Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier: AeQEHFKTSFmhM7Kx6oYDeGKCZDy1lZxPLp4JhgWEIos=
Subject key identifier: 31:9D:88:FC:6A:5B:7E:B9:1B:E2:BC:B1:23:6F:FD:20:29:5D:C6:01
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 01967D20DE30C0A6B1059870145E39FC41E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number: 1257
Signing time: Mon 28 Apr 2025 16:00:28 +0000
Manifest this update: Mon 28 Apr 2025 16:00:28 +0000
Manifest next update: Tue 29 Apr 2025 16:00:28 +0000
Files and hashes: 1: PhMpSawzWF4ex2C_9UJlDInR9Qw.roa (hash: 8Mwytw2cAElmiryd1WCNePGo22yW+hClbYeRH6uFgoU=)
2: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: h3unp1TcsjqsybtlUEPiw1vEDMJHSVWC+E0i7l/nA0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:de:30:c0:a6:b1:05:98:70:14:5e:39:fc:41:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Apr 28 16:00:28 2025 GMT
Not After : Apr 29 16:00:28 2025 GMT
Subject: CN=319d88fc6a5b7eb91be2bcb1236ffd20295dc601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:b1:8d:7c:9b:ba:72:38:5a:f7:84:d3:b2:
e5:21:ce:9c:5d:4b:48:e2:15:78:cb:78:45:cf:25:
0a:f2:3d:38:27:5d:38:7d:9b:22:91:2d:9a:e6:c0:
79:03:7c:f9:7f:11:cf:21:b6:b7:a1:e9:e3:80:49:
93:75:c4:b2:26:c8:04:41:e1:4d:4b:65:e4:df:cb:
c1:7d:64:a9:ef:fe:53:5d:56:2a:61:49:7c:c8:cb:
06:de:c9:5e:95:b2:44:80:02:9f:42:1d:41:51:f9:
0e:a3:8e:af:15:67:2e:d8:10:dd:e3:16:59:1b:3e:
20:aa:b9:c0:c9:ab:0f:bb:30:f4:a4:12:2f:cf:fe:
63:84:b1:d6:a5:40:4c:b6:5c:5d:97:a6:44:e8:71:
24:dc:5d:95:7c:c8:e3:e6:46:19:ed:ff:48:bb:ec:
f9:3b:9e:99:c1:13:74:b5:12:99:60:fc:bd:ea:0f:
1c:d2:d9:44:bb:9a:bc:87:86:df:2a:28:d5:d2:31:
82:17:34:4f:e9:c9:11:f8:58:c1:b2:c4:a1:46:bb:
53:28:22:3c:b4:78:d0:76:eb:e8:3e:cb:82:44:67:
97:47:6a:e5:52:ab:fb:6c:83:a5:d6:17:95:cc:75:
f5:4a:14:37:07:2d:e8:d1:e7:06:cb:1e:a8:89:ba:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9D:88:FC:6A:5B:7E:B9:1B:E2:BC:B1:23:6F:FD:20:29:5D:C6:01
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:51:28:1d:cd:4b:a7:0f:3f:78:d9:e5:b1:77:3d:2b:09:c5:
b1:b3:a0:9f:c4:33:e7:5e:e9:db:4c:d4:33:68:f0:33:65:2d:
57:f0:f8:61:27:43:cc:3c:e6:e8:40:4e:6a:3c:b1:a5:0c:a7:
5a:07:17:5b:e1:bb:96:ea:4f:19:17:54:dd:20:6c:d2:af:ec:
19:1c:68:09:0d:db:8a:ce:7c:6e:d2:e0:05:59:b6:0b:f2:61:
f1:07:df:41:b6:b7:e3:2a:4d:f2:8e:68:5c:55:24:7f:77:03:
34:ab:89:20:aa:fa:11:2c:08:bd:89:2e:ff:25:37:28:b1:07:
51:b9:99:db:05:41:d1:e2:02:24:d6:e0:60:14:88:fc:b4:1d:
66:11:c1:9c:f1:05:de:78:a7:0c:ee:0b:b8:38:4d:c8:4c:3d:
ee:42:d9:a3:3f:8a:45:bc:41:2c:90:ba:45:4c:2d:af:e9:52:
bb:dc:5f:34:d9:8b:79:7c:c5:61:50:d9:c8:56:a8:60:df:c3:
fd:40:12:de:07:ac:eb:f9:5a:e0:94:bf:b5:e8:24:b4:69:48:
eb:01:43:17:63:9e:78:c0:7f:3b:2c:c5:1f:fd:5b:64:f2:26:
0b:2b:01:6b:41:13:28:9a:94:37:4b:a1:11:ad:86:01:e4:1e:
8d:b6:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:42:06 2025 by rpki-client