Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: 5S4ChbHDOOu9w1cMvWyVzQ0Rr1Vb3Q7mo1A/+kT9Epk=
Subject key identifier: 9A:EE:AC:0E:3F:C4:C4:1C:9E:17:7F:3E:9D:E5:65:F7:18:85:FD:F2
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 019676E7EAC25F31F9EFF133D90C143FDBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 11:00:32 +0000
Manifest this update: Sun 27 Apr 2025 11:00:32 +0000
Manifest next update: Mon 28 Apr 2025 11:00:32 +0000
Files and hashes: 1: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (hash: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: JeKylUD1UyQBHXJVr2fH0pf5LK9YhskuT0Z4gI5SIOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:ea:c2:5f:31:f9:ef:f1:33:d9:0c:14:3f:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Apr 27 11:00:32 2025 GMT
Not After : Apr 28 11:00:32 2025 GMT
Subject: CN=9aeeac0e3fc4c41c9e177f3e9de565f71885fdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:20:49:c8:f9:4b:c3:b0:fc:70:74:b2:fd:
e8:e6:01:21:6e:44:72:3c:f5:2d:18:29:92:6f:fc:
31:2d:71:2f:9a:0e:b9:1c:5b:e7:73:5a:60:0f:93:
c2:d6:7e:0f:1b:59:d5:76:6f:4f:ce:88:4a:ac:3d:
7c:4d:e4:3c:37:6b:c8:3c:16:01:8d:56:4b:21:90:
05:f7:3a:77:30:59:52:ef:17:90:21:71:bc:a0:35:
3a:fa:31:7b:56:03:f5:0f:f5:10:ed:ae:cf:9f:de:
c0:77:15:88:b7:6a:64:94:8f:8d:10:51:7f:72:e4:
4f:7e:5f:f3:c3:9d:f6:9f:69:79:bd:18:12:ce:11:
6c:44:14:6e:e4:bd:fd:e9:1b:a3:a5:64:b2:b4:eb:
86:a0:54:0f:0b:3d:ff:63:f8:5b:81:c9:fa:91:0e:
93:6c:0c:83:44:23:cd:41:73:64:2a:9f:27:2d:6e:
49:37:a9:74:cd:ce:17:ee:f5:aa:a7:04:75:1b:0d:
18:1c:04:b3:6a:ef:17:07:ae:36:e3:44:fa:bf:f8:
e3:1e:f9:17:1c:44:f1:89:35:0d:88:76:90:fe:47:
4d:bc:9e:96:81:f1:d9:28:fc:14:4c:96:5d:15:26:
8b:c0:b8:a4:2a:d0:14:b5:23:43:6b:86:79:fd:6e:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EE:AC:0E:3F:C4:C4:1C:9E:17:7F:3E:9D:E5:65:F7:18:85:FD:F2
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:73:77:a9:69:75:c5:99:2a:92:32:94:cb:ff:a2:7d:74:2f:
cf:31:49:bb:18:c3:0c:9d:a1:1a:5d:79:25:9c:72:00:a4:20:
9a:1a:cf:8b:74:3e:83:bc:cd:29:ed:b8:b2:92:bd:f3:5c:40:
5d:8c:6c:78:4f:8d:f2:cf:d8:52:d1:83:8a:ee:30:40:5e:b8:
47:22:42:2a:57:aa:db:76:b2:5a:ea:3e:7c:31:a6:20:79:fe:
97:23:34:0e:5a:da:01:7d:f5:db:16:54:29:e1:ad:7d:64:98:
fc:1f:a2:10:b9:12:2c:69:0c:38:f8:1f:a5:5c:fc:27:b9:a2:
60:20:de:e5:d6:f9:a4:6d:bb:fa:a3:f9:ad:b5:0a:d2:22:4a:
3a:50:d3:a8:26:4f:56:cd:4e:43:83:5b:1f:59:88:6d:3b:4c:
fb:4d:e2:cd:e0:c9:18:da:ea:f5:0f:45:f4:bf:bd:fb:e6:bd:
fc:b3:30:6b:cc:93:20:4a:fc:eb:b0:3c:99:00:7c:b7:a6:dd:
e8:76:74:e5:7d:39:bf:ba:da:28:50:29:84:c1:9c:2a:58:1e:
2c:f7:75:69:d5:ef:8c:ee:da:b8:e8:71:f2:9f:d1:b8:cf:22:
f3:c8:b4:ae:d2:e7:c1:b6:f1:d0:e2:1a:c3:c8:b1:7a:91:ec:
c3:86:0b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:56:14 2025 by rpki-client