Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier: +ebbJd6P85RUGnNrufqHhegKT7Av04SOIZjqAjixs5w=
Subject key identifier: BF:47:02:E1:E9:CF:E1:EB:A4:2E:0E:C3:E7:05:47:77:D5:A0:D2:28
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 019671536C75FA59C58036A1F6F706E44D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number: 04D5
Signing time: Sat 26 Apr 2025 09:00:14 +0000
Manifest this update: Sat 26 Apr 2025 09:00:14 +0000
Manifest next update: Sun 27 Apr 2025 09:00:14 +0000
Files and hashes: 1: FIuiasWdjO3SZ5YCZyp495O6-Mc.roa (hash: AdKefC+I7JKd6sZS8fd83sJqmU6HrKCEQYygObuAMT0=)
2: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: Ujsp9s2Brf+ScTMySBKYPulIbghqFghFf0MmqDpGqH0=)
3: uAqsYudX7mPIe3ZhGSNb-LLk9zw.roa (hash: mQhnijyqTK1dj7ry7R8uLAun/5RKJF5onMi2LcOOMfA=)
4: xS11sqn1yyKhK8owzSnnVrJ38_4.roa (hash: Q8QkF/vYZYfACSyCcmshuktJoPK49D0JpDA/QO1e388=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:6c:75:fa:59:c5:80:36:a1:f6:f7:06:e4:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Apr 26 09:00:14 2025 GMT
Not After : Apr 27 09:00:14 2025 GMT
Subject: CN=bf4702e1e9cfe1eba42e0ec3e7054777d5a0d228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:26:1c:92:1d:cc:17:c8:e6:08:b1:cd:3e:
f0:a6:8a:bf:79:f3:14:be:35:b4:90:f4:94:a9:bb:
ed:fa:dc:97:a1:e8:d2:37:3a:e8:83:04:ae:35:48:
b4:25:b0:9e:46:d7:1e:2c:1e:59:e5:a6:43:6c:44:
3f:88:24:5d:a3:99:f7:ad:ab:af:01:42:0a:37:25:
d8:2c:6c:3b:55:a5:5b:56:61:72:c4:0f:eb:17:44:
34:c4:7c:6f:87:4d:55:37:f1:fc:41:29:e6:c9:b0:
68:f2:ba:76:5b:6a:f3:05:60:1f:00:11:64:00:e1:
13:c6:43:65:84:cf:d3:70:63:55:6d:47:51:44:e3:
6b:b7:73:f1:40:9d:89:ae:ee:d5:35:ef:b8:33:09:
0e:75:ad:78:28:d4:00:6d:ae:3e:fc:c4:f4:fd:86:
f8:69:4d:05:33:39:29:e5:c0:11:13:c8:31:01:70:
a3:75:70:14:94:e0:f4:85:81:3b:a8:22:1f:9d:b9:
4b:71:1a:44:ce:09:18:6d:fe:3c:95:a1:a4:ed:e0:
28:93:79:70:63:8c:01:27:52:43:45:9b:e7:4b:ff:
5d:02:b8:9c:c1:88:d1:01:11:bd:f8:02:af:10:06:
d4:bf:9f:50:e3:62:71:cd:30:03:41:1a:b0:f6:e6:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:47:02:E1:E9:CF:E1:EB:A4:2E:0E:C3:E7:05:47:77:D5:A0:D2:28
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bd:c5:54:6a:9c:91:8d:ff:d2:78:c6:ac:d9:64:d7:ba:dc:
c4:75:fd:70:5c:67:7d:87:84:30:b7:8f:36:75:37:23:0e:f3:
0b:75:f2:47:90:12:f5:88:87:57:ab:1c:bb:6a:97:78:bb:e9:
09:28:c1:ac:88:1a:6c:d4:f3:5b:1b:f8:d0:5f:00:fa:4f:05:
af:61:53:02:56:95:3d:e4:77:44:a8:a2:35:39:f9:88:8d:1d:
41:f6:f0:4e:8b:9b:82:2a:5c:0e:12:c7:7a:70:be:bb:90:d0:
90:3a:99:44:53:e1:6b:6a:0c:d0:d9:96:97:de:96:d2:1e:60:
b1:21:24:7b:06:ad:3e:00:30:fc:04:e4:77:dc:bd:b6:25:c9:
48:c2:1b:13:f0:c9:54:0c:d4:27:92:24:a5:ff:1d:ce:6a:0d:
9b:50:39:19:7e:87:1b:4b:18:3d:b4:6f:c0:8c:af:df:a8:1c:
a7:74:9e:5c:64:4a:06:df:a0:74:59:e6:cb:fb:c0:91:78:5a:
26:64:70:53:ac:1d:fa:4d:1e:6d:1d:31:e4:88:bc:5d:40:e6:
8f:19:1f:45:39:90:57:e6:80:12:a5:e1:96:66:8d:45:a0:b3:
2d:87:0c:7c:4f:34:d7:2f:07:6e:b1:f1:e3:d6:a2:6c:32:63:
6b:d0:00:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:48 2025 by rpki-client