Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: NrrMEANhfL8R9kQPHyzPk2aBq1XENrUbDqAhx4MqPfo=
Subject key identifier: 6A:53:FE:0C:5E:45:E7:68:75:DC:BC:D9:5A:4B:A7:03:5C:AC:10:C7
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 019675676AAF8F70A769D62C0773F2B63BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 0E0A
Signing time: Sun 27 Apr 2025 04:00:33 +0000
Manifest this update: Sun 27 Apr 2025 04:00:33 +0000
Manifest next update: Mon 28 Apr 2025 04:00:33 +0000
Files and hashes: 1: t79WdBqxFFntJ1dx66Q8iAsYk1A.roa (hash: Pk/lATHQMHKBJ7PlIPPnor0o8ARLjsDurmPSUe+LfCo=)
2: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: ZyxFtSVE0FGsc3xXL2XOMHCJxJCG5wLhwJbiMAoXbwQ=)
3: vM1WQhwz3cRdhRzRWZYRS2EG35U.roa (hash: 6cZcrnHWZ9ymPZFFF87v+vfASbgITAqQf6OR2I+DcbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:6a:af:8f:70:a7:69:d6:2c:07:73:f2:b6:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Apr 27 04:00:33 2025 GMT
Not After : Apr 28 04:00:33 2025 GMT
Subject: CN=6a53fe0c5e45e76875dcbcd95a4ba7035cac10c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bc:d6:5f:81:44:63:cc:eb:37:a7:13:5c:10:
18:aa:63:a8:01:6b:55:16:f6:1a:53:28:a4:46:df:
94:6e:ea:c6:e0:cf:ae:d3:c9:0e:31:3e:25:93:15:
70:02:f8:bf:f6:5b:95:6a:b0:3d:58:47:c0:15:f6:
94:b2:e3:40:23:3c:3d:f0:05:7a:c8:b5:76:59:73:
07:1f:02:b6:14:99:95:90:af:cf:68:3c:9b:51:f9:
90:14:82:33:0e:fc:3e:dd:4a:b4:3e:a6:c6:5b:61:
88:eb:ed:dd:cf:ed:86:5e:b9:6c:6a:a4:b4:14:eb:
02:2f:e1:8b:55:9b:c3:65:67:05:8d:b6:9c:ba:40:
d2:1a:11:5a:9b:01:df:61:12:90:d2:0d:d5:9b:5a:
61:0f:6b:54:e8:5c:d8:1b:b9:53:fc:d7:1e:69:55:
b5:14:f2:d5:bb:44:d4:8e:a3:f5:73:9e:37:94:66:
05:30:e9:f5:08:38:21:3c:08:e9:bd:71:6b:ca:f5:
8e:c2:41:b3:86:27:92:70:4d:86:ae:88:0d:f5:24:
4d:27:74:31:16:9d:05:c8:bd:6f:dd:aa:1a:06:03:
9b:06:7b:24:6a:54:d9:7c:63:7b:f3:71:86:7d:49:
92:f3:f0:fe:e2:aa:8e:b9:11:9a:06:28:61:a9:12:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:FE:0C:5E:45:E7:68:75:DC:BC:D9:5A:4B:A7:03:5C:AC:10:C7
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:af:c2:fa:13:ae:5c:fd:3a:53:9b:c3:a8:f4:40:05:25:e3:
bb:e7:3b:c3:61:42:4b:da:a2:cb:93:92:98:b2:47:84:6b:ab:
ce:34:9b:72:a9:78:a0:8d:6c:e3:84:79:08:65:b1:21:08:a1:
92:79:c2:98:f1:5d:04:68:9a:60:b7:8f:2c:53:27:05:dc:00:
1d:12:5d:26:f7:45:bd:db:aa:15:62:c4:eb:7a:1f:e3:4f:32:
b6:8d:b2:21:06:4c:ca:62:18:66:ad:5a:ea:c4:d1:4f:be:e5:
48:2c:c8:80:77:6d:dd:6f:35:2f:12:9b:40:f1:12:d3:83:01:
69:e8:ed:1f:08:e8:5d:74:8f:4f:44:3f:a1:36:28:7d:5c:9b:
7f:d5:e4:d7:85:af:41:fc:4b:2d:9b:55:74:35:c7:36:4c:52:
4c:ce:bf:95:00:23:23:88:3b:86:1d:02:7a:e5:58:7b:94:f3:
ac:9f:b2:b0:f1:67:53:73:b1:94:f5:a9:3b:34:a8:25:78:b4:
77:7d:12:a0:97:97:e3:55:0c:5e:db:e8:32:ca:f2:8a:d9:9d:
f1:58:e7:cf:bb:31:7e:db:7a:ad:f8:fc:ed:eb:dc:d3:71:24:
3c:76:8b:6d:65:87:7a:08:7b:f1:b7:41:72:c9:f2:de:a4:e9:
98:e4:ea:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:04 2025 by rpki-client