Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: NvC5gviqzWp1io3pjG0A4fTU8TW6J9AgWZ7ILaBBesM=
Subject key identifier: CF:09:3A:96:6F:04:4A:AC:CF:05:F4:49:3E:CA:B0:6C:F0:2F:CC:D3
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 019688B792839684A51A10750C5DD954290D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 22:00:53 +0000
Manifest this update: Wed 30 Apr 2025 22:00:53 +0000
Manifest next update: Thu 01 May 2025 22:00:53 +0000
Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=)
2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: 6G2ZcGxJusw9me7N2U1W3nmLRzCiGykIvO2L4gRIXF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:92:83:96:84:a5:1a:10:75:0c:5d:d9:54:29:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Apr 30 22:00:53 2025 GMT
Not After : May 1 22:00:53 2025 GMT
Subject: CN=cf093a966f044aaccf05f4493ecab06cf02fccd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:04:26:c0:5c:c9:97:96:e7:b7:16:93:b1:
0b:e0:ab:44:0b:af:ff:50:e3:31:21:0a:e1:34:f6:
5e:e0:35:34:3f:c3:56:99:9a:ce:96:0b:7c:b3:6b:
11:ec:d9:e1:89:a7:5b:f3:12:a2:43:02:45:28:62:
94:48:ca:04:47:d7:4c:6d:65:db:60:2a:06:c7:ea:
b4:f7:2a:27:13:6e:42:fb:03:59:22:88:4c:e7:6d:
7d:5f:af:ec:fc:32:05:fd:40:c1:13:fd:c4:5c:b0:
75:05:4b:07:b7:c9:ab:4d:c6:54:bd:bc:76:84:fd:
af:27:7d:7f:3a:a2:cc:ea:49:f4:e4:fe:74:af:a7:
c0:27:fb:60:de:84:71:77:54:35:ea:e0:f9:49:61:
27:fc:42:8f:ae:79:08:57:8a:2d:b7:19:84:e9:66:
12:14:3d:80:9f:72:a3:51:00:f8:bc:96:75:3d:17:
86:3e:94:9b:9a:92:1e:f8:2e:b2:a1:62:47:6d:93:
a9:18:d8:0b:50:35:43:5e:37:48:07:ef:03:5a:b1:
cb:29:21:c3:e6:92:64:6b:ed:ac:eb:06:60:62:d6:
eb:4a:75:1e:d9:fd:cc:57:a9:ae:ec:21:df:c5:4c:
1d:d4:75:e7:54:46:8d:b1:87:02:4a:67:6d:c5:55:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:3A:96:6F:04:4A:AC:CF:05:F4:49:3E:CA:B0:6C:F0:2F:CC:D3
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cb:87:08:d9:5a:80:54:ad:db:dd:c5:ea:7a:21:bf:01:a4:
58:b2:7a:23:da:41:24:ba:29:03:57:12:5a:ae:33:d5:5b:7a:
20:2f:a0:c7:e2:2c:93:02:7e:98:98:12:41:03:c3:5e:3a:a2:
44:4e:48:d0:9d:dd:85:9a:25:8a:31:76:54:83:ef:3c:09:fb:
01:59:3b:ed:93:3b:6e:e4:12:b7:51:9b:a0:70:57:72:73:d1:
1d:22:1e:9a:94:9c:d8:fd:93:f5:e9:69:f2:ab:87:e7:92:10:
d5:20:5b:fa:f4:1f:bc:49:0f:ba:10:35:aa:a2:1d:c2:d1:fa:
32:7f:e7:37:8e:ef:36:bd:a9:04:df:93:ea:69:c9:14:1c:53:
95:f4:c3:54:37:c2:92:8d:9d:b9:bb:20:07:8a:10:47:09:4e:
fd:9a:47:50:f3:5e:09:d6:86:1d:65:f1:79:b9:2f:06:cd:c0:
d4:05:ec:aa:df:85:54:2f:e0:5e:41:98:c5:ab:63:51:88:21:
6b:c5:dc:a5:c1:c4:01:b8:27:5f:53:9d:2c:24:a0:fe:40:15:
e0:c5:a3:7a:82:76:40:72:18:c6:62:87:b3:37:56:9b:8b:b6:
be:5c:67:be:a7:2f:79:31:47:68:4d:2d:82:67:1f:b6:94:ef:
38:dc:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:58:08 2025 by rpki-client