Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier: rR63I43D0rXV/EuTUwQ+3rQDzDCvbbYoLwtTdesi7A8=
Subject key identifier: 6D:66:52:CC:0C:0B:26:6F:D6:55:2C:77:68:CD:C5:52:F3:1C:72:E7
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial: 01967B32A9D3C5FB9A2199074D56CE79E482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number: 0575
Signing time: Mon 28 Apr 2025 07:00:39 +0000
Manifest this update: Mon 28 Apr 2025 07:00:39 +0000
Manifest next update: Tue 29 Apr 2025 07:00:39 +0000
Files and hashes: 1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: ASw3/AV7mXoFwhechyb+CWapX1NnJy0Ley/zkx+kLjM=)
2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:a9:d3:c5:fb:9a:21:99:07:4d:56:ce:79:e4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
Validity
Not Before: Apr 28 07:00:39 2025 GMT
Not After : Apr 29 07:00:39 2025 GMT
Subject: CN=6d6652cc0c0b266fd6552c7768cdc552f31c72e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:55:a8:42:35:8f:0c:cd:0b:d8:12:66:fc:
f0:6d:5d:9d:e2:0b:53:5c:37:7e:aa:98:30:be:90:
04:5a:58:c6:8f:a9:eb:55:2a:63:2b:bf:50:7e:1e:
1f:3f:d1:45:c7:c1:60:1e:cf:5b:ed:2e:11:81:81:
a7:2e:0d:d1:53:06:c1:25:90:8d:c7:c1:99:0c:5e:
0b:47:80:6a:6e:b7:d3:bc:82:1e:34:d3:52:76:f4:
04:02:99:dc:7d:7d:e5:d6:89:55:b3:83:e4:d7:53:
85:a7:6f:40:01:a9:f0:70:63:7b:d5:ae:79:10:06:
15:46:3d:01:63:e9:cd:0c:db:9a:d8:2c:08:36:b0:
92:21:8c:7e:c2:59:15:b3:39:2a:ce:15:4b:ab:16:
cb:af:b9:71:78:ab:d5:95:65:e3:50:5c:06:40:ba:
c9:d5:ef:de:19:56:ee:8a:25:96:0c:31:51:ac:a6:
b1:7a:2e:88:67:11:b7:8c:cd:43:ab:a6:57:33:1e:
66:3b:fa:f6:69:10:3c:01:44:54:d8:a4:0b:e9:e4:
c9:44:4e:7e:42:90:ad:c9:ab:c5:69:cc:05:33:f4:
98:70:52:78:30:91:07:6b:db:aa:7f:df:cb:cf:16:
9f:f6:62:b4:43:82:d4:0f:c5:9b:9c:3f:aa:3c:17:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:52:CC:0C:0B:26:6F:D6:55:2C:77:68:CD:C5:52:F3:1C:72:E7
X509v3 Authority Key Identifier:
keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2d:ac:f8:2e:ab:c8:e3:07:6d:f3:6f:1b:03:1f:2e:df:ba:
6c:51:bb:62:62:f4:4b:e5:a2:1a:78:a5:ce:d6:3d:38:fe:8d:
e0:57:d3:fd:6e:2c:93:ca:7f:e1:2c:0d:08:e7:e3:34:9d:c0:
9f:96:f2:b7:29:b9:e4:54:83:7c:1f:04:80:80:05:fe:ca:42:
a9:41:dd:be:86:f0:ba:1c:ce:45:54:01:90:a5:e8:0d:9f:a0:
8d:15:4e:da:e2:55:55:20:95:c4:42:f0:a8:74:28:8a:3a:8c:
18:64:f5:9c:ac:5c:93:c6:b7:19:5a:0a:55:1d:e5:ce:70:e1:
e5:45:9e:22:e5:3b:bb:52:7b:24:06:7f:9c:cb:23:59:96:a0:
de:6e:64:73:2f:67:6e:d1:d7:2e:95:b2:a6:96:c2:94:9a:96:
b2:4a:ba:ca:43:fc:05:f9:55:b8:93:c5:f3:7b:11:56:49:d9:
c2:ef:94:19:46:f7:f7:ee:d5:7e:8b:e3:14:8a:9d:44:6d:79:
8f:04:0c:78:3d:f2:4d:0d:e8:b7:3c:bb:cc:8e:0e:11:f7:0b:
91:45:d9:9c:4d:e1:9a:75:e5:2a:e9:75:95:c1:e4:ac:c0:c5:
c4:f3:76:db:86:82:d3:45:f4:6a:7e:43:dd:6a:71:74:d6:fd:
c7:c4:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:32:38 2025 by rpki-client