Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: asNrMN7PQaYLCGwg0t5kYsITIZnx3l9/wkh6bd3rHIA=
Subject key identifier: AF:F1:4C:64:E3:1D:1A:73:23:F3:51:32:99:73:06:89:52:A9:D0:2F
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 01967F7D727D9B0733F2016981EED6CD0F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 05EA
Signing time: Tue 29 Apr 2025 03:00:49 +0000
Manifest this update: Tue 29 Apr 2025 03:00:49 +0000
Manifest next update: Wed 30 Apr 2025 03:00:49 +0000
Files and hashes: 1: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (hash: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: ykf/7AIwPMYeRB2NBymf5ntDAKL37Si0amXZWqi0H/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:72:7d:9b:07:33:f2:01:69:81:ee:d6:cd:0f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Apr 29 03:00:49 2025 GMT
Not After : Apr 30 03:00:49 2025 GMT
Subject: CN=aff14c64e31d1a7323f351329973068952a9d02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cb:f5:db:86:cc:5d:78:f1:33:61:08:f3:b7:
8a:64:1d:c5:38:19:fc:ba:bf:1a:7a:26:23:0f:66:
66:7c:9d:39:bd:cf:58:7a:d2:2e:1f:4e:ec:0a:5e:
b7:2b:61:c1:63:c9:12:cb:af:86:bf:b2:f5:76:7e:
56:69:69:c2:86:45:4d:fd:1a:e5:bd:b9:15:6f:8f:
37:e4:ca:cf:32:ff:84:bd:65:f4:2e:63:4a:ab:17:
32:9b:97:7c:9d:f0:4e:4a:f4:cb:0a:0a:5d:fe:10:
b1:91:ed:31:9e:2b:59:00:05:bb:84:2f:5f:c6:79:
27:3e:77:a5:f0:f1:24:8e:22:3c:b3:17:3d:7b:ce:
32:c7:bf:ef:74:c4:f5:12:1e:32:b3:c1:c0:1f:d2:
51:ad:24:01:7f:16:ba:19:e4:3f:78:7a:6c:cc:05:
cd:b4:72:d7:01:81:af:dd:a6:48:c4:8b:35:25:de:
5c:40:b0:f7:9e:ab:dd:fd:f0:ff:e4:56:f0:6a:7c:
b0:87:81:86:5a:fc:a8:a5:0e:a5:ae:9f:05:cb:14:
5e:f1:50:94:61:00:e5:74:9f:a1:50:1e:03:c6:48:
21:25:ed:fd:d5:d9:6e:a2:75:27:40:6e:7d:a1:d0:
06:ab:3a:9d:9c:d3:30:cb:1e:a5:b6:c8:25:ab:90:
5f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F1:4C:64:E3:1D:1A:73:23:F3:51:32:99:73:06:89:52:A9:D0:2F
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:a6:0b:52:39:22:43:bb:93:46:4c:43:ab:1f:e2:fa:08:
c3:65:dc:f2:91:ea:a1:e4:31:eb:b2:c4:d3:32:18:50:5c:de:
80:79:68:b1:cf:ee:15:00:95:bb:8d:19:2f:52:09:dc:31:35:
e3:0f:40:6c:67:f9:be:c9:02:af:2e:c7:e4:64:2e:d0:d2:78:
99:ee:84:39:e7:ad:0d:0f:a5:3f:f6:2f:d4:b4:73:87:63:15:
de:76:82:03:7b:4a:39:cf:f5:db:84:58:45:9f:e5:f1:9d:93:
7f:fe:29:f6:45:97:c0:f1:a7:65:91:c9:f2:10:4f:79:90:53:
ad:e0:f0:f7:32:1b:d9:52:a2:f2:fc:27:01:6a:0c:3e:b9:1a:
a4:98:a1:20:f1:d2:ae:0c:21:c1:fd:77:2c:0b:98:e0:e2:1f:
c4:62:b6:dd:d1:09:31:1b:9c:83:1d:38:4e:12:06:a0:c1:88:
61:4e:c8:29:80:2c:28:90:ee:b9:f9:4c:56:fc:f1:c8:57:79:
d7:22:92:2b:9c:1c:ca:73:17:88:7f:14:db:04:94:ce:a9:f0:
0a:94:c9:9c:75:fc:99:fb:5e:0f:bc:94:5b:c2:08:2c:b9:da:
ad:13:12:d7:4e:15:cb:1e:9a:3d:92:25:4f:e3:0a:cc:4f:17:
b4:d5:b0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:48 2025 by rpki-client