Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: kWDD7nLw4GSZrRw99x6HUv65vBgpBzpaFnx1Z2vLntg=
Subject key identifier: 5A:58:DA:FB:AA:07:A8:1E:6F:FD:47:F5:C7:B5:89:0C:90:75:1C:F5
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 01968D39A7CB1F365097179AD0366BA91D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 19:01:28 +0000
Manifest this update: Thu 01 May 2025 19:01:28 +0000
Manifest next update: Fri 02 May 2025 19:01:28 +0000
Files and hashes: 1: ZZlyR1qePInNwWMshU_T-zKOIRs.roa (hash: 1/uH+W7Kksp46/1+HMCQDG/zqQ+/+VqifvgRn9tMf2U=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: YTL9QVtAgHY8heSr6Y+AhcuTM6KdfqB3wWhIVP22mY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:a7:cb:1f:36:50:97:17:9a:d0:36:6b:a9:1d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: May 1 19:01:28 2025 GMT
Not After : May 2 19:01:28 2025 GMT
Subject: CN=5a58dafbaa07a81e6ffd47f5c7b5890c90751cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:2f:19:d6:85:1c:ff:98:60:f5:7f:ea:50:
1b:04:04:2c:e2:7c:cd:d9:6b:b8:ad:19:99:63:f9:
d6:44:42:bb:aa:e9:b7:42:65:4b:f0:13:39:03:46:
6d:77:a0:98:f4:11:94:2c:3a:88:10:27:86:c5:14:
51:bc:bf:09:a1:6f:de:4f:c3:58:5d:b9:47:66:0b:
34:66:3b:f4:37:e8:a5:92:ab:68:d0:83:58:f8:a2:
c2:bb:85:00:25:72:27:96:cc:15:56:ef:e7:49:08:
92:22:f3:d9:91:a8:8d:61:2c:26:c5:af:e3:9d:16:
55:14:d9:c9:26:4b:c9:98:01:7a:50:92:a9:f2:54:
ea:e0:7d:af:ce:09:7d:8e:e4:aa:03:5e:f4:58:a2:
35:81:e2:8e:98:fc:50:9e:73:10:e0:43:7b:7d:57:
6e:cd:d6:2c:f2:5b:35:18:b7:c0:a4:a4:d6:18:09:
8e:00:55:cb:f1:5a:39:e4:f3:8a:68:7f:4d:94:23:
5e:5b:f6:75:1d:f2:00:a1:5c:79:26:d3:cf:13:69:
6c:19:97:f7:96:21:09:62:31:d8:47:32:2f:36:bb:
f9:b0:7e:c9:ec:f6:aa:b6:86:cf:e1:80:e1:4e:a6:
d8:d2:0b:51:8b:96:d1:f3:0e:14:8c:75:e4:89:7a:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:58:DA:FB:AA:07:A8:1E:6F:FD:47:F5:C7:B5:89:0C:90:75:1C:F5
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:03:fa:b7:b4:08:3b:6b:20:81:7b:89:53:ac:ff:63:e7:cc:
4b:11:8a:b1:29:34:ec:15:db:28:45:d6:62:a1:c7:67:d2:c3:
6e:aa:36:e6:26:a2:e4:c2:a6:55:e6:56:2b:a7:2b:ad:b3:15:
ec:ad:b2:b3:a6:81:70:c2:f3:4c:88:6c:70:90:7a:1e:b5:ab:
82:d8:7d:98:04:82:45:3b:b3:d1:13:73:c5:a3:c6:f7:a9:e6:
8b:8a:10:5c:e9:14:b3:dd:2f:90:81:2c:e5:5c:00:ec:ea:93:
59:b5:70:04:57:1b:ae:e2:9f:c2:3d:72:82:35:65:e7:ac:c4:
69:44:54:bc:9c:31:bf:ec:ac:23:ad:c8:55:8d:5c:36:2f:a2:
8a:7f:5e:de:88:39:54:3a:29:6a:10:58:fa:09:84:e6:a5:07:
96:e6:80:ba:b2:23:5c:a8:25:71:9e:a7:44:a9:83:37:77:30:
03:89:3c:81:0d:bf:e7:87:c9:47:6d:75:df:44:90:cd:79:96:
da:fb:34:85:15:a1:ce:ff:fb:ef:0a:99:40:dd:c4:08:c5:9e:
6a:6f:19:84:5b:cc:33:fb:3d:ba:02:b7:54:af:8d:e7:2e:b1:
e0:d9:44:7b:ff:12:80:04:d8:4b:f4:51:73:e8:62:32:38:b5:
fd:b3:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:09:50 2025 by rpki-client