Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: 1+HRWPvdmau3U8OZMhnpTY1lW2iUS5uX+Nm0saKgkrU=
Subject key identifier: 4A:42:05:C4:1F:64:B8:D5:4D:D8:E6:89:A3:AA:94:7D:C6:0E:D2:CE
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 019682472B531978F69C7B96D3E556A5F843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 151A
Signing time: Tue 29 Apr 2025 16:00:24 +0000
Manifest this update: Tue 29 Apr 2025 16:00:24 +0000
Manifest next update: Wed 30 Apr 2025 16:00:24 +0000
Files and hashes: 1: 9tr6yx1y8_YEiVByZ-MjQoIJAHM.roa (hash: jRgj+xVS51Pyi7Ww5Lf3Hkb3VrgrulAoFq5wFotKWJs=)
2: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: GrQtg27KfgQpjFfMd0hyOd1MaeUmOnMbaCZkRdh/wYg=)
3: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
4: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:2b:53:19:78:f6:9c:7b:96:d3:e5:56:a5:f8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Apr 29 16:00:24 2025 GMT
Not After : Apr 30 16:00:24 2025 GMT
Subject: CN=4a4205c41f64b8d54dd8e689a3aa947dc60ed2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:40:ed:ce:02:70:6d:7f:23:0f:71:03:39:
fe:49:08:87:32:f8:74:67:d5:2c:25:42:65:11:fe:
e6:0e:04:ce:8d:dd:2a:ca:51:f4:b6:b3:cb:d2:e4:
71:58:6c:5d:4a:4f:f2:ba:4e:7e:e7:47:99:c3:4f:
fc:00:1a:15:20:38:0b:f1:89:b8:7f:97:cd:de:06:
9d:9b:e2:21:76:fa:a6:d0:bc:65:bc:80:60:86:f6:
9c:d5:c8:17:88:0a:ec:c8:a1:9e:a0:79:18:e0:66:
a5:d4:c2:5e:aa:f2:8f:a2:c8:7b:35:29:8f:62:8f:
82:2d:26:1f:9d:a8:08:88:cf:3f:f3:5f:41:b5:18:
1e:b3:a8:c0:f3:7c:fd:a9:60:d1:0d:83:b9:6f:78:
67:b4:58:55:11:4f:87:54:0f:26:33:3f:ad:1b:78:
f7:67:35:c8:3e:40:34:91:2d:6c:81:eb:b0:d5:46:
9c:20:99:00:1c:2b:3b:16:2b:bd:36:1a:10:c3:83:
fb:98:d7:b7:21:f2:6b:6f:c7:36:14:c2:d6:e1:09:
e8:4b:4a:17:8d:b1:a6:95:f7:23:55:5b:47:d5:b6:
27:d6:4e:80:ed:a7:68:94:79:b1:64:e5:dd:45:e1:
93:48:96:df:74:77:22:3b:0d:c2:90:9b:ce:42:36:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:05:C4:1F:64:B8:D5:4D:D8:E6:89:A3:AA:94:7D:C6:0E:D2:CE
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cb:6b:1a:82:8d:d7:a1:70:e6:f6:03:95:e1:f4:f5:26:a6:
e1:9b:fe:e9:5d:95:48:69:30:59:57:cc:98:8c:36:d4:74:91:
d4:9f:93:f9:7e:5b:45:f3:1f:b3:71:a5:a3:16:96:66:5c:7c:
50:38:0c:a5:78:40:7b:6f:4b:ec:9c:84:d0:ab:4b:c0:4e:43:
4d:7b:3b:27:98:ea:9a:5a:75:55:00:cb:52:40:d5:e6:10:3c:
46:d8:d9:93:09:45:a8:2b:b8:13:39:d1:15:21:b4:8e:e0:4a:
8a:5d:7e:9e:21:12:d2:d8:70:52:b2:f2:0d:67:57:37:01:dc:
e5:17:04:5d:bb:da:a9:68:d2:20:bb:4a:68:02:33:aa:ec:19:
40:84:5a:e6:b7:49:b0:f9:7e:16:99:db:26:41:e0:fe:ea:f1:
7d:71:f6:00:33:c2:82:94:49:d0:51:79:ee:a1:92:cf:34:ec:
e1:3e:9f:1b:ec:6b:f3:dd:ac:e3:32:3f:2f:d1:2b:8a:b8:86:
e1:0b:95:5a:a9:8b:89:0e:9a:ad:31:41:c7:0f:b7:f9:79:fe:
30:04:cd:c6:87:5a:e1:25:ea:24:91:01:d5:4f:b2:75:3a:a4:
89:b8:43:2f:b4:8b:2c:a8:af:ef:ba:e8:a3:33:88:74:20:50:
ef:e3:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:29:58 2025 by rpki-client