Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json)
Hash identifier: 6Z076RsW+V10l/dsYXTz2WtPl9F4I/r9kgbTp8gch98=
Subject key identifier: FE:25:31:71:74:D5:CF:83:B4:94:4F:17:27:C6:07:8F:01:58:92:5E
Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94
Certificate serial: 01958C976B4857F247EE1C2E2A479CCB7A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 23:01:28 +0000
Manifest this update: Wed 12 Mar 2025 23:01:28 +0000
Manifest next update: Thu 13 Mar 2025 23:01:28 +0000
Files and hashes: 1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=)
2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: 606H1BUktHf5rs4Lay5OsBpKyQQNF6wGsxFtBajdHzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:6b:48:57:f2:47:ee:1c:2e:2a:47:9c:cb:7a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94
Validity
Not Before: Mar 12 23:01:28 2025 GMT
Not After : Mar 13 23:01:28 2025 GMT
Subject: CN=fe25317174d5cf83b4944f1727c6078f0158925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:96:a5:89:28:71:b5:7f:4a:c2:b4:6e:35:
e9:54:e3:6e:53:8b:b8:d9:ad:ff:89:cf:86:fc:06:
ea:8b:97:92:a2:68:3b:3c:5d:cb:82:b2:81:26:63:
c3:ff:6e:f1:b2:12:89:7a:af:d1:ff:85:6d:c9:3d:
3b:6f:99:c5:82:35:d0:d2:54:15:be:10:38:15:9b:
6f:f7:a9:2b:3f:e1:20:a8:7b:56:fa:b4:47:43:48:
f7:d0:c6:44:7e:45:34:a5:02:d4:46:7a:f7:31:7e:
3d:ba:98:34:68:39:18:60:ab:5f:b9:5a:8a:14:d3:
55:5d:d6:d9:93:8c:88:31:bf:36:ca:05:b5:0a:2a:
f5:f8:b7:63:3d:6a:a2:60:0b:ff:53:c2:a1:66:d4:
cc:26:0a:e1:56:9e:61:40:47:91:42:54:84:3d:db:
28:6c:33:1e:46:54:da:5a:b9:e7:b5:95:f7:70:de:
fc:fd:76:26:44:67:8f:6a:26:23:3c:de:0b:63:f8:
40:69:4d:b1:34:79:9e:34:d8:9d:12:76:5b:24:a4:
f8:46:60:dd:a9:8a:af:d1:ad:89:15:f4:0c:7f:86:
53:43:61:6e:d7:df:0d:26:d0:39:07:e0:a9:75:14:
66:9b:23:c4:b1:a9:81:0b:45:da:1a:e7:91:be:22:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:25:31:71:74:D5:CF:83:B4:94:4F:17:27:C6:07:8F:01:58:92:5E
X509v3 Authority Key Identifier:
keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:82:e7:8d:31:79:4c:cf:de:f5:7f:64:73:48:0e:de:b2:0a:
fe:60:2b:01:21:7b:95:11:f2:b3:1a:95:fd:f1:37:f0:24:1a:
bf:29:fc:0e:91:23:87:06:d5:df:dc:ca:0b:df:a3:28:11:cb:
32:7c:17:61:9e:43:05:b1:89:5c:78:d2:f8:49:ed:d4:fb:91:
9d:f3:fd:04:28:9f:06:a7:1a:45:94:20:65:9f:ba:63:07:7b:
0a:3f:ce:e3:c5:f0:5a:85:a7:b8:de:96:53:e9:78:2d:57:2c:
de:55:e2:ce:50:3e:43:f4:5d:93:7b:78:2e:67:b0:47:d6:75:
33:d3:ef:13:3f:5d:b5:f5:6f:94:84:94:3c:d1:8e:e0:9b:2d:
12:f7:9a:24:8e:20:12:25:64:26:95:9c:70:6b:b6:f0:e6:4c:
7c:e6:73:fa:ab:7e:e0:01:eb:23:ea:61:78:dd:ca:d4:bb:44:
73:2d:f7:96:49:f9:5c:76:b7:93:96:07:4c:14:23:e8:e1:db:
5f:e5:76:db:cd:85:06:67:a2:67:87:54:74:3a:96:82:d9:dc:
26:dd:df:ce:af:6a:8f:79:95:fa:51:3c:4c:c1:37:37:8e:2d:
60:70:09:e6:ff:62:3f:d1:f0:49:4c:6b:43:66:74:c7:7a:e2:
e1:28:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:30 2025 by rpki-client