a:b9:34:ca:b1:fb:07:e7:00:17:45:3f:f1:f3:18:63:
41:20:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:31 2025 by rpki-client