Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
File: tu1iBVpRkcAuxREulRgaiawGDOs.mft (raw, json)
Hash identifier: a3OPTLnHPx+BRh+DuYcPKPJ2TvBph0FjtJ4olsgndcs=
Subject key identifier: 44:A1:B8:0D:C7:B7:48:CC:03:B3:78:4D:5F:9B:DB:1E:38:C7:BC:AD
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial: 01967FEB121A7867DC8752225D45157E4853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
Manifest number: 0A6E
Signing time: Tue 29 Apr 2025 05:00:34 +0000
Manifest this update: Tue 29 Apr 2025 05:00:34 +0000
Manifest next update: Wed 30 Apr 2025 05:00:34 +0000
Files and hashes: 1: iOo8WZeBs16BOwEjC7IsPMOtPO0.roa (hash: FC5R1Hrtvnbfsyec/XOyQavDbuFW5mY0wSOTHI+QutE=)
2: tu1iBVpRkcAuxREulRgaiawGDOs.crl (hash: cpVxm42ey5X+GDmQo1nMMn28orNKm9xn9xEHc9jHDFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:12:1a:78:67:dc:87:52:22:5d:45:15:7e:48:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Validity
Not Before: Apr 29 05:00:34 2025 GMT
Not After : Apr 30 05:00:34 2025 GMT
Subject: CN=44a1b80dc7b748cc03b3784d5f9bdb1e38c7bcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5b:f0:cb:6b:4d:dd:3a:db:e9:fe:04:58:67:
25:85:93:dd:e9:86:d1:e6:bf:64:8c:5c:96:4e:37:
65:7a:da:3c:45:da:34:49:3c:61:47:bb:8d:a3:54:
b8:04:6a:57:f1:b8:8d:ad:00:31:cb:2a:8c:ee:b7:
f7:e2:59:ec:18:c6:b7:73:d8:4b:32:20:de:a5:60:
36:bc:3f:db:11:bb:d1:b5:c0:4e:42:00:bb:e2:ac:
8f:88:7e:f5:d4:c0:04:6d:46:ad:6e:6e:63:a5:de:
a0:5d:57:92:ea:82:f7:09:e6:0a:13:93:ec:da:05:
3a:6b:86:d9:ed:c3:fb:44:9d:1f:a8:6e:f7:b3:48:
3d:5a:01:48:b5:69:2d:50:11:8d:57:a5:91:2c:91:
d9:33:e0:57:18:21:8d:8d:0f:38:b3:7e:a7:36:34:
d1:32:0a:65:75:5f:09:cf:5f:84:29:8d:a7:e3:02:
24:0b:fe:0f:ec:e0:84:30:7f:4f:7c:ea:97:97:e9:
11:c7:88:b6:62:a4:08:33:e8:b7:8c:e4:cc:46:49:
0f:ff:44:81:56:d1:df:cb:3e:07:a5:3e:95:d2:c3:
cb:55:46:b1:19:94:fa:5b:40:81:f4:e2:02:a6:84:
b3:6c:91:49:89:61:b7:14:ad:b6:43:db:73:3a:37:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A1:B8:0D:C7:B7:48:CC:03:B3:78:4D:5F:9B:DB:1E:38:C7:BC:AD
X509v3 Authority Key Identifier:
keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:45:a5:56:02:02:20:29:3d:19:eb:c8:75:60:5f:90:40:e2:
8b:1e:26:e0:43:71:75:34:0e:cb:c0:25:59:20:c0:ed:c8:2c:
ba:bc:48:99:1b:38:69:98:e0:51:97:58:f7:2e:52:d7:73:01:
06:65:36:66:69:28:f0:1a:a3:a2:48:0b:91:d9:17:b9:a7:50:
5b:3f:08:d0:3a:b1:9a:49:d0:08:f7:c0:15:d0:ce:e3:67:49:
75:25:13:2b:ba:a9:1b:ff:19:07:27:13:dc:33:44:f8:28:b2:
dc:b7:6b:0b:bd:7d:e5:4d:86:58:ef:f3:b1:a8:06:ad:3c:ca:
77:e7:b2:73:1f:9d:03:b9:86:e5:21:31:1e:4e:76:90:5a:b4:
06:f5:aa:aa:aa:f9:e0:c1:92:f1:27:d6:56:ef:13:e0:b5:c2:
11:62:cf:e7:23:30:ae:78:e1:7b:0a:0c:79:8a:0d:e6:20:d5:
e5:a9:de:3d:d4:b1:f4:4c:6a:26:c1:1a:d4:1b:02:3f:ac:55:
55:5a:67:e4:b2:43:6c:b9:53:35:08:96:39:6a:89:ce:83:fe:
41:da:e7:64:29:bb:5c:48:e8:dc:45:b4:52:f8:8a:40:f3:fb:
90:6d:60:1e:80:b8:fc:9d:28:f3:ad:37:3f:22:92:10:81:3a:
3d:5d:bb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:50 2025 by rpki-client