Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
File: tRYDJr5-XNw1tcA2RBFjzSWkl00.mft (raw, json)
Hash identifier: rbUx/q/LvIuKHI7c6bHK3B1St6SDC2jaekTOmXx/cME=
Subject key identifier: 93:4F:5B:72:72:32:B5:D7:DE:72:B9:B4:5F:61:84:BB:3D:82:8D:7A
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial: 019683230224C44C402FF1C87861E0CADBB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 20:00:31 +0000
Manifest this update: Tue 29 Apr 2025 20:00:31 +0000
Manifest next update: Wed 30 Apr 2025 20:00:31 +0000
Files and hashes: 1: 8ia-FfbPiHzFeisz5Ltz_iH4NuE.roa (hash: 2vUluYbn/ZjPa8MjPMnro3n0N0IitO4q9I7893CE2pw=)
2: tRYDJr5-XNw1tcA2RBFjzSWkl00.crl (hash: lxYTsxQJsutjOyQl+tP/XATxIk3WzwyambBC2tTMr4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:02:24:c4:4c:40:2f:f1:c8:78:61:e0:ca:db:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Validity
Not Before: Apr 29 20:00:31 2025 GMT
Not After : Apr 30 20:00:31 2025 GMT
Subject: CN=934f5b727232b5d7de72b9b45f6184bb3d828d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:73:3d:67:25:bd:e4:98:13:c4:9a:c1:fe:
f1:98:b6:a3:a8:c5:24:65:c1:05:1a:cb:57:a7:36:
f3:e0:93:d8:ce:f6:2d:d2:ed:3a:83:c6:f2:f9:79:
02:59:02:14:f6:38:ee:18:2e:b1:77:88:43:42:46:
d5:6f:b0:09:28:f4:9c:6c:40:0d:24:ae:7c:8d:ed:
5d:04:28:b2:53:4b:df:6d:6c:37:83:56:50:75:cf:
fb:ec:f7:c6:d3:56:05:37:0a:95:00:c5:21:82:e5:
31:1f:72:b5:b4:a5:c1:ff:59:f5:a1:4e:35:e4:c7:
f0:fd:32:ea:98:8d:37:2a:7d:bc:f0:ed:cd:fe:79:
dc:be:dc:3b:43:92:de:29:e1:07:2e:78:61:37:1a:
da:cc:71:37:66:47:3c:a5:e5:63:90:22:8d:53:f4:
19:57:10:b8:4a:35:e7:aa:31:26:87:75:ed:c3:39:
f8:36:20:82:1d:df:07:0b:5e:51:c5:ce:a9:75:cf:
1b:3c:a4:65:88:7a:0c:cb:9b:09:3c:87:66:d5:01:
c6:02:98:3c:1d:7d:33:b2:3a:a8:14:ad:6a:b3:fd:
f8:3c:fb:19:f9:6b:77:7b:03:b9:ca:01:d6:ea:26:
d0:fa:2d:99:ac:9c:32:78:73:44:74:40:ac:cc:5a:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:5B:72:72:32:B5:D7:DE:72:B9:B4:5F:61:84:BB:3D:82:8D:7A
X509v3 Authority Key Identifier:
keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c1:30:40:50:99:3d:18:ab:20:60:6a:03:4b:9a:63:31:cb:
f3:73:5d:f9:d9:1a:df:e6:b7:36:22:fd:bd:c0:5c:e3:53:94:
8b:c5:da:10:4b:3b:cf:1c:8f:8e:15:9a:e3:ef:1f:e8:df:7d:
45:62:35:95:c2:42:d0:7e:7e:5b:7f:65:7d:9c:db:19:d6:58:
a9:4b:40:11:f5:83:93:0e:d5:c8:01:02:40:57:a3:02:9f:e3:
8e:4d:c5:97:1f:05:e0:71:f0:6e:06:d4:27:73:a4:88:97:b3:
1e:f0:b7:55:53:b9:15:10:57:cf:e8:4e:34:1f:bc:03:db:10:
1b:9e:2f:c4:8c:ca:9d:94:e5:03:0e:ed:5f:30:c6:75:2f:a1:
05:72:b0:e4:d1:41:7c:0c:c5:dc:95:3d:2a:29:47:e1:7b:73:
60:ae:05:9e:db:ef:2c:9e:e0:c7:93:a2:6c:1b:59:a9:1d:5a:
6f:20:13:76:76:3e:b2:31:7a:71:42:fe:06:c3:06:3a:53:10:
e6:1c:f5:13:57:e8:35:f0:c5:91:6a:38:bb:79:9a:88:2f:46:
9b:7b:9f:e2:e0:b4:1f:85:45:95:93:ea:0e:5c:b0:66:f4:b4:
df:62:75:97:06:ce:db:43:a2:4d:ca:b6:bd:10:e1:58:2a:51:
48:0a:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:35:11 2025 by rpki-client