Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: GKDmDEtvEl3zQ1AUtTHgzA7HhtkCtJad+4kPRlnDwos=
Subject key identifier: 29:24:35:F2:54:B0:B7:3D:70:C1:5A:D7:EA:EA:7A:19:F4:DA:B1:DE
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 01968C25D0612141F605CB3E2B03F2EF828B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 1529
Signing time: Thu 01 May 2025 14:00:10 +0000
Manifest this update: Thu 01 May 2025 14:00:10 +0000
Manifest next update: Fri 02 May 2025 14:00:10 +0000
Files and hashes: 1: 5u8coXS2L7jFRThHfB77uIc4NNI.roa (hash: 7eehYagAlN3yFJLLgyiJoH0sdJb5Ul8pcLa6KTeR8yo=)
2: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: ATjNFBCNHcB0Uc885CQ7zWftI7DMseNRsKClqrJB6go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:25:d0:61:21:41:f6:05:cb:3e:2b:03:f2:ef:82:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: May 1 14:00:10 2025 GMT
Not After : May 2 14:00:10 2025 GMT
Subject: CN=292435f254b0b73d70c15ad7eaea7a19f4dab1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:db:22:b5:38:dd:b2:f8:15:84:36:1b:d4:
fe:f1:bb:02:34:34:d0:bb:0c:18:7d:b8:9d:1c:b7:
90:8d:7b:b7:74:33:91:81:6f:4b:1c:05:93:8e:a4:
37:4a:01:3b:6c:ab:26:eb:01:f0:18:48:9f:b5:83:
b3:73:ed:e8:47:eb:38:fd:3b:2a:cb:39:7e:93:76:
11:c3:90:e8:6f:89:23:5b:63:eb:b2:01:9c:99:55:
d1:ad:06:fd:95:0c:51:f9:97:91:22:b8:23:ff:80:
c1:62:3a:9f:14:f0:e6:ec:c9:20:5b:5c:f0:cc:9d:
0e:1a:50:43:7a:ca:76:e1:e6:4b:2d:b0:96:4d:66:
95:67:a6:6c:9c:2b:15:a2:93:18:74:bf:1c:f2:a8:
d2:65:f3:7d:e8:32:4f:8a:92:36:f7:7c:56:87:be:
47:01:8c:55:75:26:7b:01:51:9d:1e:a0:b8:77:5e:
fe:95:6f:3b:87:43:44:2b:bf:1a:7b:64:36:e6:bd:
9f:f1:b9:4d:ac:9c:8f:fb:fb:62:3f:45:56:25:5c:
7a:47:72:2a:8e:78:e4:74:06:e1:91:46:67:d4:e6:
e3:21:99:6a:f7:70:5c:0c:cf:9f:23:9f:86:9e:ec:
86:67:50:33:1f:fe:49:33:97:d6:ea:09:78:d1:f8:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:24:35:F2:54:B0:B7:3D:70:C1:5A:D7:EA:EA:7A:19:F4:DA:B1:DE
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6d:63:95:54:b7:89:63:29:2e:84:4a:5b:32:5b:13:61:c8:
bc:52:42:be:0b:36:72:e0:cc:01:d7:e0:91:1d:3d:7c:a8:2f:
06:53:e5:7b:57:31:84:39:6c:7e:b0:fa:3a:db:03:fd:aa:72:
01:a2:16:8d:8a:5a:e6:fd:f5:6e:78:21:26:8f:82:9d:ce:aa:
cf:0c:37:38:a4:ad:10:4f:27:f3:b7:bd:65:ca:40:40:12:9b:
3b:21:ca:ee:4d:f6:7c:88:71:58:db:39:8a:b3:bd:be:96:64:
56:01:f5:8c:be:ca:bd:a6:a6:d4:fc:7f:9d:8a:a3:df:d0:30:
3b:0c:5b:b4:5d:14:31:81:c9:a0:1b:2b:0f:3b:88:66:1e:9f:
a1:ff:f4:5b:b3:54:28:a3:f6:a5:e9:d2:97:37:17:a8:46:6b:
28:3d:ab:a3:ba:38:28:dc:67:9e:a1:c4:80:94:3d:88:f3:52:
96:63:80:75:c4:43:27:46:27:38:a0:c0:3e:d2:44:4a:5a:4d:
b4:be:41:1d:af:3e:86:ee:78:87:64:0b:6f:2f:b8:81:5d:99:
f7:83:90:ff:63:8b:1b:e6:d5:5c:ec:eb:dd:28:22:21:a3:be:
67:75:32:a7:55:b8:70:a8:37:37:e8:3a:b7:de:a2:19:35:df:
6e:f8:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:25:23 2025 by rpki-client