Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier: z/cxIH8zWdF4+jrVLsY3QtinXvbljcONZvIt827pr9g=
Subject key identifier: A9:BD:6E:4C:4C:9D:74:6A:29:E8:EE:63:41:C6:C0:D2:60:1E:78:EA
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 01967BD7AB28A8EDC401319EAA31CC8EAA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number: 14A2
Signing time: Mon 28 Apr 2025 10:00:53 +0000
Manifest this update: Mon 28 Apr 2025 10:00:53 +0000
Manifest next update: Tue 29 Apr 2025 10:00:53 +0000
Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: U+aOeIneacvspJPXTkaTXP7HIXy1qf4h8L0isvzdySE=)
2: jlmeoUxgI0KhFHV99BItMxAYMbc.roa (hash: NI9SzLu0aApCsGkR0hpBvVimZxaK1yHkWwQafkG2nq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:ab:28:a8:ed:c4:01:31:9e:aa:31:cc:8e:aa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Apr 28 10:00:53 2025 GMT
Not After : Apr 29 10:00:53 2025 GMT
Subject: CN=a9bd6e4c4c9d746a29e8ee6341c6c0d2601e78ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:a8:d2:f9:f4:63:b4:93:ab:2e:b1:ca:4a:
ce:76:8d:d3:28:6a:4d:0a:ba:7c:13:c5:1a:6b:62:
12:16:db:67:4b:82:33:7c:d8:37:95:03:f2:c3:a6:
e6:9f:9d:15:bc:44:fc:4f:35:1c:f3:19:eb:17:ec:
32:ca:bc:18:03:b9:ba:d4:ec:46:d5:54:e8:85:76:
06:c1:11:7f:27:ad:1b:03:87:77:4f:dc:d3:3b:6a:
43:53:14:a2:22:b0:a8:78:c0:5a:ab:3a:f3:82:c5:
78:e3:5a:59:5a:d5:ae:aa:6e:2b:f5:08:93:84:79:
07:49:73:22:c5:0b:97:80:5c:57:d1:a3:dd:36:7a:
dc:0c:16:51:a6:a5:17:41:9c:df:2f:72:2f:cf:5e:
ee:22:45:3c:be:9a:e2:ef:c8:86:b9:5d:98:76:dc:
1c:b6:6f:3f:b1:31:c6:50:82:3f:9c:95:6f:5e:69:
1b:6d:41:2c:88:09:57:69:cf:72:bf:6a:a8:7c:af:
a6:1b:1e:50:18:8b:bf:dc:c2:cb:17:c5:d8:dc:ec:
6c:63:e2:a3:28:27:4e:2d:ac:fd:b8:c3:3b:ad:e0:
eb:f6:3c:03:0e:d3:fc:f0:19:c8:8d:ac:11:40:b4:
43:8c:c4:17:6b:7d:0c:30:5e:bf:1f:82:4e:d6:bc:
57:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BD:6E:4C:4C:9D:74:6A:29:E8:EE:63:41:C6:C0:D2:60:1E:78:EA
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cb:89:bb:a5:d1:69:80:d1:6d:48:0b:41:b3:89:44:29:9f:
6b:89:d4:4d:d9:83:2f:35:00:50:d7:4a:d5:4c:1c:cc:f2:c4:
37:63:5f:8f:ab:cb:a7:51:bd:db:d2:4a:c4:06:ed:cb:1f:4a:
70:be:69:ce:d2:df:0d:89:48:10:11:8c:1a:20:33:60:73:e2:
dd:1c:2a:8e:18:b9:ac:dc:5f:4a:65:07:86:c5:a8:67:3a:7d:
d8:fe:a8:3e:67:7f:b2:50:6c:c5:52:58:b9:2e:5f:36:62:d3:
f9:90:14:04:f3:54:c0:93:e8:63:7e:cc:22:1c:74:5d:75:b1:
33:e7:ad:db:f6:dc:85:e0:1c:2e:86:9d:c5:a9:b5:fc:35:19:
6b:e5:91:ba:9d:f6:a5:95:1a:fe:2b:41:04:55:d8:7c:3f:08:
e8:52:50:53:91:15:4f:cd:c6:c7:bb:95:05:3e:0f:d9:53:9e:
0d:68:53:6b:a5:66:bd:fc:ac:2c:0a:a3:dc:f4:cc:18:d0:51:
b2:2f:13:4a:6e:29:3f:ea:30:a6:76:eb:a9:4b:73:bb:fa:e2:
10:3b:bc:08:a7:01:17:a7:dc:7a:d3:9c:de:11:f8:03:62:7a:
d3:7a:b4:ed:01:34:15:05:69:59:86:48:56:6e:a3:45:83:f6:
ea:30:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:35:05 2025 by rpki-client