Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
File: tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json)
Hash identifier: Iw/pfg2oDvodV/bE6U8Fj3zVR2zSRJUjmX2hoPqz3iI=
Subject key identifier: F3:F8:81:0A:57:9F:63:73:01:EC:EE:5E:08:BA:CE:F1:87:02:A0:A2
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: 0196895C5D0CF87CFE866C4A97005784AF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
Manifest number: 0C98
Signing time: Thu 01 May 2025 01:00:53 +0000
Manifest this update: Thu 01 May 2025 01:00:53 +0000
Manifest next update: Fri 02 May 2025 01:00:53 +0000
Files and hashes: 1: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: v70ymWaLey3hR7JVzvyy7rqbsarpaAKIc/5aqTQvDUo=)
2: uvCFX9itk7RPxPZl6lvvghFjg1E.roa (hash: P3N8o135VPbcqFaS3kCnXkMSVi3GCBY96T9QuQyMyig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:5d:0c:f8:7c:fe:86:6c:4a:97:00:57:84:af:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: May 1 01:00:53 2025 GMT
Not After : May 2 01:00:53 2025 GMT
Subject: CN=f3f8810a579f637301ecee5e08bacef18702a0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:35:b6:af:5c:83:cb:35:17:cf:81:d2:74:
b5:b9:5c:a7:5d:65:d1:60:6f:5e:f6:7e:6c:3d:1f:
24:a3:58:18:4a:52:91:e7:41:79:67:e9:f6:92:7a:
4e:3d:5e:7f:01:fa:95:ef:0c:22:32:fd:91:19:7f:
4c:51:b8:59:21:01:c5:ce:a6:ea:5c:62:38:5c:72:
70:6b:9e:e9:c0:bd:57:56:a6:bd:bc:7d:64:35:a4:
09:92:b0:65:df:f1:7f:09:77:0e:fc:eb:fe:d1:80:
b9:de:92:07:e7:eb:6e:02:61:ba:fa:5b:15:f9:a1:
aa:d1:e0:83:d7:62:53:d6:ac:12:93:f9:d1:27:65:
64:ac:e9:50:3f:09:0a:67:9f:30:73:8f:78:fc:92:
cd:a1:f0:95:5a:32:84:7d:38:71:c9:8a:b6:fd:ec:
66:0a:57:94:41:d1:36:f3:c9:08:99:a6:ba:26:70:
69:54:45:d2:62:0a:0e:34:13:25:be:41:a3:1f:a8:
c1:f0:fd:d1:3e:24:2d:6e:7d:43:42:3c:c3:13:7e:
1e:29:1c:58:ae:97:d2:b0:5e:16:91:26:ee:c5:ef:
fd:ca:93:c5:90:33:67:e9:1d:85:7d:83:f1:ff:07:
aa:0d:a5:a0:48:9d:8b:0b:68:26:1d:e0:fb:32:9d:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F8:81:0A:57:9F:63:73:01:EC:EE:5E:08:BA:CE:F1:87:02:A0:A2
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:24:75:c7:d9:63:46:d7:f1:76:5c:b5:07:3f:bd:08:8e:6f:
df:75:ac:79:e4:94:f0:cf:d8:cc:03:2f:e9:f4:f5:96:c9:6d:
41:f6:81:48:4d:e1:9d:a1:e0:d5:83:73:d7:d9:5b:c1:0a:11:
a7:d0:f0:54:09:8a:8c:5d:d6:8e:ad:d1:86:bb:53:19:6c:c1:
d5:c5:8e:65:8a:6e:b3:72:38:2a:c6:8f:fd:4e:0a:32:45:1d:
b3:c1:0b:96:aa:b6:ce:30:19:74:83:63:6e:c4:6a:8c:fa:e9:
2f:03:cb:ab:ee:85:3e:bf:5b:4a:2c:3e:83:a0:ed:6a:e9:22:
c9:ad:1e:c9:ac:87:a4:f8:b5:29:d1:8b:8a:7a:a8:80:1c:73:
a3:1a:66:84:d1:41:89:cb:5f:f7:02:8e:bd:02:3e:45:e5:72:
b2:db:c1:9a:39:ec:57:c4:98:cc:43:13:44:30:80:65:b5:fc:
89:d0:4c:77:a4:07:c3:07:ff:69:b7:10:70:5b:fd:07:1a:63:
c7:93:9e:88:1f:36:e9:99:8c:8a:9d:31:ea:21:88:f5:6a:6f:
e4:34:b7:2d:07:5f:78:74:a4:91:ee:94:3b:28:a5:db:04:0f:
77:6f:5b:ab:3e:b8:b6:7a:76:ca:6b:4e:d7:0e:13:b3:48:5d:
d9:09:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:14:16 2025 by rpki-client