Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: avGowg2GCqfXBfETP2dwrl2lB+ntV8hqWfwUuDCNtow=
Subject key identifier: 00:33:E5:11:B8:2F:22:33:A1:F6:C7:43:1C:FA:A5:FE:8E:6A:C3:B7
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 01968924E5712AA7C776090D904CA972E229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 033E
Signing time: Thu 01 May 2025 00:00:18 +0000
Manifest this update: Thu 01 May 2025 00:00:18 +0000
Manifest next update: Fri 02 May 2025 00:00:18 +0000
Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: Z8IiFh6ynhW+qJDPCJWLeTYiyoxtg2hWOrgoHB+Jbik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:24:e5:71:2a:a7:c7:76:09:0d:90:4c:a9:72:e2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: May 1 00:00:18 2025 GMT
Not After : May 2 00:00:18 2025 GMT
Subject: CN=0033e511b82f2233a1f6c7431cfaa5fe8e6ac3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:8b:f3:dd:6d:70:78:cc:38:33:39:c0:c3:
36:88:93:84:8f:9f:10:89:2b:dc:d9:9b:e0:31:67:
29:71:f1:92:db:70:2c:63:b5:49:48:e4:3b:a0:c8:
6f:4c:ae:a5:a0:ba:bb:ee:47:2e:2a:da:54:3a:49:
2f:7b:d6:dd:25:d9:ad:a5:b5:fa:fd:3e:de:40:ee:
68:f1:95:7f:23:cd:30:ee:8a:fd:11:82:58:9e:db:
61:c5:51:45:fa:7a:49:b9:5c:9b:af:e0:b9:11:21:
51:43:5d:c5:48:a3:83:2d:4b:54:e1:b2:d7:b3:75:
e4:91:1d:21:58:ae:fd:b0:e1:bf:e4:e8:41:11:d9:
3b:f4:de:57:c3:50:5e:05:44:ec:a6:db:c7:eb:e5:
e6:ac:92:d6:09:0f:d3:80:eb:a0:e8:03:bc:29:da:
d7:0a:ca:95:6c:a1:4b:96:a0:16:ae:78:07:9b:e0:
81:ac:72:88:b1:66:27:0d:b0:0c:a6:a4:13:e6:fc:
53:8e:49:8b:57:dc:70:06:d4:91:8a:c7:54:68:80:
ee:2a:7a:14:7f:cd:b4:3f:5e:9c:39:36:de:8f:2c:
95:f7:b8:7d:4d:d5:14:e0:f9:91:e9:70:c0:73:04:
f4:83:42:b4:15:bd:2e:42:09:4f:73:a4:bd:c8:eb:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:33:E5:11:B8:2F:22:33:A1:F6:C7:43:1C:FA:A5:FE:8E:6A:C3:B7
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:a0:3d:7b:6b:6b:76:35:1f:44:fb:62:1b:49:52:79:28:
d1:a6:38:00:4b:74:4e:98:a8:57:e2:58:78:06:51:38:07:c8:
bd:68:61:e4:a4:2d:eb:8c:11:30:df:e9:b4:8f:1e:02:93:40:
19:d9:5c:bd:f4:54:ef:af:b1:c1:b1:7c:ea:64:0c:45:11:48:
d9:65:2d:89:5e:2c:07:a6:22:9a:a9:e6:7f:e3:f1:f7:14:d5:
35:c8:94:e6:be:5b:a5:2d:5d:90:7a:f6:89:f6:08:ac:eb:68:
18:e2:dc:5f:55:c3:a3:e5:13:12:93:26:e6:b5:41:81:65:82:
1e:c5:6c:39:69:54:33:cb:5c:28:72:b5:cd:8a:54:91:02:1f:
1f:c3:8b:1d:76:d3:bc:a0:26:e0:c2:cb:eb:10:89:32:6e:6f:
4d:50:58:f8:4b:57:9c:7e:7b:71:0e:6c:fa:08:a7:e1:61:ad:
21:55:1d:5b:dd:18:4d:b3:f4:b0:91:76:12:ea:41:d2:7b:6b:
c3:14:79:df:36:4a:20:df:d4:45:e0:c1:2d:ef:a8:e9:ef:19:
f5:af:cb:d4:69:55:30:c8:9d:d8:e0:1f:a7:65:67:e9:b1:63:
aa:85:0a:d0:2a:fa:27:b1:13:5f:f6:94:25:31:31:2f:46:72:
77:c8:95:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:02 2025 by rpki-client