Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: L6/ZqSm29AhxU18FwH+vAPfQzAvFr62UrDrJZWXIYuE=
Subject key identifier: 84:F1:CF:B7:4C:02:92:56:D8:98:B8:E9:C0:79:92:C7:A8:77:5E:A9
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 01967679B73047B994CC2399968B7CC7A430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 097B
Signing time: Sun 27 Apr 2025 09:00:10 +0000
Manifest this update: Sun 27 Apr 2025 09:00:10 +0000
Manifest next update: Mon 28 Apr 2025 09:00:10 +0000
Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: dW34q26mGS/RciFAXpsA/X1qXAvMClUQeYE4SU9FHFE=)
3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:b7:30:47:b9:94:cc:23:99:96:8b:7c:c7:a4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Apr 27 09:00:10 2025 GMT
Not After : Apr 28 09:00:10 2025 GMT
Subject: CN=84f1cfb74c029256d898b8e9c07992c7a8775ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:43:17:6c:bc:c2:10:2a:ad:b4:3b:1c:78:
9d:c7:e3:75:05:1c:e4:3b:c3:29:7d:86:a8:0d:1c:
11:85:b8:e9:43:f1:3d:ce:9c:6b:04:38:59:8b:1e:
bc:37:21:f4:9b:1d:e0:c1:5a:fa:fb:a2:62:86:5e:
31:db:7d:80:93:09:12:19:99:9c:26:ee:22:f8:c1:
20:97:9b:9e:59:01:af:90:ba:ff:0a:d2:e7:91:a9:
6d:a1:34:5f:ad:37:5e:7f:49:60:b5:ab:3e:b5:78:
ee:03:fb:cb:ad:5d:d6:f5:cf:26:7b:e6:36:2b:dd:
79:c7:2a:3f:32:77:4e:bc:2f:14:80:c3:07:cd:e2:
a5:47:2a:96:e2:f1:4a:8c:3f:de:f9:63:82:12:5d:
42:2f:22:99:d1:08:cc:f2:c5:50:4e:53:6c:1d:a7:
ed:14:07:5f:af:6d:b0:95:8d:28:75:f1:c8:ff:47:
eb:b9:e6:a7:7e:ab:aa:aa:2b:ae:e5:7b:7d:35:1a:
94:54:82:3b:ff:a6:38:34:e3:17:0b:d6:14:5e:9c:
79:8d:ac:fb:e0:f3:b6:ce:a8:26:2c:ce:1c:39:62:
54:24:6b:4c:7e:72:96:d2:c7:c6:78:f1:d2:0b:43:
1c:d8:2d:30:78:a0:b7:de:6f:66:23:94:60:9d:c9:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F1:CF:B7:4C:02:92:56:D8:98:B8:E9:C0:79:92:C7:A8:77:5E:A9
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0e:ef:87:26:e3:23:2c:92:a5:76:d2:dd:1d:d0:12:17:1b:
ef:38:11:1c:2b:60:b9:f9:69:8c:15:bf:a9:7b:00:8e:6f:e7:
50:b6:8a:b8:87:d9:14:e7:e1:39:a1:05:e4:f7:f2:6e:7a:c8:
bb:6b:c1:69:b5:66:2d:e8:87:06:87:3a:76:c4:fb:be:c8:6e:
eb:88:e4:95:cc:2b:fe:bb:13:68:7a:3b:25:43:b8:2e:72:0f:
e0:d6:6f:d8:c8:39:c8:4f:b9:1c:34:ed:77:47:4e:5d:73:43:
ca:4a:65:9c:92:94:92:66:df:ad:93:0a:d5:0b:8a:79:2f:87:
f7:aa:e7:5d:6b:53:db:d6:77:c1:a6:91:7e:99:5f:1e:8e:98:
f4:07:f3:a5:f4:3a:b0:56:67:f1:0e:83:87:9c:7f:fd:d1:dd:
60:b0:57:7c:b7:10:ee:b9:44:b8:bd:f8:79:ad:0f:74:a9:f8:
a9:20:13:0f:8b:49:74:38:56:6d:e9:25:c6:41:ce:08:fb:5b:
1c:a9:56:c5:ca:78:72:ec:e1:3a:44:15:da:b7:27:42:cb:66:
81:3c:5b:b9:2c:1c:db:a7:c8:0f:03:da:78:e6:9c:3e:95:8b:
94:c0:d5:b0:55:a7:d3:4d:0c:3d:fe:42:39:0f:ad:80:8b:f0:
8c:93:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:41:21 2025 by rpki-client