Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier: oRxDGx4sVUd0I1VfNg2pizUpHXqqLOwsAGchdBWC/RI=
Subject key identifier: AA:92:DA:FB:78:2A:E5:42:E0:52:0D:C2:2E:C8:25:D3:78:5F:3A:72
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 019650484A02101672C55B683DBDD8755253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number: 14FF
Signing time: Sat 19 Apr 2025 23:00:36 +0000
Manifest this update: Sat 19 Apr 2025 23:00:36 +0000
Manifest next update: Sun 20 Apr 2025 23:00:36 +0000
Files and hashes: 1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=)
2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: lMmMqnXFUyYZsj9Lc/NzArRAjcuTFcwEdiYO6DAM+2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:4a:02:10:16:72:c5:5b:68:3d:bd:d8:75:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: Apr 19 23:00:36 2025 GMT
Not After : Apr 20 23:00:36 2025 GMT
Subject: CN=aa92dafb782ae542e0520dc22ec825d3785f3a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:a0:2e:f4:dc:3b:25:64:ce:c7:d4:dd:8e:
25:54:98:41:39:75:ab:83:17:9e:4d:83:94:6b:02:
a1:60:8a:62:44:1b:88:05:da:7f:ee:ab:3d:bc:44:
54:34:5b:39:d7:49:8f:ba:12:b7:bf:11:ef:fb:0e:
c3:f8:da:af:4e:96:51:0f:ea:9b:99:b8:5e:04:91:
e1:d9:b7:1d:39:fc:4c:5a:59:4c:f4:fc:35:51:77:
98:e0:3b:64:df:ae:36:61:33:2b:37:f8:80:c4:10:
99:e3:12:14:ba:03:d8:d5:c6:90:f0:e8:40:5c:5b:
36:c1:b5:db:70:34:31:6f:24:0b:0f:14:17:5e:f2:
eb:e9:f2:c2:24:b3:65:d4:3b:1d:30:e2:89:9a:86:
ce:ae:92:66:37:5e:7b:ec:0a:44:f2:68:c4:b2:0d:
aa:e5:cd:6b:07:fa:47:db:a1:9b:82:f1:3a:6e:6f:
5b:c7:ef:11:0b:1e:13:0d:3b:b7:e2:2c:59:7d:db:
b8:f8:24:60:aa:06:2d:69:aa:1c:26:66:49:e2:ef:
31:bc:ee:64:4c:06:4e:4b:21:75:08:24:21:a6:66:
bc:a4:8d:bd:cc:f4:9a:59:93:f9:d0:6b:eb:3d:2d:
ea:38:3d:ca:da:ce:f2:17:3b:27:c4:c8:0b:bc:30:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:92:DA:FB:78:2A:E5:42:E0:52:0D:C2:2E:C8:25:D3:78:5F:3A:72
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c0:ff:c7:10:d6:c6:57:18:b4:52:c1:4f:fc:98:30:c5:8c:
de:36:54:81:0c:79:ab:80:ad:c0:b9:f3:36:47:01:b7:02:5d:
fd:d0:3e:85:33:01:58:98:6b:1e:d4:59:ff:b0:3e:8e:f8:cb:
bb:8f:89:f2:8f:a7:a7:5e:01:39:80:61:a3:95:1e:30:43:f8:
3e:94:86:7a:57:df:6d:18:12:ec:8d:15:99:cc:1f:b2:c0:6b:
72:ca:71:53:93:8b:3b:41:f6:d4:e8:1c:06:58:91:e9:2f:1e:
64:70:1a:f3:f8:74:0f:8d:d9:a5:12:3a:18:a3:98:cf:5a:27:
1b:ec:d0:7d:a4:2d:c6:03:87:0c:57:12:bf:12:c2:96:66:52:
19:77:9b:b0:96:db:39:d0:0b:8a:80:08:33:58:17:e3:ac:91:
74:52:b5:50:d2:09:97:28:0e:09:ae:e8:1b:0d:f8:87:1c:be:
fe:8a:09:f4:95:09:ff:33:59:e6:c6:aa:00:89:95:01:e2:b5:
75:08:57:bf:78:dd:56:81:2a:17:1a:ff:ff:cb:f9:bd:a9:82:
27:1f:9a:a4:3b:f2:fd:25:6d:97:d1:40:f4:8a:aa:dc:ab:4e:
20:3b:90:55:85:13:42:02:3e:5a:60:95:e8:97:55:a6:a9:b7:
cf:ed:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:20 2025 by rpki-client