Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File: TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier: 3rKA822kpBDLO/PYjllQiWUfpA2oDZV46EdfVwD3VaE=
Subject key identifier: 8B:56:5D:62:79:C4:3C:F5:EF:8B:54:09:EE:EA:B9:86:72:35:A2:8A
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 0196914C64C44C7D687A684B10885D73BA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number: 1521
Signing time: Fri 02 May 2025 14:00:24 +0000
Manifest this update: Fri 02 May 2025 14:00:24 +0000
Manifest next update: Sat 03 May 2025 14:00:24 +0000
Files and hashes: 1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: aAPehylHo1mgY5ofwKKeHf/HJzCJOeptwdzzKZUjnR4=)
4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:64:c4:4c:7d:68:7a:68:4b:10:88:5d:73:ba:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: May 2 14:00:24 2025 GMT
Not After : May 3 14:00:24 2025 GMT
Subject: CN=8b565d6279c43cf5ef8b5409eeeab9867235a28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:b3:fc:e3:80:2f:b2:aa:4b:3b:e2:8b:1e:
e7:fb:5e:e7:01:13:a9:2d:a0:2f:41:79:bf:eb:96:
84:f5:30:51:14:0d:7b:86:8c:a0:83:77:87:ef:20:
eb:62:7f:09:18:c0:28:c1:fd:14:24:03:b5:aa:07:
81:5a:c2:81:ee:27:71:6b:fc:13:ef:33:49:9f:e8:
cd:76:3c:3f:1a:1a:0b:cf:98:39:0f:78:cc:22:57:
9f:a4:17:b2:29:b6:46:10:47:55:24:63:07:bb:a1:
f8:e8:b4:cb:f9:ce:71:85:3a:97:f5:69:13:ca:e8:
68:07:6f:b2:93:a1:3a:05:22:5c:7b:d6:8b:40:d3:
b5:9e:56:1b:e2:59:04:37:5c:f2:84:06:0d:72:22:
24:a6:01:9b:cb:d0:0f:2c:30:4c:dc:e4:97:e3:d3:
f6:73:37:4c:57:77:e8:9a:0e:44:42:8a:20:33:d7:
dd:31:d1:4a:74:df:d0:a1:61:38:27:99:70:b1:8f:
60:28:58:b6:b4:4c:17:02:37:15:c7:4e:4d:02:8c:
c7:71:84:d0:95:a3:ec:80:fa:09:58:23:e0:53:16:
2d:4a:b7:49:f2:ac:aa:09:f3:c1:40:69:12:ec:54:
30:ec:9b:4e:34:87:4b:d4:b9:88:bd:75:0d:0a:b8:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:5D:62:79:C4:3C:F5:EF:8B:54:09:EE:EA:B9:86:72:35:A2:8A
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0b:46:8c:88:7b:91:82:2b:2f:7f:f4:e3:c7:8e:51:96:d7:
95:2e:06:b6:aa:92:2c:43:a7:ba:b2:93:a6:22:87:38:4e:51:
1b:4a:33:a1:78:89:8a:91:8f:d1:90:d9:0c:8f:6b:b6:cb:c6:
48:a6:c8:61:06:d5:c3:6c:17:1e:bd:75:98:75:cf:76:b2:62:
cb:02:aa:3e:7e:be:a6:9e:94:1e:89:24:af:29:b6:0f:72:1a:
37:c2:f8:11:40:12:46:52:8b:0a:e9:e4:fc:ee:cf:a7:80:08:
fa:db:09:ad:1f:2f:5d:84:d3:e6:72:80:6d:67:d8:41:11:58:
cd:be:b9:e5:43:d1:8c:28:d1:47:b8:1b:66:d2:ec:b7:d0:37:
ad:d5:e2:b0:31:94:fe:06:26:14:90:79:b0:78:38:c3:e3:ea:
4b:cb:23:87:66:bd:ee:85:13:c1:d1:4e:d4:42:d4:99:64:d5:
13:26:15:78:6f:d6:fb:7e:75:ac:05:e9:bf:ec:d3:fe:d7:3b:
40:7c:45:63:a6:6a:9e:2a:8d:b6:3a:39:03:99:83:ba:5a:f5:
7a:38:00:ae:d9:b7:be:0d:fc:82:aa:4b:1c:20:d1:06:5d:3d:
25:86:67:85:d1:85:aa:9d:67:24:76:81:73:6d:47:ab:36:9b:
b0:de:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:31:19 2025 by rpki-client