Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
File: tZvm7lSfM1xyhJennxRBA06FLDU.mft (raw, json)
Hash identifier: +xz9VZHQG8qWt/rHsCsWf+NAmfbYi8IQXcDWCyjgXcY=
Subject key identifier: BA:91:24:D2:2F:A8:48:2C:09:01:76:75:04:B9:BA:00:FF:A2:32:B8
Authority key identifier: B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
Certificate issuer: /CN=b59be6ee549f335c728497a79f1441034e852c35
Certificate serial: 01968391A869264C1B98FAACE8126C21DD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
Manifest number: 13E1
Signing time: Tue 29 Apr 2025 22:01:23 +0000
Manifest this update: Tue 29 Apr 2025 22:01:23 +0000
Manifest next update: Wed 30 Apr 2025 22:01:23 +0000
Files and hashes: 1: KDCfBX3ad6A_00hrvSAJKYMpmcs.roa (hash: fNL/A2pz+GNUAG3d72o3KDJ4AJqpHRk0BtaNcUYXr/8=)
2: tZvm7lSfM1xyhJennxRBA06FLDU.crl (hash: V42SBv8JI04cdK5P9SiUUQvnuc7YUqdVBKoaiEkJcz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:a8:69:26:4c:1b:98:fa:ac:e8:12:6c:21:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59be6ee549f335c728497a79f1441034e852c35
Validity
Not Before: Apr 29 22:01:23 2025 GMT
Not After : Apr 30 22:01:23 2025 GMT
Subject: CN=ba9124d22fa8482c0901767504b9ba00ffa232b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:c1:2e:2e:ca:5c:4c:d0:75:60:c9:20:06:
2d:9e:b8:13:81:79:ca:86:34:c4:f6:00:04:cb:c6:
2a:b0:85:c2:ec:98:21:e9:88:52:8f:3c:da:7b:20:
4d:14:1c:6e:90:33:00:1f:cf:48:45:51:93:e9:6d:
75:5f:13:1f:1c:a2:54:24:43:45:59:f7:f4:5c:ba:
ec:15:11:df:4a:65:9d:89:d6:c6:08:20:cd:fe:cc:
72:1d:39:9f:65:56:98:20:32:38:c1:06:5e:86:2d:
69:d0:df:4d:c6:fc:5c:49:af:ad:0c:1f:90:24:af:
8c:e1:08:ed:5b:14:7f:82:28:2a:be:28:64:a7:b5:
29:71:bd:2b:0d:74:5b:c8:0e:3c:ba:d5:d9:6f:92:
51:fe:6d:5b:1c:84:6f:a3:fa:28:63:ff:00:ba:ef:
d0:d1:bc:46:04:55:cc:8c:7a:fb:0f:84:0c:a5:02:
4a:c2:e2:42:92:4f:66:c1:0f:d6:21:6d:34:7c:8e:
15:8a:7b:05:e6:b6:13:e2:cf:e4:bc:8e:cc:6a:f4:
d8:0b:c9:e1:73:5a:4c:3a:a8:46:4a:6a:9a:7e:c9:
f0:6e:1e:d9:a3:d3:84:23:99:e9:e7:33:eb:41:92:
26:af:7f:55:c3:b1:96:62:85:61:73:ae:88:53:ac:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:24:D2:2F:A8:48:2C:09:01:76:75:04:B9:BA:00:FF:A2:32:B8
X509v3 Authority Key Identifier:
keyid:B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:6f:33:93:b6:b6:80:f3:b5:94:93:0f:f7:b8:62:ca:5d:f4:
5c:3e:18:d2:ca:f0:d6:80:19:2e:88:18:63:2c:d4:d9:3d:e8:
3d:b8:2d:89:36:90:93:9d:07:e9:55:b0:b8:51:8a:1e:3e:8b:
96:d8:e6:33:96:1f:b0:c0:6b:25:cf:3e:ae:f3:41:52:62:5e:
46:e3:72:dd:27:37:50:76:5d:c3:5a:ca:fd:b4:db:ca:28:7d:
49:4e:55:21:28:3e:9d:46:69:73:7b:84:da:94:df:23:7b:98:
2c:3d:aa:3b:27:ec:1f:1f:f8:ce:e5:69:39:84:69:fa:27:fc:
96:1e:bc:01:36:ff:a3:2c:77:c2:a6:e6:63:cd:1f:29:f7:76:
c7:c7:cb:1e:fc:29:fd:93:82:7e:57:e0:27:5e:d5:20:f0:6d:
48:dd:c9:24:cc:8d:a6:0c:dc:1b:53:4b:c7:ea:49:7e:d7:61:
09:f9:f7:df:e2:9b:8f:ee:20:88:5f:74:fb:2d:52:8f:50:86:
24:c9:ee:69:28:dd:5a:80:ef:a6:5d:b2:8c:0b:9e:17:b7:33:
19:87:b4:a2:50:6e:d3:be:65:d4:09:df:5f:91:45:fc:0f:58:
24:c8:31:4f:06:dc:cf:8f:d9:56:ee:76:9b:ac:e0:06:09:a1:
a2:28:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:54:55 2025 by rpki-client