Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: sVTxVtDSFbVeaCRWr5LWP4t6d7moZbo+eXB048XKoVA=
Subject key identifier: 46:2B:72:67:1A:BE:E4:98:8B:D7:CA:1A:85:48:14:0F:BF:94:12:1B
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 019677C3C9C0107693135C9213154102B764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 15:00:41 +0000
Manifest this update: Sun 27 Apr 2025 15:00:41 +0000
Manifest next update: Mon 28 Apr 2025 15:00:41 +0000
Files and hashes: 1: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=)
2: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: vU96cOKaPF5h/qn8JgqVOPpvUi4DxYYpCaQBi0lguws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:c9:c0:10:76:93:13:5c:92:13:15:41:02:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Apr 27 15:00:41 2025 GMT
Not After : Apr 28 15:00:41 2025 GMT
Subject: CN=462b72671abee4988bd7ca1a8548140fbf94121b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:4c:6b:ce:04:87:01:9a:71:ef:39:f0:65:
1f:6b:cd:ce:29:0a:2d:56:0e:4b:14:d4:8b:c5:09:
b8:b9:0a:dd:41:ef:fe:0a:53:99:d6:bb:3d:67:39:
b5:e7:a9:85:79:ec:27:0f:1a:04:9e:83:7d:48:44:
3c:96:07:9d:89:bb:43:06:48:61:f3:14:14:3d:e4:
f9:a3:f0:8c:6a:1c:a8:1a:68:99:65:85:86:f2:d2:
ce:93:63:ef:7f:d9:ec:1e:19:45:1f:65:5d:e4:aa:
8b:d2:96:a5:17:c2:09:08:d2:d9:fa:8d:f4:15:75:
6b:20:bc:b6:7d:8b:dc:8b:e3:84:41:d2:4c:4a:71:
cc:e9:08:cb:b1:a7:d7:67:3a:f8:1a:34:9e:76:8c:
b3:e8:c7:0e:4d:ed:fe:33:0b:81:fe:32:5d:42:af:
21:94:26:9f:76:60:34:96:98:21:42:45:50:1b:e1:
82:61:e8:80:7b:fb:83:ac:49:3f:ba:30:96:2a:0e:
24:d7:d8:9c:f7:0b:46:bc:ad:a9:44:b9:38:8c:27:
e1:b7:7e:cd:7b:21:64:fe:fd:42:11:65:e1:2d:cf:
78:f5:1a:46:e1:da:e5:3f:d5:20:c9:00:cb:40:e7:
ff:d7:61:eb:f9:7c:bf:d1:f5:62:0f:ea:53:66:92:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2B:72:67:1A:BE:E4:98:8B:D7:CA:1A:85:48:14:0F:BF:94:12:1B
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6e:85:d4:d8:25:f7:eb:81:11:39:ca:a3:2f:e1:eb:81:71:
c2:e2:80:a8:56:71:cd:f7:7d:03:fd:97:96:ef:22:fe:05:19:
b3:0b:3d:6c:ac:88:b1:81:4b:ab:fc:00:bf:75:fd:bc:fd:dc:
07:e8:2d:2a:be:23:ac:bd:4e:fc:cc:56:0b:91:c1:30:a8:34:
33:17:09:ed:74:c7:a7:1b:cb:5d:17:91:62:04:86:f4:d5:8a:
f9:3b:48:87:76:b6:e1:01:51:fa:c1:98:30:6f:a5:19:52:89:
4c:8b:6f:51:d2:e6:9f:81:44:f9:ba:64:12:c0:0b:3a:5f:91:
52:7d:31:15:f9:a4:66:76:39:7e:be:8b:dc:db:49:1f:68:ec:
99:65:35:6d:1e:c6:52:3c:fc:00:ec:a4:74:fe:73:0f:98:5f:
59:c5:7c:54:4b:cc:f9:ca:5d:e4:03:a8:32:a3:6c:5b:03:4d:
a3:54:af:1c:49:31:84:95:e2:e0:c1:b0:ae:05:e5:74:75:42:
71:67:09:8d:ff:85:7a:16:c8:74:f3:a2:a7:74:ab:e1:9d:63:
2e:e7:30:03:99:4e:b9:f2:1b:3d:6c:18:4e:95:d5:48:42:2f:
72:21:34:0c:a2:3e:5f:cc:9d:db:e0:a2:eb:00:ce:7f:3f:5a:
48:63:77:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:44 2025 by rpki-client