Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: rtN8DB46t+we/KOGCaFfyyye6RT6llYDExccuGfOd8A=
Subject key identifier: 23:BE:1F:21:39:C2:31:F1:76:F5:1F:01:41:3E:E8:D7:41:06:E1:B0
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 01968134607D3CE237BE0001F0A832AAEA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 04C1
Signing time: Tue 29 Apr 2025 11:00:15 +0000
Manifest this update: Tue 29 Apr 2025 11:00:15 +0000
Manifest next update: Wed 30 Apr 2025 11:00:15 +0000
Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: 76WnKCKW+2KVh42WCnGFAn1i812cKZ+V9hthTtm6+l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:60:7d:3c:e2:37:be:00:01:f0:a8:32:aa:ea:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Apr 29 11:00:15 2025 GMT
Not After : Apr 30 11:00:15 2025 GMT
Subject: CN=23be1f2139c231f176f51f01413ee8d74106e1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:53:93:a4:c4:7a:f8:e4:85:6e:77:1b:62:
7b:c1:ed:d0:32:41:bc:ee:c3:c6:5c:97:5f:83:ab:
05:3b:7d:8d:43:07:58:48:8e:f5:6a:0b:21:2f:03:
01:52:d9:9c:1e:f0:14:43:86:75:a7:06:14:bd:c2:
8e:d2:1e:64:47:4a:01:84:a5:1e:71:5a:72:fd:e4:
5e:de:e5:ec:05:91:2d:d5:d2:34:7d:11:96:36:0a:
bd:af:a0:7a:04:c8:b6:ca:d1:8d:82:cd:d9:f4:16:
38:7b:4d:cc:ec:bd:0a:05:21:1f:a0:09:cb:c5:69:
df:b0:3f:2d:49:35:f5:c8:38:e7:65:7c:14:bb:ba:
f8:b9:5b:79:f5:63:44:ad:20:0c:9d:2e:e7:26:31:
d6:73:00:4b:e7:9c:b3:1d:45:ba:f7:84:25:4a:51:
9a:5c:33:28:fd:30:c8:f4:95:00:60:23:9f:9e:93:
10:6f:50:c7:5c:c0:9d:7f:04:1c:89:fd:43:5b:5d:
2f:36:21:11:85:17:01:71:94:61:17:ae:0e:2c:7a:
cc:a7:85:61:a7:66:20:90:5c:09:b6:35:1e:ab:79:
0f:99:76:7a:3d:c6:f6:fd:c0:3b:f1:fe:7a:e2:dd:
65:9e:b6:44:12:63:b8:8d:78:60:23:17:eb:46:21:
b0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:1F:21:39:C2:31:F1:76:F5:1F:01:41:3E:E8:D7:41:06:E1:B0
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:f6:10:ef:a7:bb:d5:5b:eb:62:e9:61:51:77:43:c6:8c:
d3:bd:1c:e1:3d:37:6c:40:b6:3f:5c:3d:cf:dd:d4:a6:70:a1:
41:56:44:0b:62:d6:51:81:88:1e:8a:56:df:b7:ca:cb:82:41:
87:ff:13:20:11:a8:c4:38:e8:d7:1d:ba:a4:17:0c:72:68:ab:
d2:f0:ca:04:06:5e:62:81:94:53:8a:07:2a:fc:b7:15:97:d5:
b7:29:12:d2:43:0a:27:20:60:b2:57:b9:3a:ba:cd:3f:4c:26:
5f:8e:d8:bf:11:7c:e1:65:c2:2f:86:1c:75:35:21:a6:28:80:
a0:fe:6b:df:da:a7:9e:9f:4f:c7:18:16:ca:ab:53:f2:43:34:
c1:22:cf:83:c6:bf:97:07:38:bf:9f:d3:11:aa:a3:e6:14:e3:
27:92:fb:40:61:70:8d:ed:c7:f7:a0:da:b8:dc:01:86:fc:87:
4c:53:69:9a:24:d2:54:bb:e4:b9:dd:30:f1:56:43:ce:07:80:
33:07:ff:1f:53:a1:d7:a4:9e:47:e8:5e:48:0d:f8:21:5e:9d:
4c:15:06:88:c8:f6:d7:e0:05:65:a9:ee:10:1f:a8:4a:7f:be:
fb:91:05:c5:59:e0:e7:a1:ca:4b:e4:85:1d:0c:49:09:98:2f:
7d:91:ea:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:48:43 2025 by rpki-client