Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier: xBDg/wtNVFo+I2WdhIcDWvEL4hUr4JQz2pZg3A29ogM=
Subject key identifier: DA:E5:E9:54:DF:44:0F:2C:BD:6D:5F:FD:55:31:BF:9C:D0:07:46:16
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial: 019680229394DF18DFECA76505CFCD1A5CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number: 0309
Signing time: Tue 29 Apr 2025 06:01:11 +0000
Manifest this update: Tue 29 Apr 2025 06:01:11 +0000
Manifest next update: Wed 30 Apr 2025 06:01:11 +0000
Files and hashes: 1: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (hash: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=)
2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: jAWNU/M20uocSk5xjSf5ajIlWZRTls1xbGzv+V+hld0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:93:94:df:18:df:ec:a7:65:05:cf:cd:1a:5c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Validity
Not Before: Apr 29 06:01:11 2025 GMT
Not After : Apr 30 06:01:11 2025 GMT
Subject: CN=dae5e954df440f2cbd6d5ffd5531bf9cd0074616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:98:8e:8a:ae:c6:b1:e4:20:a7:e3:1d:ff:
10:f8:81:2d:07:03:12:4b:06:be:37:7e:7f:4a:c8:
cc:61:24:2b:68:a3:fd:88:76:1f:8b:22:83:51:2f:
ee:a3:bf:7d:bf:ce:fd:27:45:a9:29:d6:83:cc:df:
a3:35:88:90:6c:49:16:d5:b3:0f:2a:cd:55:3e:9e:
f2:f8:d8:38:e4:74:05:ba:07:35:21:e9:44:02:10:
34:87:1a:12:7b:b0:50:39:d3:72:dc:a8:7c:f9:5c:
70:34:f5:4d:1a:b0:f5:ea:36:fa:e4:c1:b0:e2:a1:
b4:9a:60:12:f8:db:32:2f:6e:e6:aa:31:5f:56:02:
5e:14:d2:17:bd:01:a5:66:3e:50:e0:b3:74:6a:1f:
0c:9a:61:af:88:c5:49:99:e8:e2:4e:e4:87:0d:a2:
6a:f6:d8:7e:33:a0:5b:30:0a:24:1c:8e:55:b8:53:
e1:e8:63:7f:80:72:d3:fd:6e:53:77:21:95:af:55:
e4:d8:1b:16:d4:31:d8:ed:c3:82:14:81:23:61:58:
ef:97:ca:f7:14:d6:9a:22:58:6b:92:c0:8d:e3:eb:
d0:00:67:17:77:92:aa:87:71:55:3f:94:e8:2c:cf:
0e:d1:e9:bf:67:44:ab:34:06:65:99:c6:44:25:13:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E5:E9:54:DF:44:0F:2C:BD:6D:5F:FD:55:31:BF:9C:D0:07:46:16
X509v3 Authority Key Identifier:
keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:70:36:a6:c0:5b:de:00:93:85:ae:2a:6a:22:60:08:41:79:
df:f4:69:0a:65:d1:52:60:ad:71:34:1e:43:57:c4:4e:78:e0:
ed:e4:21:fc:62:92:e2:29:e7:07:56:b1:d2:2d:29:5c:4a:b6:
20:3a:b0:2e:4b:47:65:5b:a3:17:68:e6:fe:c6:ab:f4:b5:33:
16:c1:dc:88:3a:3f:12:5f:0e:4a:ca:7a:1d:25:db:f5:90:41:
1a:f8:ea:39:d4:55:24:77:d0:aa:15:1e:9d:2a:b7:39:22:ee:
51:76:60:b8:2e:5a:cc:63:4f:54:e6:f9:ef:1f:7d:c5:87:a0:
04:d4:d4:9f:ef:65:72:09:72:19:73:d0:97:99:37:84:ed:11:
4b:34:f5:91:75:31:65:39:c0:89:ec:c0:fc:14:c5:48:9f:4b:
7c:47:ef:95:94:2e:32:0c:ad:ad:bd:ad:5e:49:98:6b:00:c6:
3e:07:eb:4b:c8:3e:35:3f:ac:0a:04:06:43:fd:11:c2:bd:5b:
68:8c:81:0b:09:22:db:4f:57:db:9d:64:59:d3:f9:40:3d:d4:
ea:64:45:a3:3b:da:e0:51:88:48:c8:30:2c:46:ec:8c:d2:3f:
50:c6:48:06:40:5a:31:38:2e:a8:d4:67:ec:ee:f6:d6:08:6b:
bc:50:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:23:13 2025 by rpki-client