Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: VYA3cIvyLjs6TttN9YPyuiHYVet7Et1Sq/lzGrf8wEw=
Subject key identifier: D9:02:8C:34:90:5E:F7:18:3A:8D:5B:62:31:7C:B9:B6:9D:A3:2E:11
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 019693DF96BF8E59A788675DF9B8095EF328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 12BF
Signing time: Sat 03 May 2025 02:00:25 +0000
Manifest this update: Sat 03 May 2025 02:00:25 +0000
Manifest next update: Sun 04 May 2025 02:00:25 +0000
Files and hashes: 1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=)
2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: 6X6JAsv7UKX3k60BomVAZijNie1fXFwOHum6jXo5HE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:df:96:bf:8e:59:a7:88:67:5d:f9:b8:09:5e:f3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: May 3 02:00:25 2025 GMT
Not After : May 4 02:00:25 2025 GMT
Subject: CN=d9028c34905ef7183a8d5b62317cb9b69da32e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:f1:ad:91:14:38:e7:5d:27:2f:4a:44:5f:
71:f1:80:f0:52:44:32:fb:9e:33:31:0b:ff:64:0b:
44:06:ac:d7:50:f2:8c:c8:a9:73:f3:37:9d:d1:71:
c4:5d:1e:e6:e0:6d:e0:99:4b:07:c5:f5:9d:39:33:
8f:7d:a0:6d:33:09:17:4a:7b:88:b4:eb:01:c9:41:
b2:bd:51:8f:81:1e:d0:3f:ba:49:51:17:03:d1:99:
83:7d:ac:cb:b1:8a:c0:da:7d:98:2d:be:80:f8:0b:
82:c2:44:7d:69:98:5c:01:be:c0:bf:56:41:ca:d3:
da:5e:dc:8c:21:3a:81:44:a8:85:04:8e:25:a5:07:
76:df:04:b7:b8:5b:69:d5:de:14:d5:dc:99:05:3d:
26:6f:5a:43:36:46:e9:59:df:63:00:8e:3f:5d:50:
6d:eb:3f:ff:47:14:ea:39:ea:96:71:8b:0c:98:8a:
c3:67:03:ce:51:d2:1e:bc:1d:c0:01:16:7b:dd:88:
79:46:60:f9:a5:8e:72:3e:26:5f:34:ae:df:27:5f:
c1:2f:91:f8:08:d7:86:8c:17:9e:78:f2:09:c6:aa:
68:19:7e:6c:7d:db:e1:9f:87:de:92:ae:e2:ae:d9:
70:dd:4e:c3:56:58:25:04:3b:23:21:54:eb:0b:30:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:8C:34:90:5E:F7:18:3A:8D:5B:62:31:7C:B9:B6:9D:A3:2E:11
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c8:0c:8f:c5:a9:05:e0:27:37:67:01:c3:6b:11:ff:6a:29:
1c:63:88:6e:60:b7:21:c5:fa:1b:98:8b:d7:78:23:05:5c:6e:
17:b2:28:07:63:04:23:af:47:89:37:3c:a8:e0:f3:c0:80:ba:
da:da:3f:59:01:a0:d4:9a:5c:00:49:7e:ae:d0:51:43:d7:42:
6f:a7:17:72:8c:13:38:c5:d2:b3:e6:74:ab:e2:dd:9f:3f:0a:
0f:f5:7e:8b:02:89:03:cf:f8:37:68:e6:fa:a2:d4:b9:a3:c2:
d1:36:23:70:32:a0:2e:fb:75:3c:27:20:b1:8c:74:7d:b6:b6:
3e:a4:f2:bf:00:8a:6f:e9:dc:46:7d:c3:6c:43:eb:b3:2d:4c:
dd:41:19:c6:9b:6f:9c:0c:a8:b2:e0:ec:49:71:21:81:d2:56:
06:ac:df:e0:c2:ce:ce:01:73:65:9b:09:10:95:4f:b7:ec:25:
cf:f6:83:05:0a:fa:9a:c0:9f:b8:98:b7:b9:d0:a2:64:49:1c:
43:00:8a:24:32:ca:79:9e:eb:cc:ee:80:e6:d1:7d:94:e7:c3:
5d:f0:48:24:b7:58:ac:3b:d6:e6:42:a6:4a:8c:02:93:d5:ff:
9a:b0:cc:cc:e1:04:d0:d0:39:5f:cc:8f:08:5a:83:bd:87:cc:
fc:09:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:47:18 2025 by rpki-client