Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: kUuXWinSh2ILZ+sdVWPOaraBXmyDUwmnwCYQx90UfMo=
Subject key identifier: 38:3F:F0:D3:34:74:F1:67:1A:6A:06:A2:0C:72:5D:48:51:90:19:FF
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 019676B0EF0AEF36B2FE28466A176EBA0C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0A6A
Signing time: Sun 27 Apr 2025 10:00:29 +0000
Manifest this update: Sun 27 Apr 2025 10:00:29 +0000
Manifest next update: Mon 28 Apr 2025 10:00:29 +0000
Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=)
2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: FfVKVS8hm8KKWYAU4DiSUXswzp8nTjzkwjTZ+m4xU5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:ef:0a:ef:36:b2:fe:28:46:6a:17:6e:ba:0c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Apr 27 10:00:29 2025 GMT
Not After : Apr 28 10:00:29 2025 GMT
Subject: CN=383ff0d33474f1671a6a06a20c725d48519019ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:1a:f1:ce:cc:91:ba:c1:30:05:fd:0e:39:
62:a5:fa:48:31:5b:1a:e6:de:2d:8e:4e:d1:c3:65:
e1:61:8b:44:0c:97:f0:38:2a:29:3c:89:f4:ff:4d:
e1:1a:a9:01:2b:3a:ec:57:44:be:06:03:05:ee:7b:
59:ab:bd:ae:33:e1:54:42:72:be:80:e0:0c:e9:c2:
9f:49:82:2b:ba:c5:54:a8:31:e3:a2:7e:29:ac:87:
c0:11:31:27:06:cd:91:58:e8:61:29:8b:b1:8f:7e:
55:db:b6:a6:f1:a3:ee:12:ff:61:76:54:14:a5:f0:
ca:9f:25:05:0f:b3:14:61:e2:f9:61:00:31:c4:28:
48:f4:b9:21:8a:fa:a8:fc:73:69:f5:44:83:d9:79:
bf:7b:71:ae:2f:68:fb:3d:ae:53:e9:7a:3d:16:55:
83:1c:9d:7a:7a:a2:4a:c2:0e:ed:4c:bf:79:52:f6:
3b:68:0a:d9:9c:72:c5:6c:69:84:69:97:58:f9:b6:
47:01:5c:58:0a:53:67:0b:2e:45:6f:bb:b0:05:83:
b1:c7:0b:a5:13:6d:a1:1d:15:72:ed:98:98:34:84:
3a:c1:5d:8f:9a:c6:73:7a:f1:11:f1:e2:a8:3b:a0:
b5:89:f2:53:12:32:26:85:ac:b0:46:0e:2b:4b:71:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3F:F0:D3:34:74:F1:67:1A:6A:06:A2:0C:72:5D:48:51:90:19:FF
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b4:e0:13:50:d5:26:0e:82:54:11:e2:fc:e3:e6:8a:59:22:
02:68:fe:22:06:57:40:7d:41:30:71:a0:b4:30:7b:82:d0:f3:
83:88:9e:28:dc:97:45:ae:79:3c:1c:c6:d4:0d:50:f4:38:2c:
3b:6c:6b:b1:22:55:e5:9d:b7:00:c0:67:34:2d:bc:2e:78:c2:
2e:e9:89:4b:ab:f3:fc:5b:a2:a1:39:b7:6e:ba:7f:d6:ff:39:
e1:bd:1e:fe:dc:84:09:ea:c2:7c:00:16:42:34:14:62:26:d0:
e7:68:9c:a0:93:b9:4a:49:1a:4d:d7:f2:c5:87:f7:5c:b0:6d:
25:ef:94:a7:dc:1a:a6:57:53:8c:4d:36:c6:2d:fc:8b:c4:66:
ba:86:a0:f1:95:1a:c8:93:24:59:74:6e:14:6f:36:76:bc:65:
61:a3:2e:fb:58:fd:1f:fa:22:67:4e:2b:4d:69:70:54:b5:1d:
4b:c2:3c:21:6a:a8:2a:e4:94:55:85:a4:41:eb:55:91:a0:60:
e6:7f:b9:a3:96:15:66:a3:6b:98:7b:85:d1:39:8b:27:32:8c:
60:2d:b5:9d:0f:6d:a4:b3:a9:e0:b8:e9:a2:4b:a1:eb:e5:34:
cb:28:ca:6b:27:64:ee:2c:fb:4b:1d:67:0c:ae:69:fd:b2:0e:
02:a1:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:04 2025 by rpki-client