Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json)
Hash identifier: ChO0X00WMVESLgTTmfaBiDRYJyoMu9h1zwPRGygGu3E=
Subject key identifier: BC:F0:A9:55:E0:A3:15:65:17:9E:6C:E9:57:2A:0D:F4:77:EA:BE:DC
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 019683C7A88B71E28777FFD908E7C11E71A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
Manifest number: 152F
Signing time: Tue 29 Apr 2025 23:00:22 +0000
Manifest this update: Tue 29 Apr 2025 23:00:22 +0000
Manifest next update: Wed 30 Apr 2025 23:00:22 +0000
Files and hashes: 1: 5Tj38Bsn0hJUYrmVNSahq5IYxas.roa (hash: GZ7T7PHhO62jK4WQFKNvOrwYNZYOPPS6icOBzwnz7nI=)
2: Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa (hash: HSjxAg+X+QFqjbXeKMYZbr1j8n6ewv+Jo99Iqhyk6hE=)
3: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=)
4: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=)
5: RLeyW7lqx5hu9s9VIH-LZ4c9FSQ.roa (hash: 8qkFZX4fO9IGCK+/hjULowdb/hcL+0qKwz4xQec6iUE=)
6: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: RMSLdkcLan7TBo0MWhrT8Cm8hqJjbLaCJrFCvc+j03Q=)
7: lRLrr8PrmpyLA1Ah6iT6M53B97s.roa (hash: KztLb5hpOs++pyJMXHsFQs+/mWS279OT4VXn2Nei8oY=)
8: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=)
9: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:a8:8b:71:e2:87:77:ff:d9:08:e7:c1:1e:71:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Apr 29 23:00:22 2025 GMT
Not After : Apr 30 23:00:22 2025 GMT
Subject: CN=bcf0a955e0a31565179e6ce9572a0df477eabedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:eb:73:84:ad:12:67:f8:7f:df:24:2c:86:3e:
1b:3b:dc:94:fe:1f:8d:dc:be:fe:d7:06:1e:91:0a:
60:e2:d6:26:d8:5c:85:4f:1e:ce:9d:13:f8:97:b4:
ef:e2:76:39:08:10:b9:a1:7b:5e:3f:df:1e:40:2c:
e9:67:f8:d2:76:cd:4f:34:80:b0:9b:b2:e2:e9:90:
58:63:ff:e2:f4:10:95:f5:89:74:6a:7d:63:d5:ba:
c8:a2:79:9d:a5:b8:d1:33:77:24:ab:2d:f3:ad:cd:
d7:a8:69:6f:11:87:35:de:0b:00:2e:3a:2a:88:ea:
27:9b:9d:52:b9:44:55:19:6a:87:fa:3c:17:ba:b9:
71:26:bc:42:b0:29:20:d9:e2:8c:69:7a:46:af:50:
64:26:9c:40:25:d8:38:9a:e7:32:94:e5:8f:c0:7e:
0d:d6:45:75:73:97:65:3c:8a:d2:78:dd:47:db:f6:
ef:70:e0:af:93:20:17:5d:21:92:52:26:1a:0a:d9:
08:67:d8:d0:d8:0d:81:ac:45:5c:ee:f0:83:21:8d:
e1:d0:ea:46:85:88:a6:3b:1f:50:e8:d6:4d:38:17:
50:f9:35:ce:f3:64:ab:53:78:3b:86:7d:e3:88:76:
bc:1f:f1:8d:bd:65:36:a5:e4:b7:40:ae:a7:e4:78:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F0:A9:55:E0:A3:15:65:17:9E:6C:E9:57:2A:0D:F4:77:EA:BE:DC
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:65:53:ff:49:23:2e:8f:09:0a:d3:97:15:8a:35:f8:95:80:
8d:3a:92:d2:b5:1d:61:8f:79:31:c5:c2:8c:97:ce:b3:28:cc:
7b:7a:41:b4:8c:53:4a:ee:23:b7:22:34:e1:f3:ea:da:e8:52:
6c:28:fb:f7:02:ac:4e:61:2c:57:8d:2b:44:2c:c6:7a:ee:be:
d5:1f:8e:9d:7c:64:11:67:0f:af:4f:7b:d9:ba:77:fc:30:89:
17:bb:05:2c:b7:50:50:91:16:9a:35:06:70:21:7e:9b:91:4c:
be:e8:e6:0b:2c:47:fc:88:5b:6a:80:89:5c:d3:16:bb:94:88:
80:42:59:93:90:6b:b4:b7:e6:df:65:47:ab:56:25:3f:c0:07:
5f:5d:c4:2a:86:bf:56:c3:b4:07:fc:d1:5b:c1:4e:37:69:37:
0f:38:fd:42:d7:23:ec:d7:01:30:90:c3:18:17:5f:f1:bf:0b:
3e:3c:67:87:db:fc:b8:45:4f:3f:e4:2e:14:8b:3d:83:da:8b:
b2:8e:0d:96:60:fb:db:21:02:cf:36:59:5d:9c:ea:f8:39:fd:
79:e5:6b:72:ab:e8:d3:a8:fa:11:02:32:66:f3:6d:04:95:89:
02:b8:5f:2c:8f:1c:d1:39:a8:94:ac:07:c4:88:21:91:54:39:
f4:7e:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:51:21 2025 by rpki-client