Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier: DvwgGssXetvehMmFCFHtnED6LjJoSKhZ49kZfKokEG0=
Subject key identifier: BF:3B:02:D4:A0:3A:93:97:5B:10:AC:F5:7F:AA:3B:04:CD:17:8F:7E
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial: 0196808F9944DE74D8E5A033DBC8E376898E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number: 14A7
Signing time: Tue 29 Apr 2025 08:00:16 +0000
Manifest this update: Tue 29 Apr 2025 08:00:16 +0000
Manifest next update: Wed 30 Apr 2025 08:00:16 +0000
Files and hashes: 1: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: hlxl4wmmmUW1/MF08oNWiGyzacH0NXHWL66QTx+kK3Q=)
2: pXY7p3AnqDJfjALLmtVHw8U2GfM.roa (hash: ZUNXce9TBnEjmUfFa15l+WlhliqRz/AO8NwAB4Sid60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:99:44:de:74:d8:e5:a0:33:db:c8:e3:76:89:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Validity
Not Before: Apr 29 08:00:16 2025 GMT
Not After : Apr 30 08:00:16 2025 GMT
Subject: CN=bf3b02d4a03a93975b10acf57faa3b04cd178f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:d6:91:f1:53:ed:95:c8:b3:5e:f1:c0:f2:
25:c1:a7:e4:dd:bc:8e:19:bc:e4:b4:21:65:0c:5d:
6c:09:6b:c8:60:e0:2e:74:99:13:34:ed:bd:bc:a1:
34:52:ef:0d:4e:f3:da:c7:e4:8e:39:1c:15:71:ea:
c6:1b:d7:8f:47:6a:74:fb:eb:82:70:42:3a:2e:b7:
7b:21:9c:fe:3d:8a:3d:00:1c:6b:77:63:9b:67:dd:
09:aa:a1:b8:29:9e:5d:84:ec:90:c1:49:fb:be:a1:
a6:73:5b:b6:04:71:f5:83:77:d1:88:85:6a:75:27:
b1:13:2c:15:c1:04:06:3f:02:15:34:c5:64:a5:2b:
1d:af:7d:c1:f4:a4:2f:c6:e2:b4:a0:1b:27:e9:35:
c6:2c:5e:7e:73:85:ce:a4:e5:0c:7c:d0:4e:d3:c2:
24:a6:8b:ae:3c:a5:b0:7e:d5:93:f9:f8:26:d4:81:
fc:73:e1:25:b6:74:ad:58:c2:f3:3f:98:63:de:de:
64:69:fc:26:4f:c6:52:d1:a3:fd:f0:86:7f:90:2c:
4f:c5:fd:a4:43:43:6c:c1:43:d4:e5:65:49:c2:44:
97:12:31:38:2a:b1:5c:51:64:79:a8:5e:33:8b:82:
89:d1:d9:3a:b8:96:91:f4:aa:b8:08:66:94:e2:7a:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3B:02:D4:A0:3A:93:97:5B:10:AC:F5:7F:AA:3B:04:CD:17:8F:7E
X509v3 Authority Key Identifier:
keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:74:28:ae:e5:82:bd:21:30:cc:38:2f:43:52:29:0f:49:c2:
f6:e1:2a:48:8e:09:7d:09:7e:3d:ab:9b:62:22:d1:ba:1a:04:
57:a2:b6:ac:3f:10:65:d8:98:e1:72:e9:9c:2d:ea:51:f6:17:
0e:47:38:b7:c2:86:53:36:06:47:87:5a:7f:10:23:e0:66:c0:
91:cf:fd:8c:15:fd:10:c9:e2:17:e8:2e:d4:14:e5:08:99:80:
5a:73:b9:08:97:44:db:5f:25:78:64:b1:ef:72:1f:2a:8f:f8:
db:53:76:f5:89:11:fe:d4:02:14:eb:b2:aa:c5:27:c0:32:ab:
3e:fd:ad:b3:f5:91:55:10:63:ad:15:91:83:2c:2d:60:56:68:
6c:75:e9:3a:89:c0:1c:a0:ff:76:1c:f7:76:99:4f:86:53:80:
95:e1:3c:3c:e9:e6:57:0c:2b:c4:ec:03:11:34:8d:b8:9f:79:
9b:80:b4:88:1f:31:ef:f7:23:65:d7:5c:fc:24:d4:b4:ba:a1:
75:71:a4:64:2e:9c:5d:03:25:39:b3:86:96:40:3c:8e:bc:bf:
82:6d:5b:0d:be:9c:9b:fe:77:7a:40:4e:6d:99:42:30:2a:15:
0b:ea:1a:2d:74:43:02:9c:3e:20:7c:e7:21:ff:bb:70:81:91:
16:e7:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:08:11 2025 by rpki-client