Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: +PdzssopNfVLP9+ynlwpFRInYTmhmV7dOO/8FZ/huzY=
Subject key identifier: E9:38:CA:0D:2E:B5:8A:3A:D9:04:12:6D:46:3A:C5:17:08:7F:A5:9D
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 01967C458AA38E3975F0B7C9F18B7404E216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 12:00:54 +0000
Manifest this update: Mon 28 Apr 2025 12:00:54 +0000
Manifest next update: Tue 29 Apr 2025 12:00:54 +0000
Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: /mlEHwaYmH1mNP7MFZfV7oQ8UoW5SkERzvu6iHx0SVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:8a:a3:8e:39:75:f0:b7:c9:f1:8b:74:04:e2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Apr 28 12:00:54 2025 GMT
Not After : Apr 29 12:00:54 2025 GMT
Subject: CN=e938ca0d2eb58a3ad904126d463ac517087fa59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:27:34:00:de:00:69:cd:a3:7a:70:25:43:
8e:49:f9:ff:e6:f2:2c:96:f1:f9:63:eb:94:48:bb:
e1:7b:1b:33:a5:d8:84:80:f6:01:57:13:89:7b:ca:
cf:99:60:cd:d2:8e:a2:5a:c8:1b:52:c5:13:80:b9:
25:f2:96:8e:97:17:a9:61:6b:75:99:2d:eb:a1:a9:
61:e2:d9:47:97:4d:69:e7:37:ca:23:61:a3:65:3f:
ca:28:e7:8c:a8:ea:a8:41:6b:e1:a6:07:d2:20:0d:
61:f6:e4:b4:44:7b:4e:b5:ef:c0:8a:48:5b:1b:3d:
db:e4:71:74:a4:df:17:6c:c7:2b:80:2a:a7:80:80:
1a:5a:77:fd:49:5d:b7:bf:0d:78:60:22:21:d2:27:
3e:c9:c1:6e:6a:fb:48:32:e1:a6:fe:ae:da:13:fb:
b0:60:7b:7c:30:ae:33:df:cb:c0:e2:a8:43:14:09:
f4:1f:95:7c:b3:e4:4a:ee:3c:37:85:8a:49:e8:f8:
d8:1e:e7:bb:63:29:09:25:76:bd:55:ca:cd:23:14:
48:0a:0e:22:e6:ad:2c:8c:86:c5:75:06:94:b0:16:
fa:bb:df:92:49:bb:8e:c7:c5:62:17:78:39:9d:b6:
b1:61:b9:61:60:a8:2e:2e:67:08:77:0f:7e:35:92:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:CA:0D:2E:B5:8A:3A:D9:04:12:6D:46:3A:C5:17:08:7F:A5:9D
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:23:21:97:15:ab:95:12:67:9e:62:ea:75:e6:04:0f:a9:b4:
5b:e9:6f:f6:87:b6:8a:7a:fa:d1:30:d9:d9:0c:b0:da:be:ef:
07:bf:aa:7b:03:c7:d2:9a:c3:b7:b6:66:7d:c5:e9:2a:5d:49:
00:7c:e4:84:8f:7b:0f:81:91:6d:4a:79:46:90:2e:3d:75:78:
2a:18:8c:df:18:c1:87:2a:ed:4a:b1:eb:75:74:1a:e8:a9:6c:
4e:66:65:97:88:48:b0:97:80:da:b9:e3:fa:01:fb:32:70:04:
46:35:f9:9a:71:b2:4b:62:44:91:5b:76:06:ef:01:6c:9e:f3:
10:d6:30:4c:d9:42:79:bc:6d:0b:61:3c:d6:95:ff:3b:f9:00:
5e:c4:1d:34:c3:fa:99:4d:02:b3:30:06:5d:ca:06:80:9c:bd:
f0:27:48:1a:8e:d7:6b:62:44:8c:fe:de:c6:74:3e:34:df:96:
12:37:2c:53:56:91:f6:73:1b:71:67:47:b7:f7:45:10:5d:5a:
ac:6f:11:37:8b:33:e0:1a:c4:e7:9a:ee:74:98:3d:f4:74:0d:
6f:5a:f9:a8:70:ce:e0:b3:83:f3:ea:09:b0:85:b2:04:26:ae:
d7:1f:9f:fb:23:34:1b:9b:3b:32:82:d7:f2:1f:44:c6:3e:22:
93:32:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:18:55 2025 by rpki-client