Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: LP7hzDf6AJVGTQ6fyZZJQ33G45/GzkMRmNgeaX8w2/A=
Subject key identifier: 8F:95:5B:FC:F8:C6:A9:29:7B:CC:CE:AF:BA:C1:80:0D:ED:C2:14:4B
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 0196B0697F9A6C98F19E5CDEACEA4C78EFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0999
Signing time: Thu 08 May 2025 15:00:25 +0000
Manifest this update: Thu 08 May 2025 15:00:25 +0000
Manifest next update: Fri 09 May 2025 15:00:25 +0000
Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: DrJDHKEZKTzhtdr/CYiQe7NXiQUukAtV4sI0GB3M6xA=)
3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:7f:9a:6c:98:f1:9e:5c:de:ac:ea:4c:78:ef:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: May 8 15:00:25 2025 GMT
Not After : May 9 15:00:25 2025 GMT
Subject: CN=8f955bfcf8c6a9297bccceafbac1800dedc2144b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:8f:5b:7c:58:2d:ad:9d:b2:9f:9e:59:a1:
0d:7c:53:b0:4a:d2:db:0d:5a:70:90:2b:31:79:04:
f7:7d:71:09:41:29:af:b2:cd:29:ed:6a:e6:9c:43:
40:16:9c:4c:16:e9:70:ca:d2:57:91:42:08:80:35:
00:21:4c:13:89:8f:62:e5:93:89:c7:8b:b2:b0:64:
af:50:e8:95:50:47:dc:44:81:34:b5:b6:cf:92:9d:
eb:08:1c:2b:8b:97:f9:c1:7d:b3:23:3e:c5:9d:3f:
ac:a0:03:16:52:57:6d:9b:c7:0d:a1:06:8a:05:08:
15:5e:4c:20:3c:22:26:74:01:05:8c:45:7c:5d:2b:
65:f0:1b:e9:d9:82:ab:c7:e0:cd:4f:05:e6:09:1b:
fd:4b:33:f8:6e:57:87:57:ea:41:91:4c:71:2f:60:
3e:28:9c:57:d7:65:8d:f5:47:8b:7f:b9:19:d7:17:
f9:d1:e0:8f:d0:f3:c0:2e:f1:8a:a1:d7:97:58:5e:
49:4b:3c:b5:80:d0:95:46:24:5f:7f:aa:6f:35:d1:
26:e7:ea:59:24:6f:a7:01:c0:09:60:75:49:b1:33:
76:07:9b:50:58:57:69:bd:79:49:b9:8f:82:1b:ec:
2c:a6:5c:43:c8:e3:2a:f1:6e:7b:c0:dc:fb:e6:20:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:95:5B:FC:F8:C6:A9:29:7B:CC:CE:AF:BA:C1:80:0D:ED:C2:14:4B
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:cc:7a:7f:af:88:7c:67:1b:44:39:a9:7a:5f:e1:50:1a:12:
39:63:be:f0:2f:ab:0f:78:c0:a5:7c:5f:2c:b4:c4:e5:7e:38:
ef:cd:53:b2:12:e9:cb:2d:82:ca:2a:49:aa:49:df:7b:bc:8e:
54:f9:ce:64:cb:34:0c:05:aa:65:5f:7b:d5:d2:65:a3:b2:8b:
61:88:8d:d8:b8:98:96:94:28:c9:cb:bb:e7:7e:8b:c2:5e:95:
be:5b:7c:0d:d8:22:f6:69:d6:d5:fd:a2:74:a7:e9:ff:fb:ec:
01:9c:17:da:2f:40:7e:3d:ec:73:10:20:f2:51:3d:02:55:26:
0b:53:bb:ee:02:5d:97:d7:f9:89:f1:3d:e8:81:dc:6b:35:93:
60:3e:1f:a3:6f:3f:24:44:b8:55:fb:9d:8c:4d:00:fc:0a:0f:
92:bd:16:d7:51:77:41:37:08:86:d1:8e:7a:ad:9f:4e:f0:c7:
c9:4a:b9:64:bc:ab:e1:2a:e1:3d:8f:61:5f:70:c7:77:11:d0:
8b:04:f9:f4:30:c3:8a:2d:e5:2e:d1:c6:38:e5:8a:19:74:4c:
32:fc:9b:5a:0f:12:5a:4f:ac:29:aa:a8:01:e2:bb:c9:eb:9b:
a9:b9:b9:11:51:36:8a:90:e2:bf:c6:07:8c:12:bb:f5:2b:bf:
1e:97:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:55:41 2025 by rpki-client