Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: ZMrzOseFYCtahlOtVvbq4XeNTUvyDiUOadq7LvcuORA=
Subject key identifier: D6:D1:EA:AA:85:E6:39:BD:79:C7:22:24:09:49:DC:69:77:2E:7D:32
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 01967AC52D15FB0FCE10D3FEE1378DFAFE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 05:01:04 +0000
Manifest this update: Mon 28 Apr 2025 05:01:04 +0000
Manifest next update: Tue 29 Apr 2025 05:01:04 +0000
Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=)
2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: 435R/urAy1cmT30QtGFMBihPfHR+ascyHXQ92XQVauI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:2d:15:fb:0f:ce:10:d3:fe:e1:37:8d:fa:fe:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Apr 28 05:01:04 2025 GMT
Not After : Apr 29 05:01:04 2025 GMT
Subject: CN=d6d1eaaa85e639bd79c722240949dc69772e7d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:86:e6:d7:eb:a2:80:00:76:05:c3:eb:aa:
43:39:1c:90:7b:d9:68:84:52:a4:d7:f7:4d:99:b7:
df:f8:f2:21:2e:32:59:0c:41:2f:57:29:bc:72:2b:
a3:3e:84:79:81:e9:d9:1e:3f:99:ee:c0:a8:ba:60:
c6:6e:df:9f:21:6d:3b:af:1d:91:d3:31:5e:d0:29:
d0:fe:65:ac:55:2e:76:ed:c4:e9:42:3e:60:3d:40:
e5:b0:24:a7:07:3e:19:90:30:cf:8e:56:62:cb:b7:
93:6e:9d:53:c6:b9:be:af:50:62:b4:df:d2:38:a1:
e2:0f:55:c2:d1:99:93:17:02:16:16:41:41:d7:c6:
f8:e7:f2:fd:75:26:d9:91:5b:10:88:d8:45:be:7e:
b9:fb:98:6f:4d:b6:b3:a8:df:9a:00:75:11:56:34:
6c:63:c5:38:42:b7:7d:c0:f5:de:22:8c:e7:8c:38:
25:64:3d:eb:0e:59:a3:b3:cf:d5:e3:f7:aa:15:79:
0f:23:24:5c:e1:4c:8d:6e:9a:bf:fd:8e:ad:da:ee:
5f:75:38:59:1a:fa:a0:a1:b3:22:db:82:ef:0b:1a:
04:e1:53:4e:b3:47:e3:89:7d:65:33:66:9d:f6:a4:
1e:c6:9a:df:b5:fc:af:c8:2a:82:a3:e8:8f:1f:86:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D1:EA:AA:85:E6:39:BD:79:C7:22:24:09:49:DC:69:77:2E:7D:32
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:45:b3:5a:56:46:1d:36:a2:a3:6a:01:8b:37:9c:5a:8e:c3:
4c:be:51:7f:0d:fb:d4:17:83:0e:30:6a:4f:24:28:fa:53:f2:
f4:04:bd:d6:ce:d0:79:7f:93:8a:1f:89:25:40:c2:55:7c:63:
a0:f0:47:5d:65:61:a4:eb:c8:7e:9f:b0:05:64:c6:b9:8b:af:
ea:40:7e:d3:e1:69:38:d1:49:79:ce:97:37:47:b1:00:1e:76:
88:18:4c:4f:7f:3c:bd:c3:2c:78:f0:da:0f:49:86:75:99:a4:
31:f5:20:62:00:71:d7:1e:5d:6d:ac:3c:3f:3a:ce:fe:e5:3b:
24:cf:6c:4d:9e:1a:52:d0:58:50:a7:aa:55:59:35:2c:92:d4:
29:95:d2:3b:b8:b2:69:81:db:52:98:6a:81:f1:49:e5:6d:3d:
f7:78:cf:5e:9b:6f:57:d7:64:28:a8:39:9f:1f:12:23:c6:e4:
fc:88:d8:3b:e9:d5:dd:f9:63:bb:9e:8b:c9:a5:0e:25:7f:ee:
66:0f:7a:7d:41:0e:a6:de:99:ad:ba:43:31:47:47:aa:d3:50:
fe:fe:82:f2:fa:9e:5b:da:d4:3f:24:7f:43:3a:08:13:de:a7:
1b:ad:3a:e3:c1:f6:31:16:77:90:a7:b0:c0:80:7e:a6:b0:99:
1e:a2:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:22 2025 by rpki-client