Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: jcztV4ZnTDiKrwRGV3UlWHTmKA8SI1Beqsfd3N82yK4=
Subject key identifier: A4:78:56:5E:0D:60:9F:9A:60:F6:9D:6E:BE:11:82:1B:BE:E0:75:16
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 019689C9AC61C8EC7E209D1EAC342714EDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 0202
Signing time: Thu 01 May 2025 03:00:17 +0000
Manifest this update: Thu 01 May 2025 03:00:17 +0000
Manifest next update: Fri 02 May 2025 03:00:17 +0000
Files and hashes: 1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=)
2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: GtnhlNCgAh2X7KPnSBHH3ddVrk2MFf+161AX5JXsfUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:c9:ac:61:c8:ec:7e:20:9d:1e:ac:34:27:14:ed:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: May 1 03:00:17 2025 GMT
Not After : May 2 03:00:17 2025 GMT
Subject: CN=a478565e0d609f9a60f69d6ebe11821bbee07516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ed:3c:b8:5b:51:63:9b:b6:5d:1e:a5:4b:c0:
ea:9e:3e:fa:14:e7:95:b8:31:9d:30:f4:52:ae:7b:
02:c2:19:99:92:e8:82:de:9e:81:34:16:35:dd:10:
3d:ae:8d:4f:05:cb:24:0b:21:04:e7:cc:eb:7f:4e:
92:61:46:f7:6e:c8:56:3b:ba:76:fc:11:08:da:18:
ac:31:4d:88:d9:26:02:9e:11:d4:51:ee:49:2e:77:
03:61:82:c8:56:db:59:bf:94:4a:82:eb:38:34:42:
d9:8f:7e:7d:4a:a3:88:79:c2:71:1b:72:3b:16:cc:
4a:de:d0:a8:2e:b3:db:c4:84:3d:49:50:ea:74:d7:
c4:e2:22:13:a7:3b:60:27:f6:20:db:0e:d3:2e:18:
b1:31:50:5a:0b:6f:85:90:9a:f8:01:6e:48:6b:a6:
e5:63:24:f3:d0:bf:dc:9b:23:49:fa:8d:e9:b7:40:
b5:bc:3d:fb:34:62:e7:2e:db:1c:8f:b7:1d:b7:f2:
da:a9:0d:d2:24:fc:1b:03:51:14:57:87:b4:2d:59:
de:d4:d5:7d:24:26:c8:03:35:ea:e9:13:b3:46:bc:
9c:6e:5e:05:6a:b5:81:f6:49:eb:14:c6:e2:ae:c3:
37:e7:62:e5:e6:3b:ca:c6:da:f6:4a:bc:3e:92:44:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:78:56:5E:0D:60:9F:9A:60:F6:9D:6E:BE:11:82:1B:BE:E0:75:16
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0c:d1:bc:26:bc:6b:0c:a6:f1:03:b1:34:61:22:57:4b:67:
31:b4:bd:33:47:ef:09:07:74:8d:52:af:c4:55:57:38:f8:ca:
dc:bc:5f:37:6e:7e:4d:0d:fa:7f:6d:2b:0d:5a:1e:f2:b2:af:
f3:bd:d3:87:e4:b9:0f:d4:6e:e7:72:24:0c:3a:ac:9a:69:7b:
1a:d4:44:f9:fb:6b:7d:28:11:41:8a:3e:03:88:dd:62:27:50:
9a:a3:79:06:f0:8e:96:2f:16:16:0b:44:98:65:d5:4e:db:96:
82:26:67:d2:86:49:25:02:5f:c7:1f:f7:b8:38:7a:d9:11:1e:
83:92:ca:f7:69:4b:92:7c:4b:48:fb:df:ec:da:c7:d8:7d:4b:
a7:c8:68:bb:c8:0f:f0:b3:28:d1:18:73:1e:f1:86:97:83:7e:
c1:7d:0f:5c:69:61:bc:7c:63:88:25:de:2b:fd:0c:a3:99:01:
62:e0:5a:bf:b3:cc:ef:db:4e:4b:42:f4:95:6e:df:f8:59:dd:
2a:c4:c8:c0:47:de:7b:eb:5c:47:92:f3:dd:c9:19:96:1f:8c:
f2:a1:34:7f:82:da:8f:a3:64:aa:b0:df:dd:09:be:95:fc:a6:
84:d5:48:59:5f:cd:d4:14:31:d9:e4:64:99:82:e3:fb:3a:75:
0d:2a:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:02:48 2025 by rpki-client