Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
File: tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft (raw, json)
Hash identifier: XpVdpRhLx1Tns/2zPn01hOh2syfZH1g2CFRLHSTdWlk=
Subject key identifier: 60:8A:AD:17:64:C6:B7:C2:6E:1F:D2:AD:83:EF:F4:B1:07:47:B2:F0
Authority key identifier: B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
Certificate issuer: /CN=b543ef9bc3c2132361c1240972a180912bf7a859
Certificate serial: 019677FB080388FA0AEA857A78187ED08062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
Manifest number: 10BD
Signing time: Sun 27 Apr 2025 16:01:02 +0000
Manifest this update: Sun 27 Apr 2025 16:01:02 +0000
Manifest next update: Mon 28 Apr 2025 16:01:02 +0000
Files and hashes: 1: 3_-c02s70_bWI80EfV5nMZhCjHg.roa (hash: 1ZDiW1elfufjNKaqhAw29FTOI2soWhXtopSXVjj/ruY=)
2: 9XYzuBVHhZfQ-Z8_PdIStP3gEJU.roa (hash: 45mg1wTAOjryTd4LOjOOGQdcDwneEtBdS+C0gsQtj+o=)
3: tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl (hash: IyPH3prcDjLbIVIYNaLIqeNAe79iLgdP2/HKGnSdI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:08:03:88:fa:0a:ea:85:7a:78:18:7e:d0:80:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b543ef9bc3c2132361c1240972a180912bf7a859
Validity
Not Before: Apr 27 16:01:02 2025 GMT
Not After : Apr 28 16:01:02 2025 GMT
Subject: CN=608aad1764c6b7c26e1fd2ad83eff4b10747b2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:d0:95:66:0c:72:77:94:44:48:96:4f:87:
60:5d:ca:57:47:bb:43:81:18:41:de:bc:ed:6f:0b:
43:f6:26:c8:4b:e9:d4:5e:84:25:5f:aa:98:00:f2:
17:74:a3:4c:df:31:91:eb:b4:6a:ee:d3:cd:e1:df:
83:42:4d:8d:fe:c5:fd:fe:61:cb:1f:7f:db:89:06:
52:94:be:19:0a:4a:92:ea:87:96:b9:f4:30:1a:8b:
2d:30:30:ca:8d:ff:73:8c:4c:4d:27:99:fa:16:5c:
31:f4:94:dd:ce:5d:09:7c:21:04:25:f7:ad:5d:64:
55:4b:9d:f4:d3:8d:0f:c1:fa:6d:e9:0c:c3:71:1b:
6f:c0:c9:23:35:3f:ed:94:2f:c7:9b:8b:e5:2d:39:
05:15:4d:33:c1:25:33:72:4d:f3:da:c4:c8:38:a1:
7e:34:60:4d:a6:4b:d9:ff:a4:78:4c:ee:c3:d5:d5:
b8:11:d7:1a:69:7e:3e:4b:22:77:47:dd:b4:06:70:
23:8b:d2:10:e5:7d:71:eb:9b:6a:8b:52:5c:31:15:
ae:6a:66:3b:25:10:1d:5b:80:6a:c1:6b:1e:60:4c:
fc:b3:a1:63:78:d6:d3:99:c5:11:c5:4e:b2:31:7e:
c4:d7:aa:08:53:c4:55:12:01:b2:45:4b:42:2b:cc:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8A:AD:17:64:C6:B7:C2:6E:1F:D2:AD:83:EF:F4:B1:07:47:B2:F0
X509v3 Authority Key Identifier:
keyid:B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:21:30:6c:e8:a6:0c:0b:51:89:f2:cd:1b:ff:2b:2a:71:ed:
2d:36:ec:db:64:00:b3:01:c6:4e:c7:34:cf:72:64:5b:90:58:
3b:e6:a4:31:c7:8b:79:0a:82:ea:a6:d6:45:13:58:69:0b:94:
f0:c1:80:cb:98:f7:14:77:8c:50:6d:41:8f:cd:9f:0f:fa:20:
0d:dd:02:b6:ab:ab:10:28:bb:41:80:27:6c:25:b8:6f:08:b4:
00:b1:3c:bf:0e:44:bd:24:7c:c4:28:51:29:43:ae:5a:12:4b:
e8:54:3f:6c:18:9f:98:79:0d:45:ba:8f:6a:a2:32:30:d0:99:
c3:54:e5:72:3c:ad:4c:26:49:f6:e9:62:48:38:b5:87:1d:e4:
91:38:d8:16:f2:4e:38:7a:75:04:7d:a0:9c:7f:43:9b:69:ca:
d7:68:df:e6:69:9d:39:8d:cc:93:f2:51:15:92:9b:c0:64:4f:
63:38:9f:16:a5:b7:73:b3:fc:8c:e7:8a:59:fa:3f:74:e0:89:
3b:72:f0:eb:b5:44:4c:ea:38:df:ab:91:51:be:f5:66:e1:a5:
ff:e4:41:de:48:0e:db:b7:7c:a8:7e:35:16:0e:2a:64:e0:bc:
cd:6a:99:f2:4c:92:f4:c8:b0:1c:a6:6a:6f:20:c4:d6:31:7b:
e2:a8:fc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:32 2025 by rpki-client