Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: +YC91lEj7knz+SpQCPw5QPRgj4U940ioJ5Bo7Zzm0JQ=
Subject key identifier: 5F:9C:A1:1B:C0:C0:1C:1B:A2:15:5F:43:E0:5B:EB:14:0C:1B:89:2A
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 0196C3B9F3BA3F091AA5D9055F65D95F46D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 09:01:05 +0000
Manifest this update: Mon 12 May 2025 09:01:05 +0000
Manifest next update: Tue 13 May 2025 09:01:05 +0000
Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: oWOWziUfEPQ/ruUbZTIDz+WxNZzrrngKUHGwUbPzmGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:f3:ba:3f:09:1a:a5:d9:05:5f:65:d9:5f:46:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: May 12 09:01:05 2025 GMT
Not After : May 13 09:01:05 2025 GMT
Subject: CN=5f9ca11bc0c01c1ba2155f43e05beb140c1b892a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:54:07:c0:f0:59:07:eb:4c:d7:aa:a8:3a:
b3:2b:48:19:ba:23:50:8d:e8:ec:6f:9c:58:0b:52:
9d:d1:69:97:74:82:6a:96:26:f5:1c:55:15:c3:7a:
da:c1:52:b5:b2:fe:88:ec:b2:8c:04:bf:3c:38:a7:
96:f8:2b:32:51:23:48:97:ec:c3:72:90:fb:30:a6:
db:55:27:d5:6a:33:15:6a:45:2b:bb:b8:b1:e2:75:
d4:2b:3c:d3:2f:fe:6d:8a:20:00:88:29:31:07:26:
1f:eb:f1:6d:a9:65:7c:00:1f:1c:07:c5:9b:84:84:
f9:f5:ea:ce:4d:29:9e:7a:1e:7c:79:99:bf:07:16:
98:62:55:5c:67:70:42:39:77:6b:49:30:9e:28:a7:
d9:2e:7d:ca:9e:c8:37:a0:2a:a5:56:2a:1a:b2:9a:
61:3e:a9:ac:8e:87:54:f9:fb:f8:63:fb:4f:0b:10:
02:c0:ed:3d:0e:78:51:e2:25:7e:6a:b4:19:a5:33:
fd:36:8b:62:bb:eb:75:ef:dc:43:96:04:3b:ab:41:
93:da:21:d1:a6:9d:41:52:39:5f:28:f3:85:95:92:
35:e2:5f:9d:53:62:70:50:f7:3f:46:ec:b8:91:89:
f4:14:c9:0f:bd:8f:08:35:b6:51:6c:c2:ae:ad:73:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:A1:1B:C0:C0:1C:1B:A2:15:5F:43:E0:5B:EB:14:0C:1B:89:2A
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d6:6c:53:cb:73:99:27:9e:ce:6c:2e:a6:e8:21:5c:16:4c:
9f:ac:8a:bd:cc:ef:f6:c3:81:d5:27:24:66:8e:71:d2:13:80:
4c:31:f2:2d:99:b4:45:a2:c3:a5:86:a0:99:89:1e:db:c4:e1:
dd:08:10:35:e7:56:a8:4a:aa:39:5d:95:8c:ab:b8:9f:b9:bd:
f4:0c:f4:84:45:44:8b:0c:79:ff:f7:df:45:9b:12:39:6d:5f:
b0:0d:0f:dd:b0:9e:e8:6a:d9:c7:9d:1f:8a:77:aa:fc:91:ae:
b7:fd:69:c5:76:e7:47:c3:0d:40:83:c2:0d:9c:00:79:e1:7c:
67:64:9b:9f:6f:61:73:2d:f5:cf:fc:fc:46:57:59:31:e1:be:
39:8f:44:6f:35:ae:bf:54:6e:d3:57:b8:6c:bd:85:24:ae:2f:
49:ad:98:1c:32:12:38:0c:48:c8:b3:cd:b1:cd:b1:f6:32:41:
68:f1:8c:8a:90:a0:f0:21:08:81:1d:ff:1d:34:37:a9:3d:63:
d0:69:2d:41:87:0b:1c:b1:bf:20:e1:e0:aa:d1:77:13:bb:3c:
92:a2:d4:d0:d4:41:06:33:9d:82:09:8a:e2:5b:86:cd:77:19:
c7:36:88:cf:c6:8a:ee:15:c5:ed:20:99:94:61:7e:b5:4c:a8:
88:2e:fc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:56:09 2025 by rpki-client