Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: J9j5+kYpwAd/sPlfbmWNWTlZSEOhnImgwSYHqP9KT4A=
Subject key identifier: BA:F8:63:C2:1D:EB:18:D6:03:D5:5B:E0:69:65:68:02:1B:8C:DF:28
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 0196729D84E1AF3EE65D18A92F14D2797B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 0F6C
Signing time: Sat 26 Apr 2025 15:00:47 +0000
Manifest this update: Sat 26 Apr 2025 15:00:47 +0000
Manifest next update: Sun 27 Apr 2025 15:00:47 +0000
Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: 4o9ShDHA40kQQn/kkfJFwMsuaxUnpnMXboLYmUlb1OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:84:e1:af:3e:e6:5d:18:a9:2f:14:d2:79:7b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Apr 26 15:00:47 2025 GMT
Not After : Apr 27 15:00:47 2025 GMT
Subject: CN=baf863c21deb18d603d55be0696568021b8cdf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:83:d5:7a:70:97:59:62:40:e8:67:ae:b1:
42:9b:14:52:72:ec:51:89:a7:63:e1:6b:37:fd:71:
9a:a6:12:cf:04:b0:96:4a:8c:c5:27:21:50:4a:ce:
71:3a:e5:c7:1a:cd:89:73:5e:20:5f:08:15:40:ec:
fd:1a:84:c8:b7:52:b8:dc:7b:2a:73:4e:11:54:7d:
88:b0:54:24:c7:23:bd:9f:cf:e7:43:da:09:77:0a:
a7:48:2f:3d:bb:4c:fc:c6:4f:e6:55:d7:6d:e2:c7:
8b:91:e4:dd:96:e1:c5:f3:da:a4:41:42:9f:03:3f:
49:c7:a1:a3:c7:12:17:55:fd:3e:a0:63:04:2c:b9:
6b:36:72:9b:b8:3c:45:cd:d8:5a:76:ef:b4:6f:31:
89:1e:5f:ee:f5:af:64:41:65:7b:c1:4c:56:26:70:
e4:64:57:96:20:a5:c0:55:c2:08:f1:03:af:90:ed:
67:ff:79:c8:a0:12:51:28:bc:83:ee:51:4e:04:9a:
64:b4:eb:35:c2:8a:58:85:e7:60:93:85:5c:f3:24:
89:56:2d:df:77:8f:4d:b4:ed:80:06:a5:4c:31:56:
3c:d3:c9:47:1d:bb:19:e1:e5:65:df:93:86:d0:b0:
51:71:5c:2c:f6:14:26:d0:ad:21:82:6b:1f:01:06:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:63:C2:1D:EB:18:D6:03:D5:5B:E0:69:65:68:02:1B:8C:DF:28
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0a:e1:ee:94:71:18:f8:4f:63:7f:32:9f:2a:65:c3:d1:85:
0b:56:b3:4e:25:8d:e9:a6:be:54:a5:69:69:f2:b9:6e:ab:06:
1f:f8:30:aa:f8:5b:61:e8:1a:e2:2a:ed:9d:fe:79:66:9c:6e:
84:53:3c:a5:18:62:fd:2c:cf:83:70:f6:97:76:1d:a1:8e:02:
cc:a8:4e:77:fc:6b:a1:9f:60:66:60:88:07:ef:1b:3e:9f:c5:
3f:19:aa:0a:87:12:d9:6f:08:47:7a:e6:28:90:88:07:d4:75:
a5:e4:9d:a0:16:9f:5c:1b:77:48:ec:f4:58:9d:ad:4e:db:4e:
89:3d:cb:a2:40:76:06:41:28:a3:9f:6e:97:7a:d0:6d:be:77:
a1:b4:70:63:cc:7f:5b:65:ed:f6:5e:ff:ef:f0:ad:be:0f:c2:
be:d3:fe:28:d6:bb:52:e8:68:dc:69:40:7b:dd:7a:4d:d4:c7:
c4:b9:90:a8:31:4d:3f:5a:fc:eb:72:1e:5c:40:4d:0d:0f:26:
c6:00:6f:d4:23:c6:67:14:f7:07:f4:86:3b:74:5b:bd:9c:59:
f3:75:6b:a2:d4:7e:14:be:d8:81:71:4f:ab:8b:29:e9:30:f9:
e7:b3:ca:f0:11:99:5a:95:dd:71:6d:06:aa:e1:42:ed:9f:17:
00:a1:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:00:56 2025 by rpki-client