Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: Xphw6kxQCZwSCqW83y9FcmON+OLqI9gTgsybNiahPUQ=
Subject key identifier: CC:86:D1:89:4C:E2:3E:00:A1:30:E1:FA:8C:9B:A9:6F:B1:C2:79:50
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 0196760BE3FC8EE4ACD116822791472C62D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0869
Signing time: Sun 27 Apr 2025 07:00:12 +0000
Manifest this update: Sun 27 Apr 2025 07:00:12 +0000
Manifest next update: Mon 28 Apr 2025 07:00:12 +0000
Files and hashes: 1: 5moGvKAoN95-3rdirRXOwCahhvs.roa (hash: SkhAzMm5Jb5vcIiM14h4SYz3DQTRyqaR2eF+qq4Rdl0=)
2: RuuQV8FVAOprAh_8jcQjyKszeBc.roa (hash: kX89cdA0JPKtfSqgIarOumMCZ1cTxgD0uR8aSG1ObUs=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: OHsiw8UYO2cqzs8tRLl/8FormkZOV5JMoK/MeAo4qNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:e3:fc:8e:e4:ac:d1:16:82:27:91:47:2c:62:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Apr 27 07:00:12 2025 GMT
Not After : Apr 28 07:00:12 2025 GMT
Subject: CN=cc86d1894ce23e00a130e1fa8c9ba96fb1c27950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:90:e4:3e:22:3f:ce:1e:af:e4:30:8e:60:
b3:16:f7:9a:7a:62:b8:2c:cf:ba:d7:38:b3:a5:d3:
38:0a:e1:e5:16:76:6d:3e:a1:25:3e:00:9d:43:f9:
bc:93:74:3e:55:67:37:16:02:6d:ce:79:0e:cd:20:
49:ba:66:1d:e3:c3:03:6e:69:c7:12:fe:da:12:8e:
80:c1:36:60:16:7f:cf:6c:12:ef:ae:da:b7:78:97:
29:36:45:3b:15:80:8a:94:31:f0:87:e8:ef:6b:1f:
e4:43:84:72:80:6d:cd:fa:16:95:a4:70:fa:4f:47:
58:46:88:27:22:ed:e6:66:73:f2:0c:45:ca:88:4a:
6b:a6:d3:b6:6a:57:40:4a:82:a5:ca:d2:9f:fb:13:
24:a0:06:c9:b2:64:99:8a:ea:a5:29:a6:fd:39:d0:
2f:61:fb:95:55:1a:4f:21:35:b5:8d:a0:60:ca:d8:
f1:0f:b9:39:50:70:34:f2:f7:17:a4:ef:37:e5:7c:
8d:3f:cd:1f:73:ce:76:09:44:ff:b6:93:12:70:09:
36:19:75:b7:4f:d9:cd:8e:ce:62:88:b7:ed:d4:49:
65:d1:53:c7:03:dc:5f:ee:ec:91:fe:b9:22:6e:8b:
43:95:ee:02:37:c5:1c:60:b6:a7:f5:95:e4:f9:b1:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:D1:89:4C:E2:3E:00:A1:30:E1:FA:8C:9B:A9:6F:B1:C2:79:50
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a7:57:e4:6e:bd:94:54:ad:ec:d3:35:b0:47:8a:56:8d:7d:
ca:65:71:dd:72:75:b8:58:31:ca:68:2b:5f:f7:c7:d8:7a:ab:
41:66:af:db:7e:94:c1:13:46:60:5a:42:54:ff:5e:8d:cd:02:
9c:11:7b:a3:24:bc:27:00:8d:3d:dc:a8:7e:12:c8:6a:ac:c3:
5b:76:03:52:86:ed:8a:6b:c6:35:a7:0a:e1:2a:f2:47:e3:1d:
f5:e8:20:11:f3:4f:6b:e5:6d:43:9f:ea:f6:75:61:1b:d6:ab:
c5:f0:c6:af:2b:f6:d5:d7:ef:d2:95:9d:8e:fe:c8:23:f9:ed:
54:2a:5e:b0:58:1a:e9:2f:6a:73:bb:24:34:fc:eb:28:e0:a7:
8d:0d:42:e9:cd:2e:8d:62:3d:49:d2:db:9d:e7:e8:2d:19:be:
0e:2a:31:7b:66:11:e9:a7:87:4e:9b:b5:22:c3:62:9e:75:99:
95:6d:97:6e:d5:d8:bd:84:a8:e8:0e:03:cc:3d:c2:06:56:ac:
6f:10:a3:c9:32:61:cb:6e:fa:6e:df:ba:2b:ce:65:fb:17:02:
7a:92:f2:5b:2e:50:50:45:ad:46:1b:26:73:ab:54:5d:d1:44:
8d:b1:74:a4:6f:24:c9:9f:59:dc:48:7f:25:d1:ce:e1:0f:cf:
58:1c:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:43:16 2025 by rpki-client