Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File: a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier: ET1TwRvGXV9AnRvSWcaz8qfGMellitLlF+7dbt4V3Og=
Subject key identifier: DE:81:1A:27:1B:B8:40:E3:4A:5A:8D:D0:0B:DD:09:8C:36:C5:F2:7A
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial: 01967ED8A71B569902594D039A3185AB1A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number: 0392
Signing time: Tue 29 Apr 2025 00:00:49 +0000
Manifest this update: Tue 29 Apr 2025 00:00:49 +0000
Manifest next update: Wed 30 Apr 2025 00:00:49 +0000
Files and hashes: 1: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: PD+Zd0VGS2ES1i9/Sn231rad2tJF3Zt6q+cPkvqx2As=)
2: br9nNW8HTMSPThu0IYs9YJPit9M.roa (hash: +GZtKTMjwkIHJlC7o9X+rvG+Xi3NBXRyc3GslA3d0UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:a7:1b:56:99:02:59:4d:03:9a:31:85:ab:1a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Validity
Not Before: Apr 29 00:00:49 2025 GMT
Not After : Apr 30 00:00:49 2025 GMT
Subject: CN=de811a271bb840e34a5a8dd00bdd098c36c5f27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:9f:85:81:6d:80:7e:6a:99:0c:92:92:15:
11:2d:51:a6:b4:61:1b:08:da:43:59:f7:14:c4:f7:
26:8e:8e:d2:04:91:fd:43:5b:4f:35:6e:55:6c:80:
d4:14:09:6b:10:d9:89:3e:ff:89:de:5d:ae:7a:92:
e5:22:42:7a:31:fd:72:1d:b9:e8:94:e2:f6:a4:9b:
a7:49:8e:f2:d4:c2:3d:7f:1d:ee:4e:a9:57:76:c6:
45:61:7f:e8:5d:83:7b:ca:32:5a:7f:e0:c8:b4:d3:
5b:1c:62:94:90:72:ad:db:73:92:0d:87:f3:dc:ca:
93:9e:3a:03:b5:78:dc:ca:61:4d:5d:57:8c:de:54:
c2:26:fd:27:2f:d6:00:c2:33:0a:29:62:60:85:4a:
cd:71:66:0c:0c:55:4a:b4:b8:31:8b:95:e9:bc:51:
bf:90:e8:94:75:9f:6a:7f:fb:f4:69:a2:50:b8:7d:
89:cc:27:56:e1:93:c3:07:ba:e8:24:6f:f1:4d:05:
1c:5c:95:b4:39:eb:00:ef:64:4a:8c:65:4d:76:49:
1f:27:52:2d:f9:e4:e9:e0:6e:35:6d:2f:fb:5a:97:
78:16:ef:bc:f2:8e:65:35:ce:26:05:d8:c9:07:bd:
26:4b:38:7c:99:38:31:42:86:60:2a:8e:1b:5c:ae:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:81:1A:27:1B:B8:40:E3:4A:5A:8D:D0:0B:DD:09:8C:36:C5:F2:7A
X509v3 Authority Key Identifier:
keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:eb:85:64:db:e2:e8:b4:10:b8:a3:32:82:60:ce:ad:85:42:
a7:7c:e8:8a:42:34:d9:3f:3f:e8:97:c7:87:59:a3:c0:5a:ee:
64:23:49:81:eb:d7:a3:9f:b7:0e:1b:37:65:54:c5:c2:4e:c8:
1c:81:40:d2:1f:b1:5a:a9:5b:ba:9c:3f:33:e7:1a:44:3b:2c:
8e:c7:b1:b9:e2:c5:02:ca:86:71:de:4f:bb:60:32:c5:83:f0:
15:0f:1f:65:f8:1b:f6:86:08:7c:4f:92:38:c1:0e:c2:de:aa:
b8:49:b4:04:1c:ec:75:d7:e1:17:b8:cf:77:88:95:fd:2d:58:
10:2f:91:33:bf:fa:00:d6:87:54:39:0d:83:27:9e:ed:ab:5c:
5d:b0:19:fb:78:4d:51:9a:1c:84:92:19:bd:ae:58:08:cc:07:
e7:6d:c6:5c:75:74:af:93:2d:7b:7a:d9:01:5b:3f:34:b6:a7:
15:2f:23:9d:8f:63:ba:13:c9:b8:25:2c:75:e0:37:7d:b4:a1:
fb:44:25:c7:fc:b1:ba:91:1b:86:79:cd:f0:77:ce:bd:e8:9b:
3b:36:db:96:1d:26:7a:7a:1c:e1:a2:35:80:30:4c:83:64:37:
be:4e:bf:c7:eb:59:c0:da:a5:a4:de:b3:31:45:db:f2:76:18:
07:f8:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:56:09 2025 by rpki-client