Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: tKX0EiBw+2cYokwV7MZ1hnfDZ3Af9b1WUsnvmMpDn6o=
Subject key identifier: 7D:B8:C8:9C:28:35:14:39:34:E7:27:47:50:C9:41:C3:BF:F4:BA:B6
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01967C30BAD4AF3935B1B7DEA69CB4C82716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 0D0F
Signing time: Mon 28 Apr 2025 11:38:10 +0000
Manifest this update: Mon 28 Apr 2025 11:38:10 +0000
Manifest next update: Tue 29 Apr 2025 11:38:10 +0000
Files and hashes: 1: 0I1Z0G38n0YJrpY9RYQTiEbwkeU.roa (hash: nhISjkHrGUdu9DkOm+JicyPkRd7uOy5I5pZByrTsVVE=)
2: 4Jp18k3WgZxFLlIl31FziAZ_pyE.roa (hash: Rdy6GJGskKOgLLcQAYAa6TgfgY93QdTyE4LXA4WR8FE=)
3: J-mZDParjvz3ljIfTzlhasavsBo.roa (hash: X+bwHIE0wlCUwYusUU0uKi4Yc/Kz9/L2eOGJbsIOXJw=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: mnxCetQguIgGW0hv7aKiNEPSXJfoq1TFx/kURgOLp0c=)
5: cxjVghHfKz7r8jK0ajPAm20QF-U.roa (hash: HPsMihI6S6ZtrZUoih477ooLtwdT/SYfO2io/vTyfY8=)
6: d852wo13D922O1kxvHO2L_8C0MU.roa (hash: HBCOzohfyjSX600EtZoiv9El3W7QzIDEos4plB6TxSI=)
7: jIbMiSFlsQdlGZXR1HxPoO5c35o.roa (hash: QE4Ii8v6WxF41ed0I+H7egny9WwHZOU3Z66ypjFLn7Y=)
8: wHe63tLHFMK7NBW2SYijpGxUNgM.roa (hash: CT+CH4LtTVHno3GtUxYN9M1xC2YXqLCYEq0QekucUtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:30:ba:d4:af:39:35:b1:b7:de:a6:9c:b4:c8:27:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Apr 28 11:38:10 2025 GMT
Not After : Apr 29 11:38:10 2025 GMT
Subject: CN=7db8c89c2835143934e7274750c941c3bff4bab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:05:f3:35:42:20:54:1e:e9:f5:eb:bb:ad:
99:fc:66:0e:53:18:6a:bb:10:d5:51:2c:75:d0:76:
a2:11:19:c3:c8:c8:80:34:62:c3:00:07:90:93:3d:
1d:f8:ef:ed:a8:23:5d:f3:af:6b:21:76:6e:16:47:
3d:85:9f:80:b1:f7:94:38:ab:31:39:3a:0b:69:09:
de:47:16:a2:af:a0:2d:67:d3:02:db:ef:6b:d8:75:
66:ba:0e:5f:3f:f3:ef:e6:ca:58:cd:f1:91:8e:96:
df:2b:36:9f:f7:f3:66:71:5b:e1:d1:06:45:1d:19:
99:b9:b4:19:c8:a4:af:83:bf:ea:26:c6:ee:45:e9:
e7:70:dd:66:f8:bb:10:9d:c8:ae:ee:d0:ac:ee:7c:
e6:13:01:1c:02:5f:46:44:f2:31:b9:4f:c2:3b:d6:
20:b5:76:7f:c8:2f:9a:8c:eb:3e:6a:88:46:25:d9:
c0:dc:d9:94:73:60:ad:87:4b:48:73:55:e5:7b:7e:
a3:6e:49:45:8a:16:fa:f5:71:f5:30:a4:e8:9a:d3:
1b:11:5a:fc:b6:16:fc:58:d3:7c:63:c3:df:f1:7a:
8b:3c:d2:f2:de:96:c4:ba:94:b4:46:2a:8f:d3:a4:
cf:bd:8b:62:5b:62:f1:ba:02:e9:ae:30:7c:32:a8:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B8:C8:9C:28:35:14:39:34:E7:27:47:50:C9:41:C3:BF:F4:BA:B6
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c8:61:53:34:b3:48:70:94:12:53:a7:5c:db:d3:45:ed:48:
f0:ca:59:28:59:85:e1:16:ef:46:38:98:82:d4:dd:e0:c7:5f:
8a:53:27:0c:28:70:61:da:d5:3a:c3:f7:e1:cc:11:cd:b0:f7:
b9:ec:ac:5e:cd:d8:6a:d9:89:f1:1a:ab:e9:38:4f:ee:ef:66:
34:6e:3d:07:08:cc:ca:ea:1f:8c:4b:3b:45:bd:37:c0:31:c1:
5e:4b:92:ad:3d:ef:5d:4b:55:4b:db:77:ac:3d:41:e1:c6:4c:
d5:35:5e:9e:70:ac:19:9a:93:f5:65:32:3b:a3:71:ea:9b:41:
16:2e:72:ee:55:c9:a7:24:b7:d2:5c:e4:40:87:bf:17:b7:06:
37:9a:16:59:ae:b5:a7:15:8c:15:21:9b:62:2d:0b:c7:43:63:
5b:d7:e0:cd:0f:f3:a3:81:fc:c5:38:6a:15:7a:ac:0f:ad:0f:
4b:83:20:fb:43:3d:35:1a:76:98:08:ca:4d:4f:52:eb:80:25:
64:4e:93:fe:29:f1:3f:e2:67:7d:51:ae:04:39:46:bf:c5:d5:
f3:51:5f:7f:1c:aa:5a:10:e4:21:46:3f:8f:da:e9:85:f7:bf:
4b:ae:aa:99:95:8c:75:9b:43:20:2c:ab:37:61:6f:5f:d1:5e:
89:f2:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:08:15 2025 by rpki-client