Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: /mV3Gq87sQ9IY7DvOZ7clrmb6nrKP7uYadEdiSBkqVg=
Subject key identifier: AD:53:06:B8:71:6C:79:DE:E4:3F:D0:97:B8:B0:62:DE:36:E1:CB:66
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 019676B0B72663345158676E4A0012A0B15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 0DE8
Signing time: Sun 27 Apr 2025 10:00:14 +0000
Manifest this update: Sun 27 Apr 2025 10:00:14 +0000
Manifest next update: Mon 28 Apr 2025 10:00:14 +0000
Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: r4cq7Rd7sfLWbMTMvkfrp+GQ5QOu5mybr9D1CihCcVs=)
2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:b7:26:63:34:51:58:67:6e:4a:00:12:a0:b1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Apr 27 10:00:14 2025 GMT
Not After : Apr 28 10:00:14 2025 GMT
Subject: CN=ad5306b8716c79dee43fd097b8b062de36e1cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:0e:1c:77:9f:7b:d2:21:5d:c3:a7:5f:5b:
1c:df:57:9a:e5:f3:78:1e:73:1e:53:93:88:51:46:
4d:fc:11:5f:0f:66:3b:7e:c3:31:ad:f8:eb:53:51:
7d:f2:c0:a1:57:39:c6:28:dd:6f:45:b6:9b:18:9f:
0b:70:3b:bd:24:46:78:d4:c8:fa:6c:c2:fd:3f:f3:
37:61:d6:75:72:ba:6f:00:4b:e4:b8:cd:42:fc:49:
74:3a:f1:53:a5:fc:dc:b4:7a:7d:84:33:6e:8a:34:
11:13:d1:3f:88:c4:4a:bb:e8:a0:e3:3a:e1:fc:10:
ce:fc:90:cb:7b:9f:97:63:d2:b5:ea:6c:53:52:e4:
ad:a1:4f:c4:92:c3:1a:8a:54:0a:16:97:e3:08:1f:
3a:6d:56:a8:ad:ef:2c:5d:2b:1b:5c:2a:04:0f:59:
4d:46:bd:94:11:46:44:a0:7f:a1:9b:d0:66:45:b1:
3c:e4:11:96:e1:36:88:ed:0e:56:e2:5a:b3:4a:54:
77:11:2f:2d:74:93:e1:e6:dd:03:84:69:dd:a2:8f:
43:20:4c:ef:f3:10:db:8a:ff:a2:14:99:97:fe:ea:
77:d3:1b:a6:5e:b8:14:54:64:de:87:43:05:ad:04:
41:88:ed:67:56:1f:fd:12:bd:64:35:2c:64:d4:77:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:53:06:B8:71:6C:79:DE:E4:3F:D0:97:B8:B0:62:DE:36:E1:CB:66
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b1:0e:5f:25:35:5f:18:e0:89:c2:a1:35:aa:45:9c:7c:a2:
a9:98:25:3e:24:9f:06:a4:0b:1c:8e:fe:19:41:8d:04:da:38:
28:bf:44:36:4a:f7:9b:42:8b:fc:9d:10:d3:1f:19:46:06:ed:
62:24:b2:ef:74:98:a1:d8:4f:d1:45:84:b4:bf:b9:32:ff:a5:
ee:e4:f3:be:d6:43:84:b8:3e:7c:41:6b:c5:e0:79:bd:5f:ce:
ce:41:ef:6f:80:0c:bb:36:86:f1:24:14:33:ad:7d:8c:23:33:
c8:d4:ff:1e:a8:fa:be:70:0f:25:2d:55:72:00:e0:9d:7d:57:
d2:37:46:34:b4:fc:84:25:fd:aa:cd:76:f4:e4:93:a2:ea:27:
2b:e6:2e:49:17:96:85:21:61:f9:50:cf:8e:49:d1:33:c1:a4:
32:69:68:d6:50:1c:ee:da:17:4e:65:d5:c4:f0:95:94:ab:e3:
bb:67:b8:99:20:ca:7a:77:b6:6d:4b:9b:63:a7:46:d9:a8:a3:
e1:73:22:37:39:b8:66:52:59:d4:d5:3d:5c:cc:85:ca:f9:03:
48:88:b3:7b:e3:36:3a:ef:60:9b:cd:3d:90:b3:dd:90:e2:62:
63:01:80:c1:fe:11:4a:2e:d6:26:10:23:82:9f:98:be:9d:fe:
62:ba:c6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:23 2025 by rpki-client