Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier: jIvVIIu+hsJn5xjkAraIk8FSuNX+J+UtFg82bbM+tlQ=
Subject key identifier: 01:7A:12:35:EA:0F:9C:C7:38:36:44:53:5C:56:E7:04:99:4E:C7:CA
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 019682B507A232D66BCF00D51CF007AB3D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number: 0AC8
Signing time: Tue 29 Apr 2025 18:00:24 +0000
Manifest this update: Tue 29 Apr 2025 18:00:24 +0000
Manifest next update: Wed 30 Apr 2025 18:00:24 +0000
Files and hashes: 1: H_s46FVu3VtqmBdzQOsgFtOpwm4.roa (hash: xXfRZ05adaRJT3b+JBMiwuYhoS+v9eiqRiPqJaWYY3s=)
2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: 7lHpbm+rsvuq3pP9NO+UpQvDVqIidU2wGQwQ52fp0s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:07:a2:32:d6:6b:cf:00:d5:1c:f0:07:ab:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Apr 29 18:00:24 2025 GMT
Not After : Apr 30 18:00:24 2025 GMT
Subject: CN=017a1235ea0f9cc7383644535c56e704994ec7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:ff:5f:17:56:b2:ea:82:bf:b1:c3:39:7f:
7f:33:a7:73:4e:28:47:9c:b9:21:db:c6:ed:ab:e7:
a0:b2:f6:c1:f2:23:ef:ac:18:75:44:ca:bd:d1:b1:
6c:a9:b5:93:81:f7:3d:c6:8b:c2:69:e1:f1:43:ff:
29:c2:fa:8f:7d:5b:3a:8c:19:79:5d:53:c4:41:ba:
9c:e6:5a:2e:28:8e:cc:4f:d6:15:0e:48:71:03:94:
06:6a:2f:cc:82:68:f9:87:44:57:ba:b0:1d:ba:42:
58:63:f2:01:eb:f9:56:ef:5b:02:f8:4a:11:63:e2:
19:25:38:5b:f6:15:82:d8:ff:ef:ec:a9:c3:17:01:
94:1b:2a:c2:48:e1:28:17:10:77:5c:f0:1c:2d:f3:
c8:84:ba:8a:5f:dd:87:ba:a7:b6:f7:c8:a8:a4:0e:
5d:c9:54:ce:d4:c8:be:75:e7:28:14:63:93:bd:12:
7b:48:d1:e8:71:c5:7b:16:07:5b:b8:b3:f6:2d:d8:
47:cb:39:89:34:de:30:9b:4b:3e:8b:95:62:5b:c6:
85:e1:e1:e1:1c:ec:e8:59:98:e4:23:58:e7:8d:bc:
9f:63:e5:62:1d:cd:9b:7a:1c:05:eb:6f:39:f3:40:
a1:5c:64:97:c3:e0:13:4f:ac:e3:4f:a5:78:f3:66:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7A:12:35:EA:0F:9C:C7:38:36:44:53:5C:56:E7:04:99:4E:C7:CA
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c1:b2:d8:22:19:88:a4:0d:57:c7:68:f9:15:75:52:e1:8e:
2d:5d:81:d8:b6:68:19:7e:eb:96:85:40:72:41:79:00:d8:d5:
0f:1b:df:5c:e8:7f:aa:4a:51:a0:99:5b:b4:cb:54:e1:cf:7a:
de:90:07:1c:46:a4:fb:b1:8b:bf:77:fb:7d:14:e4:ce:b7:a7:
6f:5d:6a:91:98:10:d0:aa:6a:12:04:83:d8:6c:b7:b0:f4:ae:
b0:3d:81:4d:9f:a7:1b:8f:ca:77:ad:47:e9:ec:f0:d5:e7:fa:
c6:40:65:93:9f:cd:5a:1d:e1:ad:78:f8:c7:c5:6b:85:ed:42:
55:60:2a:f6:60:0e:f3:1a:8e:c0:14:0d:90:7d:82:3f:ee:e3:
54:6c:45:23:c7:d5:d5:7e:cf:72:45:4d:1d:43:03:d7:d6:82:
b0:60:c8:07:f7:1b:fc:da:c4:22:9f:dd:7d:a5:5b:15:df:16:
76:59:77:5b:49:31:c9:06:82:5a:0f:86:9b:a6:39:35:ac:b3:
17:23:66:1f:7c:e8:39:de:4b:0f:a6:11:91:a6:58:72:7f:54:
c6:64:bd:fa:1a:bc:ea:09:93:70:1d:14:c1:52:2a:30:c4:cf:
02:fc:d0:01:51:7d:e6:d4:0b:ba:53:9d:02:c4:20:71:7f:7c:
b0:b7:16:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:05:11 2025 by rpki-client