Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File: tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier: 3yxK7bD+G1ZvsBiGx+BbmLNMFxILhApDTXZ4FlpNGm0=
Subject key identifier: 80:42:3B:42:EE:2F:41:BA:C8:EC:31:72:D0:FB:73:94:8B:00:5C:04
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial: 01967ED85378FC7DBA64395DE5CA3B5E1839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 00:00:28 +0000
Manifest this update: Tue 29 Apr 2025 00:00:28 +0000
Manifest next update: Wed 30 Apr 2025 00:00:28 +0000
Files and hashes: 1: 4dgJmFIjsrGv5rSLSqks3SszRsQ.roa (hash: Sg9Vz95hfxUFPzxyRHpzX8FvIho0lOoY/A6mHLZCWkE=)
2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: yTm1O8+8wdx8lp4xle8cSjESCAHzMExq8UeCtfN1jus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:53:78:fc:7d:ba:64:39:5d:e5:ca:3b:5e:18:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
Validity
Not Before: Apr 29 00:00:28 2025 GMT
Not After : Apr 30 00:00:28 2025 GMT
Subject: CN=80423b42ee2f41bac8ec3172d0fb73948b005c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:b1:ec:af:b7:2b:18:f0:aa:9d:de:8b:68:
fc:0d:8f:e2:e1:d8:cc:0d:65:fd:96:e5:2b:96:22:
09:1e:fd:f6:9b:17:31:5e:9a:74:df:cb:6c:60:50:
9b:da:e3:d7:e3:0a:e7:81:2c:c3:46:49:bb:c7:9f:
0d:1c:28:93:38:4f:31:f5:ec:e4:ba:99:84:28:77:
53:4f:b7:c8:43:02:33:24:c1:95:8d:a7:c6:a9:0a:
df:c7:39:7b:e7:80:08:63:ab:0d:5d:72:62:2a:fa:
47:3d:d5:2d:96:c0:5e:35:ec:4d:98:05:3d:79:ca:
59:f5:f7:1e:fe:af:db:2b:53:37:b9:52:fb:b0:43:
f4:03:0b:70:5d:87:44:3f:33:3b:ff:f1:03:44:d2:
a0:34:1e:ab:96:e4:f7:14:a5:f2:c7:39:13:13:7d:
7f:28:26:48:22:6b:58:c7:de:83:86:e7:92:b4:4b:
65:44:79:12:db:ce:95:4a:0f:8d:f7:f7:8a:f7:03:
68:5f:3c:ae:77:2f:ed:82:8a:3e:f9:9c:a6:b2:cf:
5a:6e:9b:3d:89:29:a7:34:c0:45:3f:2d:28:7d:ab:
d0:6d:33:86:14:57:a8:14:62:2b:82:ae:ff:19:7a:
0f:a9:18:26:d3:1f:4c:67:39:e4:e6:d8:6e:f4:57:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:42:3B:42:EE:2F:41:BA:C8:EC:31:72:D0:FB:73:94:8B:00:5C:04
X509v3 Authority Key Identifier:
keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:18:a6:8e:3e:60:26:cf:b5:a9:b9:f1:ae:8a:6a:1e:6a:4c:
a8:6e:94:dd:01:0f:0f:10:d5:ff:8d:6b:b2:6b:eb:04:b5:74:
b7:1c:7c:4c:28:04:79:81:3b:e7:78:cb:96:f9:3c:07:40:09:
50:16:22:da:82:12:77:e8:6f:50:b6:94:f1:72:b4:52:8a:cd:
c5:6b:b9:c1:5a:43:1d:22:db:cf:5c:49:7e:b5:b2:2b:39:72:
36:8f:d0:f1:fa:ab:9c:cd:96:13:73:40:b5:1d:9c:a9:ca:e8:
b8:23:88:0c:2d:9c:7f:4d:38:01:ba:bf:25:5c:fb:7e:f8:53:
aa:3d:28:41:cc:fb:cb:7e:ae:85:63:9f:18:96:c3:73:84:04:
06:99:e3:ef:43:84:f2:c7:af:13:9d:49:1d:97:e4:b0:31:67:
92:58:79:04:75:8e:9d:43:b0:f2:f5:3f:c6:59:21:65:09:b8:
48:0f:4f:c2:7b:bd:ba:64:ca:1a:5e:a9:2b:b0:98:14:27:3b:
4a:d3:ee:c0:34:b9:69:51:a2:4b:27:a6:88:ac:55:bb:4e:6c:
7d:1b:26:5c:83:46:9f:f1:b4:96:42:3c:9d:f6:81:9d:10:bf:
01:09:0c:1c:18:61:ff:04:83:fe:51:dc:bf:1e:27:4e:46:49:
79:19:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:15:59 2025 by rpki-client