Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
File: tNftFLjVGiC67HtmDwioDNz4F78.mft (raw, json)
Hash identifier: qa53xVMEcN5c7M6kmAu5O+JMIjHMu7OJMDuLOcs1Ps4=
Subject key identifier: DE:9B:E0:B5:FA:BE:85:D0:BA:6C:DD:27:FB:2D:A2:9E:D7:FC:B2:96
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 0196A5AFA2396107B2CF10F344160E0BA67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
Manifest number: 1488
Signing time: Tue 06 May 2025 13:01:13 +0000
Manifest this update: Tue 06 May 2025 13:01:13 +0000
Manifest next update: Wed 07 May 2025 13:01:13 +0000
Files and hashes: 1: VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa (hash: 4Hkp0WmvBYBS95p1FHn/M3/EZ2GIH50SPjU4ACziYZE=)
2: YVY9twtvMqgJ8wFpvv3lKZVmEkQ.roa (hash: 17qlPl9D+uyL5rzeTz5pj3TELME7ziHzDZ+/fRR9Vec=)
3: tNftFLjVGiC67HtmDwioDNz4F78.crl (hash: JS17zNqgvxmOl7BoDWXtBM2Ns/W4oaGOHmDHjf5bod4=)
4: y_HvmHHGVlKjcbTPtfwbbemE9ts.roa (hash: 8SIoZagJaVQOy82S0A9ugj7Iv6sEqZZHPMha1KNQ3uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:af:a2:39:61:07:b2:cf:10:f3:44:16:0e:0b:a6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: May 6 13:01:13 2025 GMT
Not After : May 7 13:01:13 2025 GMT
Subject: CN=de9be0b5fabe85d0ba6cdd27fb2da29ed7fcb296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:aa:9c:06:d9:8b:56:ff:09:ce:df:43:a6:
2b:68:bb:7f:44:5d:80:41:58:d8:5d:90:72:dd:c8:
c3:93:5d:55:c8:06:3e:f6:d4:08:3b:7b:40:ca:04:
8b:b0:13:92:f9:9a:81:03:e2:f6:e2:00:a4:fc:55:
c1:0b:b3:f8:6e:47:eb:f4:47:02:1a:2a:32:c1:ad:
43:85:35:08:a6:66:7b:5a:5e:9c:4f:44:58:51:87:
e4:b0:73:9e:0d:67:c1:13:ce:72:c4:c3:e1:5b:54:
dd:4d:8d:52:cb:d9:f2:93:7d:ad:ef:18:97:33:aa:
f8:2a:9e:e7:57:d5:12:d0:91:8e:80:8e:4a:67:d8:
0d:70:46:7d:c6:91:e5:5b:dc:b1:e0:82:c7:b9:db:
40:3f:76:1e:6f:54:9b:e6:07:ed:c2:1d:7d:6a:7f:
20:2f:6f:6c:ab:74:8f:ca:c2:7f:46:ba:1f:f5:5b:
4f:7c:2c:db:b2:b8:1b:bf:22:3b:f8:5a:01:49:19:
db:f4:68:24:91:12:ff:f9:c0:5d:0e:91:75:8b:d3:
ec:77:f1:69:f4:06:37:df:ee:f2:90:96:f9:ec:31:
61:7b:ce:d5:42:27:07:8e:4e:3b:4a:01:95:51:89:
9d:5f:6f:f8:71:f7:fb:34:c9:80:ea:14:30:8d:d3:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:E0:B5:FA:BE:85:D0:BA:6C:DD:27:FB:2D:A2:9E:D7:FC:B2:96
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8a:d2:91:ca:26:cd:44:b4:53:a9:3a:a9:93:ce:bc:00:ba:
c4:59:5b:0b:8c:01:82:f8:3f:0b:b6:b7:4b:3c:43:21:27:f5:
66:d9:68:3a:4e:f8:cb:0f:60:c7:a9:01:df:3f:d3:49:51:2f:
48:19:ff:40:05:f7:62:98:f0:e8:3e:7c:15:c1:58:5d:1c:78:
cb:04:45:b6:b8:50:ac:4e:de:bf:c7:cf:8e:43:29:66:d9:5f:
8f:17:88:d0:46:8c:d8:92:d0:01:8a:ee:73:b0:ad:db:4c:ab:
6d:1d:31:38:c3:3e:b1:06:fd:75:ff:87:f5:54:52:9f:20:09:
f1:99:91:67:c6:7e:25:12:88:4f:de:40:6c:a9:ca:66:cb:bb:
2f:b2:b7:e2:4a:18:78:cd:a1:70:1e:01:1e:2f:66:51:e8:a5:
f4:2c:2c:5a:12:7d:7e:bd:09:d1:00:4a:09:5c:f3:2d:6a:fb:
26:3b:98:da:94:cb:a4:bf:41:ae:2f:80:94:ac:c3:4c:ee:de:
4f:62:6f:89:20:25:93:92:29:db:77:ea:c9:91:07:f0:7a:22:
b6:d1:8e:33:4c:58:fa:1c:da:de:bd:6d:7e:32:ea:f0:09:85:
b1:15:c5:19:2a:32:5d:5c:1e:ee:a2:e6:9d:31:95:e4:38:e8:
d0:ca:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:55:32 2025 by rpki-client