Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
File: ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json)
Hash identifier: 0mhYxAszGhv/XhSaW5vT5BrGYY85OUDxsDtwcPD2gkI=
Subject key identifier: 01:EF:06:65:EE:90:8C:4F:A9:5E:CC:F8:52:DA:5A:8B:D8:E6:88:AF
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial: 019678D603E21BEB4A52F9961C237AE078BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
Manifest number: 127B
Signing time: Sun 27 Apr 2025 20:00:13 +0000
Manifest this update: Sun 27 Apr 2025 20:00:13 +0000
Manifest next update: Mon 28 Apr 2025 20:00:13 +0000
Files and hashes: 1: HROKUTUR5gMY3n6zglHSVCbZS_I.roa (hash: w0BOZ7icboJC4/TfINzPR6MRHeR0gZCuXliuxuy25YQ=)
2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: r6tlWv4/ovZZZONQKDTUggi6tvgu0njWPcUKK5iWxLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:03:e2:1b:eb:4a:52:f9:96:1c:23:7a:e0:78:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Validity
Not Before: Apr 27 20:00:13 2025 GMT
Not After : Apr 28 20:00:13 2025 GMT
Subject: CN=01ef0665ee908c4fa95eccf852da5a8bd8e688af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:1e:de:de:ae:f5:31:17:87:7f:ab:7f:83:
ee:7a:18:62:8c:b2:dc:98:0b:98:36:7f:2a:e6:41:
00:d5:44:26:ff:6e:0a:90:54:1e:6c:e7:06:23:a9:
cc:15:cc:77:2a:e2:4c:97:d3:47:43:59:9e:d7:39:
53:94:f3:43:e9:63:89:14:ab:14:67:65:32:15:99:
aa:cb:f4:e4:27:d8:4c:18:47:86:ef:30:9a:62:64:
01:e7:ad:ff:b7:5e:e0:59:68:c5:9c:0b:df:46:5e:
cf:60:be:5b:52:a9:89:3e:02:12:0c:0b:09:6f:36:
f0:15:bb:c5:2d:63:4f:71:ba:3f:e0:59:1c:0e:1c:
ce:10:b2:0e:55:c6:88:ca:91:ea:a8:d2:20:81:1f:
e6:c2:bd:4a:4b:47:11:0c:f3:b0:b8:4e:2f:77:cc:
47:45:d0:86:05:64:f8:e2:3c:6e:62:7a:fe:f4:d0:
7e:cc:97:e0:fa:dd:4f:ea:ee:ce:c7:e3:2f:d7:5f:
dd:a0:39:b4:e0:78:e4:79:f0:5f:ac:7a:37:46:b5:
7d:3e:af:ce:7b:39:b0:fd:a9:d3:20:cc:26:36:5e:
97:d5:e8:0e:32:5f:b3:ec:21:b3:05:ef:46:ac:c9:
a7:1a:b4:d8:86:29:8a:b8:cd:e6:c2:81:3f:6a:3e:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:06:65:EE:90:8C:4F:A9:5E:CC:F8:52:DA:5A:8B:D8:E6:88:AF
X509v3 Authority Key Identifier:
keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5f:5b:76:83:ed:7e:33:00:a6:bd:74:df:3a:2f:26:fd:ec:
65:99:eb:47:e3:77:0b:31:35:1e:96:a7:29:23:66:d9:17:f2:
c7:ae:35:3e:36:21:c3:b4:3f:c1:5d:54:6b:38:fd:f1:09:a5:
e7:33:6b:3b:eb:da:94:df:9d:e1:0c:f6:b0:a7:05:41:80:80:
83:43:dd:4b:fb:b9:c4:44:8c:7c:e3:48:8d:97:31:53:77:ae:
d6:98:47:05:c6:95:c2:15:f0:c6:4c:ca:8e:e6:3c:a0:0f:ba:
5e:e2:28:03:fd:95:1a:0f:e2:75:e6:a7:06:ec:4f:b1:dd:97:
8f:0d:ca:c1:b9:fd:98:f6:d1:59:ad:63:55:9f:f4:f6:74:4f:
81:3e:99:4b:6f:22:69:58:19:7e:ae:68:34:21:86:bc:5f:cb:
73:36:6b:fe:9b:45:c6:a3:36:b0:5a:dc:ab:20:81:4c:7f:d0:
94:07:54:36:c3:ec:12:bf:dc:50:cb:fb:26:42:84:5f:13:11:
5b:32:1f:8f:f8:c4:04:27:79:10:cb:15:08:e8:cd:88:94:6e:
d0:9a:e3:7b:fc:4e:a2:9c:12:4f:a6:73:7c:ac:a9:d1:df:93:
6d:d3:22:06:b7:53:8c:77:a9:75:91:0a:67:a5:83:70:03:f0:
20:75:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:53:50 2025 by rpki-client