Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: 3YMfPOguKtXeP9Anvm3LiBuGOTwEhnxyYP8+0wD5fb8=
Subject key identifier: 85:DD:3B:73:FB:1F:02:AC:11:FD:7A:02:68:CD:1D:99:D4:A4:09:5C
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 0196771E8A8894FDF1188FEAD4B705C08642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: F1
Signing time: Sun 27 Apr 2025 12:00:12 +0000
Manifest this update: Sun 27 Apr 2025 12:00:12 +0000
Manifest next update: Mon 28 Apr 2025 12:00:12 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: DWayd09A2cthrkx5Z4QqBDYXUamXTjVxJvcYrcseJ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:8a:88:94:fd:f1:18:8f:ea:d4:b7:05:c0:86:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Apr 27 12:00:12 2025 GMT
Not After : Apr 28 12:00:12 2025 GMT
Subject: CN=85dd3b73fb1f02ac11fd7a0268cd1d99d4a4095c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:5c:e3:ae:95:4c:40:aa:a1:70:52:a9:da:
18:fe:a2:6a:86:ae:24:10:d6:d5:fb:b2:23:3e:68:
9e:ec:64:a9:96:29:21:14:01:89:f3:49:96:eb:ed:
b8:9e:bc:51:1e:3c:15:1b:20:30:5a:16:72:fb:72:
b7:b5:9b:08:4b:5f:dc:a1:c1:a3:2e:94:b9:eb:5c:
f0:ed:7d:3b:37:8e:6f:c4:57:18:55:74:ee:d3:8a:
b3:56:0a:cf:ca:65:2f:80:eb:47:07:58:9d:ce:bd:
5d:09:fa:ed:14:62:77:38:54:ad:5f:94:a4:5f:a2:
9a:7f:e8:7e:77:87:56:21:6d:70:8c:09:05:be:ef:
82:76:c4:89:2d:96:64:6f:06:e0:7e:20:44:aa:6a:
ec:db:ef:55:bb:ca:3f:81:f4:c0:14:65:2d:57:c3:
72:07:60:6d:89:3d:cf:9b:31:05:b5:c1:d2:a1:bf:
ba:58:78:be:a5:01:37:13:1e:d3:33:3d:bd:2b:2b:
44:d1:86:cf:e3:34:0f:2d:fb:fe:bf:50:89:5d:97:
91:c5:18:71:ad:b3:82:ba:35:89:62:54:8a:e6:cf:
f6:db:62:e4:82:f4:bd:de:57:07:3f:c4:b5:8e:9a:
c1:e4:ad:b3:84:6d:8f:24:b5:69:eb:ca:ee:3c:3b:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DD:3B:73:FB:1F:02:AC:11:FD:7A:02:68:CD:1D:99:D4:A4:09:5C
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:07:18:85:04:20:9b:fd:0e:12:e2:4c:b4:12:3b:b5:56:86:
d2:c6:cc:fe:b4:dc:8b:00:c1:09:ee:aa:3e:cf:ea:cb:21:0b:
3f:6b:e1:86:2f:ef:36:13:09:2a:34:ba:0e:84:46:4c:be:0b:
34:32:59:5a:b8:4b:c8:fb:c9:69:e7:77:71:59:ef:59:32:83:
62:4b:12:c6:a8:c7:77:4b:24:2f:a2:2f:56:50:c2:9c:56:4f:
46:b2:91:81:8b:31:7a:48:ac:e3:8c:2d:28:74:da:3c:29:32:
e7:03:bf:99:bb:f0:10:11:57:34:8d:9d:4c:50:df:5a:2a:b3:
e1:93:5b:f4:39:b7:35:e6:f1:18:d2:a0:8e:d0:9e:0d:af:39:
3f:5a:da:b9:73:f2:a6:4a:f0:1f:3c:7d:1b:85:02:40:0a:2b:
6f:bd:95:e4:64:ad:97:f8:5f:e6:44:b2:c9:11:35:3e:ed:cf:
46:a8:19:8b:b5:58:33:f7:10:8b:fc:63:ca:ad:fe:d2:e5:7e:
ef:ab:70:93:66:dc:e5:98:42:15:b1:cc:0a:67:f1:43:72:86:
10:8c:98:f4:83:fc:30:82:5f:14:13:bb:d4:20:0f:09:ba:b9:
2c:e7:cc:84:93:ab:e3:4b:d8:9e:a6:41:23:73:3a:38:c7:0e:
9e:d0:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:29:21 2025 by rpki-client