Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
File: tF9VYNefBKktehUPPtjaQwir6jM.mft (raw, json)
Hash identifier: 9vlblK799RDHoeYw3QavqBDwuWvtWKmdSys8XJQ1I5U=
Subject key identifier: FA:8D:0F:D9:9D:4E:21:D2:79:34:F5:1C:00:6E:08:18:53:AD:70:5D
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 019683C7EB2BC70EE5B1EB695FE6FF944688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
Manifest number: 109E
Signing time: Tue 29 Apr 2025 23:00:39 +0000
Manifest this update: Tue 29 Apr 2025 23:00:39 +0000
Manifest next update: Wed 30 Apr 2025 23:00:39 +0000
Files and hashes: 1: rFHksT2fJAQ7epdh-sMDgGR2SM4.roa (hash: Z/iFpAzmqAm2KrlQVqRFy4X3KTo7SXYWoBA5a7g2HG4=)
2: tF9VYNefBKktehUPPtjaQwir6jM.crl (hash: S8SgQ9pbK+oUspe9Zz1/SDWcbZgMnnsUSNCH1xRBK4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:eb:2b:c7:0e:e5:b1:eb:69:5f:e6:ff:94:46:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: Apr 29 23:00:39 2025 GMT
Not After : Apr 30 23:00:39 2025 GMT
Subject: CN=fa8d0fd99d4e21d27934f51c006e081853ad705d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:5c:04:9f:b6:38:53:d9:49:0f:72:1a:c3:
f9:a9:f3:c9:bc:54:90:34:f8:2f:e0:69:f1:ae:ab:
c4:e5:80:0d:6f:fe:73:e3:12:84:7f:d1:99:8e:e8:
b8:16:c3:69:54:73:dc:f3:57:d4:2a:e3:a0:4d:84:
8a:29:94:1a:72:b9:6e:21:50:ff:73:aa:8c:25:80:
9b:bb:08:ed:b3:a8:b2:57:e4:01:e2:a8:49:9e:d6:
12:e7:3d:a1:c0:25:57:2c:89:94:f7:52:65:97:69:
a1:c1:3f:aa:91:48:90:ee:16:8b:83:df:ef:60:8b:
0e:9a:b8:7e:b1:e7:fc:ac:42:7f:94:60:45:c8:55:
3e:45:ae:df:d6:e4:64:46:2f:42:f0:a4:7a:d8:38:
2f:4c:b5:42:ef:29:e3:86:30:81:f7:58:0d:06:51:
11:01:7c:a5:42:4e:3e:ad:7c:7b:e5:b6:31:1e:35:
51:5a:a7:9c:3e:c2:27:0d:53:b4:49:5c:f6:56:f6:
ab:44:a1:29:4f:bf:4c:c4:1f:81:1e:03:c7:4c:ad:
7c:c7:a2:97:1b:d5:c3:0b:0c:3c:b9:10:18:f9:c6:
08:84:ed:26:0b:e6:bd:68:2c:35:b6:af:39:55:5d:
d7:e4:6e:c0:98:91:5f:c2:65:b7:d0:b6:77:29:24:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8D:0F:D9:9D:4E:21:D2:79:34:F5:1C:00:6E:08:18:53:AD:70:5D
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:25:ad:33:61:af:08:e6:0a:44:99:94:7c:81:59:92:2b:57:
0b:c8:03:4b:83:7a:53:0b:2f:dd:34:f4:35:62:c8:61:7c:ab:
15:8c:17:d4:5e:37:ef:fa:39:7c:94:6f:15:e0:fb:fd:1c:a3:
16:0b:7f:a7:f8:89:c9:1d:e6:80:eb:cf:c8:1c:6b:54:ba:40:
26:a4:b4:9c:7f:0e:76:65:c9:1d:3e:57:e9:8b:7d:4d:b3:a6:
67:c2:da:9b:bb:96:b6:69:9c:0c:5f:50:ef:68:91:89:b5:5c:
d2:7b:12:90:51:67:54:31:95:68:05:e9:8e:84:4a:43:44:5d:
03:f6:dd:64:e4:1b:b6:cb:f6:bd:c0:e4:e3:c6:33:2b:20:a4:
3a:43:c9:8b:fc:40:d9:3d:25:e5:2f:5f:2b:89:a3:50:b6:76:
d6:c0:78:01:d3:97:91:f0:a0:c8:08:fb:5f:cf:18:2c:d9:2c:
f5:8e:0f:39:58:93:d8:2c:81:b2:c3:c0:b9:69:35:37:8d:b8:
36:20:6f:ff:86:f2:56:cb:d6:30:4f:17:fb:5d:47:dc:0f:fe:
9b:ae:0a:ef:d0:44:da:cf:69:99:28:54:7d:b0:3d:00:20:0d:
1b:fb:36:da:9e:2a:ee:b7:97:7c:97:8d:c5:8c:af:bf:fc:5c:
d8:d8:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:02:33 2025 by rpki-client