Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: mHov01FOOPqJJQUC3qyCX2bxIt0nOgBPowAlY4AzxuE=
Subject key identifier: 58:75:BF:AC:2B:21:61:C7:2D:00:B5:AC:65:8A:3C:9A:38:3C:62:1F
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 01967D8ED244A1B4011F4BF196001EA2C4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 0D06
Signing time: Mon 28 Apr 2025 18:00:33 +0000
Manifest this update: Mon 28 Apr 2025 18:00:33 +0000
Manifest next update: Tue 29 Apr 2025 18:00:33 +0000
Files and hashes: 1: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: CkS8DoJVd/M+cUcDUV8iV9paxSv6lXVYQTaVnaoubuw=)
2: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (hash: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:d2:44:a1:b4:01:1f:4b:f1:96:00:1e:a2:c4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Apr 28 18:00:33 2025 GMT
Not After : Apr 29 18:00:33 2025 GMT
Subject: CN=5875bfac2b2161c72d00b5ac658a3c9a383c621f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:a3:2e:53:9a:0d:8c:5a:90:c9:8f:6e:c7:
40:6b:e6:cf:87:b0:c8:45:7e:db:8f:e7:80:91:27:
71:4b:3f:04:af:4f:10:5f:cc:52:39:80:a7:fd:09:
f2:72:72:25:23:7f:09:8d:1d:3d:d9:09:09:86:41:
4e:78:a2:3f:a8:08:12:56:cb:02:5c:82:92:bc:5b:
b1:87:b3:fc:74:af:97:b4:d9:3c:b6:ee:0b:26:b7:
8f:da:6a:3f:04:f9:2a:f5:15:b8:1e:c8:c8:11:6a:
09:ad:47:db:57:10:b9:8a:8f:31:e9:6b:e2:7c:e6:
b1:d2:0e:e9:70:26:6f:70:d0:b3:65:54:3b:b2:3e:
3c:9c:53:4d:1d:45:e4:2d:5d:b5:e2:cf:ac:31:5c:
08:d0:dc:ed:ef:01:87:1c:06:a6:1c:26:a8:ab:61:
c0:56:40:a9:1a:3a:a5:4f:53:b3:3a:75:79:62:70:
7d:27:31:64:d5:e4:ab:40:eb:9d:57:be:09:3e:a8:
d3:31:8a:f5:4c:3c:4d:e8:f0:1a:23:73:9b:69:4c:
3f:de:2c:3b:3d:7c:04:45:ee:e8:8e:a8:01:33:5a:
bd:eb:22:5f:9c:8b:21:6c:1a:47:3e:c0:1d:c4:76:
10:e4:95:51:15:34:a4:23:d7:d0:ad:53:8e:f7:15:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:75:BF:AC:2B:21:61:C7:2D:00:B5:AC:65:8A:3C:9A:38:3C:62:1F
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a1:92:4a:52:3c:63:ad:ec:a5:56:eb:87:20:19:d1:b7:4e:
7d:c2:61:71:1b:f1:15:c5:a6:6f:c1:71:23:ab:8a:bf:12:58:
cd:f4:1d:d2:5f:f3:c8:f3:9b:31:9f:6f:8e:f4:30:2a:03:64:
c1:f2:ec:2b:0e:53:8f:5f:69:f5:36:40:30:1d:ab:57:ca:61:
cc:33:8f:79:24:b4:83:66:80:24:1a:fa:f2:ad:e3:3a:b4:ec:
62:85:26:90:ad:0a:b1:78:17:67:71:52:89:83:66:5b:35:11:
4c:6d:97:3a:63:5c:34:fd:58:7c:1a:71:3e:f8:fb:0d:ba:88:
16:bc:14:7e:ee:36:16:44:4a:40:40:3c:fb:a9:42:9f:e3:e9:
49:70:cc:29:22:7b:24:b4:c4:93:f5:81:26:fa:18:04:08:31:
e5:ea:9e:f4:e8:88:89:c0:94:71:ca:dc:92:a6:83:b4:46:01:
66:5a:fe:58:ce:d3:0b:01:b8:b7:2d:3d:21:08:8c:c2:5e:1c:
0d:55:55:ec:aa:87:88:97:95:18:fa:06:bd:89:98:66:d3:a8:
df:1f:3f:a1:59:ea:bd:94:39:5e:c9:57:02:e0:77:fc:d3:ea:
23:2f:e5:4c:4a:ce:20:3c:96:0b:58:82:df:e5:27:d5:eb:52:
6b:e4:2f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:25:31 2025 by rpki-client