Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: myOXP5umBe3K+44jv+cXAJmhnpW9tFj1p+GdcIrt0Qk=
Subject key identifier: 2E:C1:0E:3E:69:BE:26:62:59:26:C5:8B:CF:30:69:C1:60:97:6B:F0
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 01967A574394F8D108A57BF1ACA7802A3CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 03:01:01 +0000
Manifest this update: Mon 28 Apr 2025 03:01:01 +0000
Manifest next update: Tue 29 Apr 2025 03:01:01 +0000
Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: Nw5O6VkUmxqckQxcddtRTslBJwK9xwk2k3od8eqpTaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:43:94:f8:d1:08:a5:7b:f1:ac:a7:80:2a:3c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Apr 28 03:01:01 2025 GMT
Not After : Apr 29 03:01:01 2025 GMT
Subject: CN=2ec10e3e69be26625926c58bcf3069c160976bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:fc:e7:12:16:76:3e:ea:35:53:62:3c:e8:
5e:fd:6c:8d:73:34:4a:54:62:e4:16:3c:9a:d2:54:
da:2f:98:a4:01:a4:86:24:f2:85:95:8f:0c:66:cb:
d4:d2:9d:97:34:8f:2a:19:b4:e0:a7:e9:37:de:23:
60:83:61:3a:52:18:da:27:07:fb:c3:40:db:5b:da:
1a:e9:24:ef:b3:72:29:01:0d:70:a4:d6:c5:89:2e:
6e:f4:8a:ba:f4:19:8d:e9:a4:16:a4:12:ea:77:45:
ca:fe:b7:2f:dc:63:46:5e:88:17:68:20:2a:93:ca:
85:69:f9:73:d0:5f:9a:20:b6:65:c0:62:b2:e0:ac:
8e:df:1d:a2:2a:9b:a7:da:c6:10:78:15:e9:e9:80:
51:0e:a0:f5:46:b2:b2:55:c4:6d:75:51:00:cc:de:
c9:82:8f:45:75:7c:cd:23:01:a6:bf:68:d3:8b:4b:
48:e5:f9:cc:d5:59:b5:a1:f2:4b:09:02:98:8e:c8:
19:5e:e7:3e:2a:65:d0:63:28:6f:84:ac:66:e5:e2:
d4:5d:71:9d:9d:1d:e5:dd:66:f7:93:ab:64:06:53:
91:03:04:fb:16:78:c5:cb:f6:2c:7b:dc:20:1c:71:
b7:e0:dc:bf:99:18:bf:2e:74:2d:71:30:f2:05:8f:
06:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:0E:3E:69:BE:26:62:59:26:C5:8B:CF:30:69:C1:60:97:6B:F0
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:57:dc:59:3d:d3:de:d9:76:25:cc:43:d0:74:d7:31:8b:c4:
92:9e:bc:ae:b9:b2:7e:45:c6:b7:46:7e:32:bc:f0:7b:21:be:
55:0b:9a:f9:15:87:3d:f7:21:7e:c2:3d:d4:3f:f6:a7:b8:34:
4e:e0:e5:12:e0:ab:ae:2b:82:3b:f4:59:72:2f:b2:dc:21:e0:
bd:7c:a7:a6:95:dc:8b:1e:cd:bd:9c:3a:1e:2e:85:47:5b:68:
e2:47:44:26:48:97:2d:4b:69:23:cb:ca:49:bf:2e:68:a3:29:
9f:ce:e8:91:37:47:50:e7:89:6b:e8:a1:19:1c:11:2b:b0:0e:
58:eb:57:e8:ed:b0:33:8a:90:e5:13:dd:c6:ca:66:94:2c:ff:
d1:88:b8:45:67:d3:b8:44:73:2c:91:70:f6:9e:62:45:8b:d1:
82:2c:da:81:44:9c:b9:0b:ac:53:59:13:01:b3:b9:1d:42:4e:
f0:27:c1:62:0b:68:95:28:80:3d:fc:b0:87:a0:64:68:f7:43:
e1:00:45:ae:4f:29:62:2e:3b:00:f2:6c:46:b2:55:ab:8b:e7:
10:5a:ea:1b:0c:82:40:bb:e4:6f:68:8f:99:d1:0c:58:dc:46:
0a:67:6a:e8:0e:81:cb:64:cf:68:34:ea:0f:e8:9b:af:e2:3b:
85:28:e2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:37 2025 by rpki-client