Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: 10g7vxhV5Cr2qywYvz5WRPsYSQwQS4RXI+mfAKcERH0=
Subject key identifier: 66:AD:2E:C1:6E:74:BB:8E:AE:A2:25:5C:1C:46:A4:AC:4E:01:23:E0
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 0196BC37349425A2BC9AD5C61ACAFD57D120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 0E0C
Signing time: Sat 10 May 2025 22:00:56 +0000
Manifest this update: Sat 10 May 2025 22:00:56 +0000
Manifest next update: Sun 11 May 2025 22:00:56 +0000
Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: 4jrryZnEcMkU4uCq9idMqDn3Ja/RczWFEFozaE3TKNM=)
2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:34:94:25:a2:bc:9a:d5:c6:1a:ca:fd:57:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: May 10 22:00:56 2025 GMT
Not After : May 11 22:00:56 2025 GMT
Subject: CN=66ad2ec16e74bb8eaea2255c1c46a4ac4e0123e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:77:48:d6:ba:c8:35:7d:53:82:51:0d:27:
1f:31:fb:6b:3d:82:c1:49:d3:05:29:94:d5:6e:bd:
2b:89:b5:32:76:07:da:b3:00:20:f9:14:54:6f:03:
5f:c6:14:ca:f3:0b:63:30:ad:01:6f:e8:1b:b2:f1:
04:7b:2d:6d:9b:33:47:5c:34:f3:f7:81:fa:68:e7:
c6:19:1a:54:02:3f:55:f4:c9:6b:0b:f9:fa:54:f5:
79:06:f3:5d:6b:0b:42:56:62:6c:11:b4:a8:64:d7:
6f:17:c5:59:39:26:77:2c:f5:c7:a6:9d:96:4d:2a:
2b:f3:31:7a:6d:6c:cb:a4:05:aa:33:e0:ca:ca:42:
50:74:d1:04:c5:7e:95:ff:d9:09:91:80:23:3f:d3:
5d:a6:bb:02:f3:de:cd:04:a3:ba:34:23:81:2b:d0:
99:ff:87:89:fe:03:41:ea:13:25:9f:5d:21:53:ac:
5e:b3:eb:c5:76:14:86:99:7a:44:35:1e:f4:58:d2:
da:b0:96:28:31:ff:ee:21:81:79:75:a9:f3:0b:a7:
08:b1:40:48:b5:5e:8e:57:b6:e6:4d:9a:6a:20:a4:
2b:9b:b1:1d:8b:96:9b:74:4e:38:26:8a:37:6f:17:
33:0e:c5:18:61:ce:2c:27:b6:6f:f1:2c:a5:21:f5:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:2E:C1:6E:74:BB:8E:AE:A2:25:5C:1C:46:A4:AC:4E:01:23:E0
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1c:34:f9:ed:42:14:6e:d4:02:3a:f6:90:75:c7:6e:b5:d3:
e4:07:8a:e0:45:71:33:8d:ce:17:73:92:81:67:fb:02:1b:34:
7e:73:21:2e:7f:ab:ab:fd:e5:4c:42:a1:53:b6:53:02:c4:86:
f7:06:1a:93:c7:8b:62:50:08:8d:c3:8a:c0:d0:12:0d:3b:f5:
a2:77:d5:7a:7b:15:47:6f:30:42:51:c8:ae:e3:92:10:2e:15:
a2:92:c3:d9:40:da:8a:ec:0f:db:6a:74:20:c2:f2:f3:7c:a1:
8f:be:aa:c4:4d:32:db:26:00:e7:d0:11:5f:79:df:2b:5f:04:
8e:d5:7e:67:6d:d5:c9:28:91:e3:4e:c8:f7:d4:d3:24:74:30:
2d:5c:a6:b6:dc:25:c6:79:5a:ee:ae:69:b2:ac:eb:47:39:df:
49:a8:e4:cd:4c:82:45:17:19:54:85:ea:3f:33:fb:10:63:b3:
95:e6:d5:65:c8:40:3c:4d:fd:89:e2:7b:a5:be:42:da:9d:94:
b6:b2:05:7f:f8:7e:b8:f3:38:32:0d:6a:bc:ba:12:ab:3a:97:
67:60:85:62:35:ec:23:9e:ab:ef:c6:b9:6a:f5:4f:55:83:70:
a1:18:db:cb:05:9b:f3:ce:ca:b1:a6:0c:ee:79:07:b2:8d:79:
a2:bb:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:37:31 2025 by rpki-client