Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File: 8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier: FsjM8zWzjIE3K5H7GVK6yMD9HuHvrZNeL6/YLLa3CPI=
Subject key identifier: 47:67:E7:49:18:35:D9:A1:E0:F9:58:92:FC:FD:E4:F2:37:7F:56:AF
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial: 019672D4140CEEC151D85A226A83AFC6AF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number: 159E
Signing time: Sat 26 Apr 2025 16:00:23 +0000
Manifest this update: Sat 26 Apr 2025 16:00:23 +0000
Manifest next update: Sun 27 Apr 2025 16:00:23 +0000
Files and hashes: 1: 3u5ZahOyBhUNG6vDZ4hRGCrx5AE.roa (hash: HJZxVsPJLjA3XvzP/RTBRhqyf06FeLW1mBD5DxrU/Io=)
2: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: B4MaAx2xtW/pwBy9vDSkwcYO8tqA6xd8COJK0uO3Nv0=)
3: TbmmnzuLCLV_rT2NRsiOU33FB6o.roa (hash: 77EfzF4GhZr8ViG+a2ISE3I0NZzlCSQ7tOGtUqmlj6I=)
4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=)
5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:14:0c:ee:c1:51:d8:5a:22:6a:83:af:c6:af:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
Validity
Not Before: Apr 26 16:00:23 2025 GMT
Not After : Apr 27 16:00:23 2025 GMT
Subject: CN=4767e7491835d9a1e0f95892fcfde4f2377f56af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:ff:a1:d4:74:03:8f:86:d0:6c:0e:df:a7:
22:ee:66:fb:89:ba:a5:0c:50:86:15:a5:c5:2e:2d:
98:f2:20:da:8b:3a:ab:e3:d0:bd:c5:0b:1e:2a:bc:
8f:3f:44:0d:d4:05:46:0c:a7:d9:0d:7e:61:71:0f:
f5:75:61:16:0a:53:88:55:ea:64:de:cc:c8:8a:f9:
2a:be:cb:c5:99:a9:4e:75:54:7c:33:ba:19:2a:dc:
83:5a:72:07:95:22:0c:ab:ea:85:0e:7a:73:be:a0:
9a:d0:c1:56:4b:98:72:44:8c:b8:3f:d8:27:15:e1:
c7:f4:d6:dc:48:46:26:2a:bf:15:72:bc:4f:5a:3a:
92:0b:64:05:2b:0b:82:e7:6b:59:b5:e1:39:9c:88:
9c:5e:64:41:76:9a:eb:7e:36:f3:f3:54:68:b7:d3:
0a:d8:14:4c:44:ee:1e:51:d8:ff:cd:de:ff:75:dd:
26:3c:4c:bd:2f:0b:ae:d0:70:06:84:1b:e1:65:62:
53:bf:44:3f:36:e1:d1:a0:e5:e2:84:c6:08:c6:7e:
0a:e9:16:81:eb:d5:27:63:43:e1:21:ba:fc:8f:bd:
a3:39:3f:bd:d4:46:23:a8:59:55:88:9a:ca:fe:eb:
1a:59:fb:46:e6:f0:7d:12:a2:48:4f:b9:83:db:6f:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:E7:49:18:35:D9:A1:E0:F9:58:92:FC:FD:E4:F2:37:7F:56:AF
X509v3 Authority Key Identifier:
keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:42:af:b7:54:08:b4:95:01:e3:63:d7:bd:4a:00:1d:6e:ed:
2a:ef:e7:38:e0:8a:75:5d:9b:da:2f:3d:dd:a1:88:3c:83:d3:
ab:90:d4:44:6f:d9:44:74:10:8e:44:7c:fd:02:c0:33:5e:ad:
e0:29:ff:f3:1f:47:04:00:f0:7c:c8:53:c5:88:f6:4d:29:2b:
7b:e0:1b:0b:65:3e:18:c1:3e:a7:6e:e4:20:4b:60:1a:6d:e9:
42:60:30:16:b4:5d:24:1a:91:45:87:1a:eb:4b:0b:e6:a4:a8:
e4:f8:5f:ec:2d:3f:cd:a8:ff:9b:3b:f0:0b:78:a7:98:aa:ae:
bc:ad:59:39:e4:b4:3e:62:b8:24:f5:45:23:83:14:88:46:8f:
4e:ab:41:92:26:ac:1d:6f:ce:20:e5:ed:bf:25:40:65:90:ed:
94:15:10:e4:3c:ab:25:58:35:d8:10:13:c2:88:9a:95:c8:9d:
86:9c:6a:dd:64:ea:49:05:31:c6:c2:12:4a:06:c1:a7:61:12:
5c:8c:88:6f:f6:f7:3b:cd:64:27:d5:11:52:b7:74:c2:55:8d:
d9:d7:dd:f1:90:9b:99:50:47:16:30:c7:90:1f:24:5c:59:c7:
5a:e3:1d:25:b8:91:8c:91:dc:4d:f1:e3:d9:0d:72:5b:c8:91:
6e:74:00:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:27:02 2025 by rpki-client