Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: /aJXAtwQvY3lRaIYwTHjBlQ+q3U9SUC8ZJXjbOZq6SY=
Subject key identifier: 7D:48:25:60:84:50:60:DA:1E:67:CB:1C:A6:03:F3:B9:EE:5B:26:B2
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019676B12DD5A517A2EEA32F0102D6D22CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 0538
Signing time: Sun 27 Apr 2025 10:00:45 +0000
Manifest this update: Sun 27 Apr 2025 10:00:45 +0000
Manifest next update: Mon 28 Apr 2025 10:00:45 +0000
Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=)
2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: t1+5nU2mXnGpm5MMJi8gr1Fc7ce5i+AUuEUJZ8fLQUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:2d:d5:a5:17:a2:ee:a3:2f:01:02:d6:d2:2c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Apr 27 10:00:45 2025 GMT
Not After : Apr 28 10:00:45 2025 GMT
Subject: CN=7d482560845060da1e67cb1ca603f3b9ee5b26b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:fe:fd:e9:d9:86:11:58:1e:9b:cd:bb:dd:
ce:37:3d:8f:05:d7:c2:2c:48:ea:ad:9f:af:f4:2f:
ac:cb:9d:2b:cb:23:cc:73:93:d5:02:9d:22:97:9c:
ad:a5:fa:b2:ac:a7:df:48:a5:68:18:11:fa:59:ed:
15:c8:6b:b1:3d:3c:bc:6f:8c:b4:11:3b:2a:89:a4:
bc:91:0d:9e:df:0e:10:62:48:16:93:f8:49:5a:40:
73:41:3f:ce:ee:40:66:f3:ed:12:5a:7a:4d:16:c8:
cb:bf:e7:76:e0:b0:61:d8:0d:84:1a:4f:00:c0:57:
c6:34:40:32:2b:1a:f6:8a:a7:bb:c8:f2:b5:ea:61:
01:c4:58:26:2c:ad:91:bc:60:73:6f:df:b2:62:a5:
3c:97:b3:f4:c3:9a:a2:b0:93:81:31:08:e6:dc:46:
ae:96:2a:82:95:42:7d:cd:fb:f8:b7:60:76:e2:92:
20:dc:1b:f5:91:00:5f:17:47:65:38:32:6e:00:65:
f2:91:03:49:12:89:63:bb:99:4c:51:3d:9c:8e:88:
e4:de:96:1f:23:f1:2a:15:17:66:0a:3c:46:7c:f8:
d9:8e:b4:66:ce:bf:cf:7a:01:d0:b8:da:9c:10:90:
a0:51:d8:a8:9d:5c:cc:fa:28:9c:5e:3e:84:ca:d9:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:25:60:84:50:60:DA:1E:67:CB:1C:A6:03:F3:B9:EE:5B:26:B2
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:76:62:86:f4:83:4a:1f:98:5f:78:78:e6:b7:bb:2c:8d:87:
62:15:33:06:fd:4a:5b:4c:af:a9:cf:d6:a3:00:e5:94:6f:23:
a4:d3:ac:7d:86:86:03:85:7d:51:01:75:eb:e4:0b:01:af:53:
40:78:59:cf:46:78:0e:6a:04:4d:86:35:fb:90:bd:35:42:19:
fa:75:ce:25:d0:31:e3:62:76:12:76:75:06:21:0b:f9:04:b1:
26:e9:5f:fb:15:5f:db:f8:26:6c:1a:fa:7e:96:d0:f7:f9:5a:
ab:54:56:6c:d4:3f:aa:cb:d2:c1:3f:fe:24:34:e7:99:e9:56:
2b:96:6e:c7:e9:f0:bf:1c:ee:40:3f:51:e5:11:40:47:b0:60:
97:73:21:6d:1b:70:8f:e4:ae:31:84:e4:59:86:e5:33:2a:62:
16:c4:d7:93:9f:5a:d1:f4:17:d1:6a:f9:25:ad:d0:85:5e:fc:
40:f5:d0:c1:01:07:6a:e2:94:c3:76:ee:f2:1e:f9:4f:aa:11:
e2:2f:89:05:a1:0b:82:e6:50:e7:8b:fa:9d:97:2f:bd:48:73:
db:1b:0a:6e:10:5f:dd:2b:91:97:df:55:e1:65:a8:1d:9b:24:
45:96:03:94:5d:20:4a:50:0d:ab:5f:1f:f2:9c:0a:32:fd:b6:
3c:11:8d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:05:57 2025 by rpki-client