Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File: TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier: l8ZXUYFuqMhBsk6N3nWsIEAN/X0uLk/70UNDlrzFMM8=
Subject key identifier: 69:02:E4:5C:CA:65:7C:FC:22:79:C2:A9:ED:B2:BC:12:9E:E1:F4:BB
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer: /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial: 019678D6B2D7707B7601401E504FA2CB07A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number: 125B
Signing time: Sun 27 Apr 2025 20:00:58 +0000
Manifest this update: Sun 27 Apr 2025 20:00:58 +0000
Manifest next update: Mon 28 Apr 2025 20:00:58 +0000
Files and hashes: 1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: uX9BU7kMVNVIZD2lcvIYm4oRmZGG+t0i5fnjGKkLz+4=)
2: j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa (hash: mypsPRsnwnV3Yo/ZoSy7EsoVz4ps6Bh9fIm4sESstXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:b2:d7:70:7b:76:01:40:1e:50:4f:a2:cb:07:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Validity
Not Before: Apr 27 20:00:58 2025 GMT
Not After : Apr 28 20:00:58 2025 GMT
Subject: CN=6902e45cca657cfc2279c2a9edb2bc129ee1f4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:24:9e:4f:66:b4:f6:e6:51:a8:f2:fe:68:
e5:74:55:62:f8:68:2c:22:db:96:4b:a8:da:6a:39:
60:b6:50:52:4b:ea:ab:53:68:b5:44:31:b9:ba:20:
52:20:3a:bb:06:56:80:d0:a2:54:49:24:ff:31:c5:
61:39:50:4e:5c:6e:d3:5a:1c:a8:7e:7b:5f:19:27:
76:d7:90:4c:df:90:75:e7:0a:bc:81:0c:b0:24:37:
62:9d:62:76:12:69:e5:87:db:06:dd:f7:51:d5:6e:
6a:76:0f:5d:bc:97:bd:8f:63:fb:20:80:b6:73:8a:
24:cd:f6:98:ff:39:c3:61:87:88:23:cc:df:af:9f:
9b:5b:da:40:0a:92:0c:a6:84:b0:31:db:45:59:f5:
73:27:45:39:9a:33:db:49:fe:58:20:84:4f:38:5b:
57:3a:66:db:a6:b3:47:ba:61:85:6e:4d:1b:93:9f:
e6:d1:51:a2:57:2a:a1:4f:10:fa:e0:ab:37:87:29:
5e:65:c2:d5:ff:cc:54:51:52:38:8a:f5:d3:6c:ec:
0e:35:47:f8:c6:40:3d:8f:e3:56:72:6f:10:1c:9d:
96:bc:85:95:9a:00:76:2d:39:df:ff:d5:c9:ab:54:
bc:7e:fc:2b:aa:57:70:c1:24:f3:2e:45:aa:6f:e7:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:02:E4:5C:CA:65:7C:FC:22:79:C2:A9:ED:B2:BC:12:9E:E1:F4:BB
X509v3 Authority Key Identifier:
keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9c:62:63:b6:73:fb:67:76:7c:2d:bf:9d:92:b0:74:9b:dc:
58:dd:2c:13:ef:f9:ec:79:b2:b0:b2:25:d9:87:7e:ee:eb:77:
bd:5c:86:4d:a7:7f:53:0a:6e:a0:f8:66:d0:01:cb:eb:8d:39:
45:8b:57:f3:58:ce:53:24:d8:b5:bd:9f:c2:47:8d:36:c2:c9:
70:58:3d:87:d2:ab:56:55:d2:9c:be:52:92:27:69:66:bb:99:
16:00:ec:8a:00:4d:57:db:29:02:b0:02:dd:15:cf:fe:52:1c:
c4:fa:a5:9e:20:cf:06:05:d9:92:e9:9f:b5:d3:3f:b6:14:c7:
65:e3:4f:be:02:35:76:cc:81:76:37:25:3c:0c:76:bb:fa:7b:
7c:6b:75:ee:cf:4e:0d:ad:79:4d:2b:a9:de:24:24:e2:2c:b8:
46:61:c5:19:b1:57:2b:d0:1f:74:51:ee:28:19:55:3f:08:29:
f9:8f:68:21:6e:6f:56:f8:ed:c8:f1:3b:90:0b:bc:16:04:39:
4c:23:42:dd:68:dd:ca:69:f2:32:f7:bf:83:11:5c:58:49:ce:
87:1b:f0:99:9a:b4:18:86:02:ff:2c:40:ce:5c:0d:25:3c:85:
92:ad:04:b0:cb:fd:4d:4b:ee:eb:0e:89:81:be:bb:fb:30:c3:
2e:f5:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:49:46 2025 by rpki-client