Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
File: tUSbCOpqJn33NmpolcfJJMLxkm0.mft (raw, json)
Hash identifier: WsClUkrbLLep8FGjyCXmVAW/J8BaGNQUvIlCdNXwULs=
Subject key identifier: B9:61:9C:E8:92:4D:B6:EC:A1:52:7B:F5:1C:F4:EF:14:FF:C4:FD:2E
Authority key identifier: B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
Certificate issuer: /CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Certificate serial: 01968925370DD26B22485E2A6E0B3DC30419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
Manifest number: B9
Signing time: Thu 01 May 2025 00:00:39 +0000
Manifest this update: Thu 01 May 2025 00:00:39 +0000
Manifest next update: Fri 02 May 2025 00:00:39 +0000
Files and hashes: 1: 12VZdcmHAZ40OHT9mrIrMjn0594.roa (hash: ET8sgbp54z2ReDcdD/bnaoyAnFdtN16gcR5nsUzXKcM=)
2: tUSbCOpqJn33NmpolcfJJMLxkm0.crl (hash: 7FDhCiHHgszJiX0JViYYW/Tek+9HDhvKMsHQu7d/MEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:37:0d:d2:6b:22:48:5e:2a:6e:0b:3d:c3:04:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Validity
Not Before: May 1 00:00:39 2025 GMT
Not After : May 2 00:00:39 2025 GMT
Subject: CN=b9619ce8924db6eca1527bf51cf4ef14ffc4fd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:00:0f:ac:7a:49:ad:42:29:19:33:f4:75:
34:b5:ac:9a:0f:c9:5d:a7:50:25:29:a6:64:d7:a6:
a6:08:73:0b:e0:27:f1:cf:88:90:05:6b:3f:90:88:
ee:ee:62:6d:67:3b:f3:b1:46:76:71:fa:8a:83:a7:
ce:88:77:05:42:61:2e:e6:54:5a:14:8f:20:9e:b8:
25:6a:68:b0:93:6e:48:d4:6f:fd:c9:ff:ea:c8:70:
49:36:f9:ba:17:97:37:30:d2:51:71:4b:9c:82:99:
59:0b:40:9f:3c:51:2b:34:3b:4e:d3:74:04:71:fe:
d4:0c:d2:45:bc:2c:0a:ff:b7:97:70:8d:6b:16:c3:
4f:19:e8:2e:11:29:bd:bd:5b:d3:49:8e:5a:25:4f:
bd:a5:f5:f3:d2:11:9f:f8:ca:00:08:9f:dc:4b:3f:
38:b2:6e:4b:53:d9:46:89:79:b0:4c:17:ca:59:77:
fc:4c:43:35:c5:04:96:43:a0:ec:02:93:2f:95:22:
3f:1b:dd:fb:2c:c5:c3:18:f5:1a:f2:16:44:44:7c:
ef:c6:bc:d1:5e:15:47:3b:d8:d5:d9:a8:9f:90:36:
f7:ce:2e:52:1f:63:dc:fb:1f:54:f6:40:21:9c:94:
d0:66:16:b3:72:60:6d:56:16:c9:0f:72:93:0d:2d:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:61:9C:E8:92:4D:B6:EC:A1:52:7B:F5:1C:F4:EF:14:FF:C4:FD:2E
X509v3 Authority Key Identifier:
keyid:B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c0:58:69:78:1e:45:2f:6c:fb:fa:9e:41:e4:9e:be:b5:8e:
7a:0d:f9:eb:63:3b:49:27:15:28:ff:41:36:dd:4c:bd:29:a6:
63:f7:3c:d7:72:2b:a9:d4:b0:ab:ce:e5:e8:83:59:af:de:bd:
c3:9f:9d:35:f4:54:eb:e6:2f:ca:57:f4:e7:2e:64:28:9d:25:
62:7b:8a:b5:ab:09:b6:80:da:b7:a2:ca:cf:1e:2c:4b:ac:b9:
62:91:df:57:12:b8:d7:94:96:00:d9:e7:42:10:61:c9:96:62:
6a:cc:31:6f:14:04:a6:3f:74:cc:1e:d4:c9:4e:24:ab:68:c5:
bf:a4:48:e2:eb:aa:e2:89:9a:5b:a0:17:13:55:a7:95:12:7f:
d5:0d:05:0f:87:4c:58:06:4b:1b:6a:dd:9d:32:86:43:4f:cd:
59:cd:fd:0e:20:a4:a1:f3:29:b0:7b:65:5c:a9:87:ca:a2:74:
3e:c3:36:23:b9:17:43:6b:27:88:61:f1:3e:b1:e6:33:2c:8f:
72:81:36:95:bd:55:11:62:84:e4:34:8f:2d:f4:5c:c2:f5:76:
86:50:68:10:f2:eb:a5:3f:c7:43:9a:b6:24:27:cb:bc:61:2e:
9f:cf:39:2c:23:61:cc:60:a4:64:36:b4:5c:7c:07:5d:e9:56:
35:51:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:32:22 2025 by rpki-client