Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
File: Tom7FOgJr_PsljCL2a6GUafndio.mft (raw, json)
Hash identifier: Sfg5snz1GDDQX6lfxRuwpy0No2XoinCLhq0n+A6RQCE=
Subject key identifier: FB:F3:5A:A1:82:2A:DF:53:AB:BB:13:80:27:96:4C:8C:24:69:13:E8
Authority key identifier: 4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
Certificate issuer: /CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Certificate serial: 01967A577474ADA6F58EB54C734C6328ED5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 03:01:13 +0000
Manifest this update: Mon 28 Apr 2025 03:01:13 +0000
Manifest next update: Tue 29 Apr 2025 03:01:13 +0000
Files and hashes: 1: Tom7FOgJr_PsljCL2a6GUafndio.crl (hash: EwEald6hXk06fnXFLPd5LlNEBsaOONAvLomz5xraVas=)
2: fxuqWXx_O_zewgAff6HXjyvgKp0.roa (hash: cm4JBhg0Zq8hHGX0z/7BWc/vnIZVK86NCDFtwq+RrhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:74:74:ad:a6:f5:8e:b5:4c:73:4c:63:28:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Validity
Not Before: Apr 28 03:01:13 2025 GMT
Not After : Apr 29 03:01:13 2025 GMT
Subject: CN=fbf35aa1822adf53abbb138027964c8c246913e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:f8:a2:7e:f4:0d:2f:b5:51:c4:a3:1a:5a:
6e:b3:9f:06:b4:13:1b:fb:d2:28:5b:ea:be:8c:c4:
c9:1f:e1:bd:40:e1:71:c9:9b:82:7d:66:14:6e:a0:
b5:0d:40:ad:65:21:98:1a:15:2a:1f:26:3d:4c:86:
40:51:a6:61:96:d1:6c:c3:e2:ad:1d:70:d4:d1:b6:
67:f7:a9:e5:5e:5a:13:af:81:6e:10:fa:d5:7f:34:
00:fb:b3:e8:fa:6a:fc:27:89:68:db:dc:2d:f0:2c:
ad:04:eb:20:b3:ef:7f:3b:15:e4:e3:3e:83:8b:aa:
85:7e:d1:4e:5d:fb:7a:c5:b2:2a:d1:14:9b:48:ba:
41:29:01:4b:41:8b:af:ad:74:b4:8c:26:5d:0e:bb:
09:c8:d7:13:27:97:e1:37:ca:b4:1f:31:e7:95:d5:
cb:b9:3d:c3:18:f7:a5:25:c6:c7:94:39:9d:dd:60:
a3:88:be:7e:b2:02:d4:c6:8d:73:9f:1b:5d:6a:97:
f1:f9:5e:07:f7:21:a6:da:5b:4e:59:10:31:59:c2:
6d:1c:7d:40:ff:b1:ea:54:36:cf:88:cb:bd:6b:3a:
b5:35:fc:0d:08:5d:81:d8:3f:82:64:03:e9:2b:90:
0b:15:ab:79:ff:f8:9c:f0:b0:11:74:1a:e4:8c:13:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F3:5A:A1:82:2A:DF:53:AB:BB:13:80:27:96:4C:8C:24:69:13:E8
X509v3 Authority Key Identifier:
keyid:4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1f:6a:c4:7a:a4:24:d6:bf:18:11:6c:06:c4:9b:15:a9:73:
cf:c0:d3:6d:40:03:ec:dc:3c:c1:27:e3:ae:28:77:c2:3a:22:
ec:6d:44:71:b3:61:05:06:f6:23:1a:0c:9e:82:1d:aa:76:2c:
a8:32:53:68:20:b0:9a:8d:d2:cb:77:32:11:c5:3f:18:ee:39:
65:5b:66:4b:df:2b:3f:c6:fe:af:0e:16:e9:62:cd:48:6b:23:
25:18:c0:4e:07:37:87:05:c8:af:55:a6:ae:d4:5d:2b:e6:96:
23:88:11:c0:16:60:78:9d:fd:43:0f:ac:0e:e2:aa:03:24:f1:
c6:68:da:8a:9d:76:8d:16:05:fb:3b:45:2c:98:d8:9b:82:b2:
0c:38:b9:2a:b1:03:7e:cc:fd:7e:bd:c5:d6:0b:12:88:50:38:
d3:bc:d9:94:59:76:ea:72:3f:26:fd:dc:48:7a:f1:73:5f:8f:
d4:cd:a6:67:d0:eb:7a:96:9b:7e:40:5b:27:d4:7c:1b:b4:4e:
d5:21:9d:e2:9f:db:25:66:4c:1e:2d:44:eb:56:82:cb:1c:9e:
95:7f:25:2c:8c:93:76:77:fe:da:97:d5:29:4b:5d:b8:3c:0d:
99:97:a6:be:0f:5e:3a:06:02:2f:83:00:14:23:3b:18:1e:a0:
ba:96:9c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:29:29 2025 by rpki-client