Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
File: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json)
Hash identifier: qlhOs3BqcTIIGXv+PC+WqkrfjNjukxQ9PH82dvv2Jd4=
Subject key identifier: 2C:2A:CD:A6:26:31:07:C0:21:7B:D0:60:4F:54:66:C8:C1:86:CD:A8
Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
Certificate issuer: /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Certificate serial: 0196759EB70E75020191E7006F3AF763C7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
Manifest number: 01CA
Signing time: Sun 27 Apr 2025 05:00:57 +0000
Manifest this update: Sun 27 Apr 2025 05:00:57 +0000
Manifest next update: Mon 28 Apr 2025 05:00:57 +0000
Files and hashes: 1: 1-KGFkp6-58CAfMM59AAzTBwEK5A.roa (hash: LpeybfjrfgjM/OjVBSR68hbsEhIa7z+y+IoR5F/Kfmc=)
2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: zaae1V9QxFPjCKXpdjiK1n0xC4QQmP7qJ0KdLt1i/VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:b7:0e:75:02:01:91:e7:00:6f:3a:f7:63:c7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Validity
Not Before: Apr 27 05:00:57 2025 GMT
Not After : Apr 28 05:00:57 2025 GMT
Subject: CN=2c2acda6263107c0217bd0604f5466c8c186cda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:46:93:b5:64:25:47:e8:a3:4b:40:d5:1c:d7:
31:24:1d:c4:22:1d:af:c5:15:54:b7:d1:aa:a8:7b:
36:2e:46:37:84:ab:13:7c:f8:4b:c2:ce:ff:af:77:
26:e4:c1:9e:f6:4b:c1:e6:4d:89:df:be:4f:8a:66:
e3:6f:03:2d:5c:8b:16:f1:14:1b:2a:69:92:0e:e8:
74:f6:08:74:55:4c:06:d9:7c:47:77:16:b1:d2:d3:
33:66:9b:08:18:c1:43:ee:2f:41:3a:01:6b:c1:cb:
d8:e1:21:35:86:c7:42:15:e4:73:11:6e:a0:67:cc:
f1:2d:7b:a3:ba:db:1e:c0:92:97:ee:4b:44:13:31:
f9:51:fc:a9:8d:6d:b8:df:d0:2d:f1:05:85:52:cc:
e8:01:7b:7c:5a:18:ca:4d:c0:97:84:bc:b2:7e:e0:
15:cc:ba:2b:83:5a:c5:4e:43:c9:bc:b0:26:9b:f7:
98:d4:d7:5f:23:19:5a:e4:c0:67:45:ce:0c:23:c7:
9f:28:7d:6f:aa:03:91:6f:c2:9c:ca:18:5a:3c:00:
fd:2e:d3:cf:f9:39:db:99:1d:f6:30:49:27:d6:54:
ae:c9:bb:37:52:a5:54:8e:c4:5b:24:1b:10:37:08:
40:1b:44:a1:bc:3a:ef:32:22:72:d2:11:a7:ed:79:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:CD:A6:26:31:07:C0:21:7B:D0:60:4F:54:66:C8:C1:86:CD:A8
X509v3 Authority Key Identifier:
keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2d:cb:b0:d2:7e:a3:34:48:e9:76:29:90:e7:23:91:24:f9:
29:63:84:20:bb:ba:34:51:c8:b5:58:91:9c:67:bc:dd:6b:93:
84:29:35:92:ba:c4:7f:48:e9:63:44:99:d6:e1:7b:46:44:5e:
16:52:28:6b:e8:16:a9:bb:61:88:33:ef:15:0f:6c:48:e3:f6:
aa:b8:dc:39:71:4c:2a:ef:6b:a3:9b:d3:67:02:02:7d:9a:29:
8d:34:9d:c4:1f:51:a5:5a:3c:6a:5c:cb:e4:56:92:b1:1d:44:
73:fc:b4:fb:f8:82:f3:e1:d3:ac:49:dc:1d:3d:83:ca:ef:d7:
51:b4:9d:83:4a:5d:fb:49:54:c0:09:c0:3c:bf:f1:c5:19:14:
18:51:98:eb:be:2b:dc:6d:7c:57:bb:04:08:1d:b1:4e:9e:76:
a6:b4:ac:97:41:1a:4d:12:5b:07:7a:80:66:c7:47:3d:b4:d0:
d7:97:19:f1:ff:dd:ca:7d:63:24:db:37:a2:75:05:3b:98:00:
48:21:85:4a:0d:6a:48:6a:7a:19:98:1f:ff:ef:53:7d:5b:17:
bb:ba:37:d3:35:37:b7:c0:06:d4:03:81:df:67:8d:a2:25:ba:
6a:94:69:ea:c5:dc:5a:5a:f3:fc:1f:75:fc:dc:32:28:14:3e:
25:3a:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:16:41 2025 by rpki-client