Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
File: tLuK74sObZxv9jIIB_WpAHWY7rA.mft (raw, json)
Hash identifier: FExANz640E5bWM62l6JI0jrkDkywDbk8cGUfmxaLDqs=
Subject key identifier: FB:7D:0E:02:63:4B:B9:A7:77:B6:33:DA:89:B9:0C:A7:68:E0:87:94
Authority key identifier: B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
Certificate issuer: /CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Certificate serial: 0196771EDCCF928552AA77018A27DC06BC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
Manifest number: 07A2
Signing time: Sun 27 Apr 2025 12:00:33 +0000
Manifest this update: Sun 27 Apr 2025 12:00:33 +0000
Manifest next update: Mon 28 Apr 2025 12:00:33 +0000
Files and hashes: 1: 8ntjSMus2ECR1PU4tfABg9_MTk0.roa (hash: NThyxZZCDawOVk5/yNg7I3X8M08Hqe7vBd2lZGQPe1c=)
2: tLuK74sObZxv9jIIB_WpAHWY7rA.crl (hash: ScxsQitAjRsm60TEaKaCHq9ACrblb/vbd6Pc+mXCwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:dc:cf:92:85:52:aa:77:01:8a:27:dc:06:bc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Validity
Not Before: Apr 27 12:00:33 2025 GMT
Not After : Apr 28 12:00:33 2025 GMT
Subject: CN=fb7d0e02634bb9a777b633da89b90ca768e08794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:14:48:5c:30:d2:f4:34:70:04:60:31:c9:
a4:94:55:2b:5c:88:70:bf:85:47:37:45:54:76:3f:
c7:90:3e:00:b8:62:8f:2e:b2:93:b2:bb:b4:c2:32:
c5:ae:57:bc:0c:82:47:4f:f4:83:e9:cc:77:e6:d6:
53:48:58:37:86:90:52:47:54:f2:24:2a:a4:ff:d9:
14:e1:37:58:96:bf:ad:a7:ca:7f:15:e1:db:70:51:
88:a5:88:62:1e:2a:8b:85:98:48:06:18:37:96:72:
4c:b6:02:52:9e:7c:a9:42:5f:a1:d2:e8:c4:9d:65:
e6:1e:f4:8c:fa:02:92:c0:c4:bd:6f:9b:9a:c2:ef:
3a:17:53:49:8b:a7:71:e3:4f:9b:fa:3c:13:2a:e4:
e2:ee:1b:8c:06:36:f1:61:c6:02:f5:2f:a8:be:1d:
cf:42:25:4e:c4:7f:ec:8c:6f:ca:d6:f3:d6:e7:a0:
73:72:3b:c1:17:d8:d0:cb:62:fb:3a:c2:e1:48:6e:
ba:c5:6e:7c:67:ce:53:73:88:e6:da:3b:8c:29:a2:
5e:bb:f5:26:35:2a:6e:55:63:f0:d5:89:3d:bc:b7:
56:ff:1b:05:f0:99:ae:a7:91:c8:5f:ed:32:04:c4:
90:0c:39:ef:9b:1c:f2:2e:27:59:5b:9a:fd:45:70:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7D:0E:02:63:4B:B9:A7:77:B6:33:DA:89:B9:0C:A7:68:E0:87:94
X509v3 Authority Key Identifier:
keyid:B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bf:e0:6b:4d:ae:68:ae:1a:13:2e:fa:d1:37:1d:31:65:ce:
f6:21:7e:06:f0:e9:da:fb:79:a3:2f:0e:5a:86:5d:e8:a4:eb:
68:e4:a5:fe:e0:c0:e4:c9:4e:d2:b4:dd:39:36:df:e0:f7:f2:
29:71:22:cf:f2:7a:98:c6:30:10:17:91:1d:31:6f:ad:5a:1d:
ed:68:a1:3f:42:6a:2f:1f:2c:52:b1:37:6e:19:11:d7:9b:c6:
f9:7d:c2:b9:b3:da:3e:f9:0f:09:c8:73:00:f9:67:82:b8:62:
04:38:d4:91:d3:72:28:88:18:1b:d5:88:7a:2c:bc:7d:20:ae:
02:ec:58:5a:04:d2:64:c6:1c:d4:0c:a2:25:ce:58:00:75:c8:
91:a1:d4:d5:bd:69:de:71:0a:58:dd:9a:d2:d8:f9:37:e1:47:
23:2d:1a:11:0c:0e:1c:8e:b4:c3:1a:9a:17:94:fe:d5:6e:89:
b6:ca:dd:d0:11:e0:bb:15:f3:13:af:d7:2a:32:f4:48:de:c5:
16:1f:c8:29:56:cf:21:f5:14:46:d0:67:89:07:55:95:31:05:
c5:12:51:5d:ce:14:0f:5f:d7:30:b9:4c:d3:9c:c9:c3:08:e1:
47:17:9b:63:08:a7:5e:a3:a9:00:a9:c7:6b:af:b7:b1:87:89:
f9:ee:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:58:15 2025 by rpki-client