Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File: Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier: H+yrB99twhIGng6HJfXi/dYRWyW8TzfjPc3qMRLSeIM=
Subject key identifier: 58:B6:47:F3:00:6D:A1:4A:E3:5A:D2:BC:22:80:28:F8:1D:C7:F7:0C
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 01967C7C3BCB6C591B2229010B1BD8FF1F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number: 151A
Signing time: Mon 28 Apr 2025 13:00:38 +0000
Manifest this update: Mon 28 Apr 2025 13:00:38 +0000
Manifest next update: Tue 29 Apr 2025 13:00:38 +0000
Files and hashes: 1: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (hash: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=)
2: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: E5sUX9neaQXg29ub9ii0oAd1EGbo+vnAVUDOto2KXYk=)
3: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (hash: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:3b:cb:6c:59:1b:22:29:01:0b:1b:d8:ff:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Apr 28 13:00:38 2025 GMT
Not After : Apr 29 13:00:38 2025 GMT
Subject: CN=58b647f3006da14ae35ad2bc228028f81dc7f70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:c2:58:8c:88:0a:4f:66:bb:1e:98:52:45:
44:1c:56:31:a8:57:6f:6e:d9:2a:52:bb:72:2f:ad:
1d:e2:10:1d:69:db:9c:b0:0f:89:39:bd:9f:f4:92:
53:64:02:70:b9:6a:8b:7d:2a:2e:d7:c0:ae:cf:1f:
23:9e:59:8d:06:26:0f:fa:fd:27:58:fd:0c:4c:c0:
73:ba:73:45:ab:ca:ad:10:45:5e:09:5f:c8:bc:32:
db:e8:64:4a:25:44:5b:d0:16:9a:cc:8c:5d:cf:ca:
83:7a:de:dc:da:2f:17:ca:96:76:68:dc:99:42:55:
29:51:a7:29:31:8f:ff:54:9f:53:91:18:6e:b7:b9:
05:6d:35:46:3d:ee:cb:5e:df:48:98:0b:f4:db:96:
94:b1:e1:20:6d:ed:fe:d7:9e:ed:60:6a:ff:8f:fc:
c9:ba:30:d4:ff:5e:33:5a:12:42:9c:e7:42:cb:d3:
8f:f7:c2:aa:52:12:d1:2e:e5:a3:38:29:e0:68:8a:
73:1d:f1:ad:06:15:36:ec:b9:91:a8:ec:33:85:62:
49:68:18:c3:6c:88:2d:f6:61:df:dd:c6:4c:6c:42:
da:88:47:6b:a7:68:7a:57:b3:a9:c3:72:ec:03:22:
e8:62:33:59:b3:bf:e4:97:6a:4b:8a:76:7a:16:5f:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:47:F3:00:6D:A1:4A:E3:5A:D2:BC:22:80:28:F8:1D:C7:F7:0C
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:20:69:72:35:5f:29:cb:bc:fb:25:71:25:9f:41:53:fe:2b:
c2:12:81:e1:0f:f3:06:15:1f:a1:a6:7a:05:b6:d9:6f:2f:ca:
96:a4:b9:72:12:a6:9e:b9:66:d5:5c:4b:c8:e2:8f:c8:21:03:
ba:bc:54:05:d2:bb:65:2a:12:a8:00:e9:d4:90:23:fb:b4:db:
8e:fc:e2:87:e6:00:04:ed:4a:d7:55:5b:39:1f:a0:10:67:83:
ed:52:5e:77:f1:b9:1a:86:8c:1e:c1:97:ea:63:69:12:f3:dc:
7c:04:87:4a:23:fe:ef:c8:5c:8c:59:fc:83:67:8a:34:72:64:
0e:9e:25:a7:0c:25:a9:75:07:a9:bd:5a:7d:00:e2:53:c4:39:
5b:fe:52:c2:7c:0f:10:11:df:25:9c:90:54:f3:72:e1:ac:16:
33:57:73:e5:77:be:3f:5b:22:47:cb:d9:74:07:0a:0c:e4:4b:
b6:27:5b:65:d4:01:26:d4:c8:83:e0:9e:2f:c8:16:93:bf:cc:
07:53:75:ea:2e:b1:50:e3:b7:5f:2c:c3:78:9f:87:c7:3a:7f:
74:95:e3:5a:16:59:5e:b5:68:ff:e9:ec:f9:d9:e9:83:ad:2a:
f6:9e:13:a8:31:6b:3a:35:17:c8:d1:5e:e1:24:cc:04:a8:d0:
06:e8:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:43:15 2025 by rpki-client