Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: 5GZAjE1f3r7hmwQyunbdJKttEAxgHPp/BAJablATDzs=
Subject key identifier: 93:05:3E:F7:91:59:19:4A:2D:9E:3D:86:94:6E:77:92:13:DE:C1:36
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 01968210A54B1C369106B3B525CC2E8302D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 15:00:50 +0000
Manifest this update: Tue 29 Apr 2025 15:00:50 +0000
Manifest next update: Wed 30 Apr 2025 15:00:50 +0000
Files and hashes: 1: A19KF2VhmqgRITxahuDcRts8KJs.roa (hash: YirbVHhxW1CKNUwQAz3dz5QapLv5A3zZT5MHBNEVZ34=)
2: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: DDoeLcLU4j7dfU51v1JVjYfxUa8yIimnmmbKHbzJH0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:a5:4b:1c:36:91:06:b3:b5:25:cc:2e:83:02:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Apr 29 15:00:50 2025 GMT
Not After : Apr 30 15:00:50 2025 GMT
Subject: CN=93053ef79159194a2d9e3d86946e779213dec136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:38:22:09:1e:f4:c6:72:ed:9a:dc:81:a7:d5:
38:40:10:bd:8a:dc:40:ee:47:1f:53:4e:62:ca:aa:
43:7f:08:7a:e3:89:ea:90:55:5c:03:90:20:51:30:
27:5e:b6:0a:9b:c9:fa:77:e9:46:26:e1:12:fc:19:
9a:45:20:cc:46:72:90:ce:f2:c3:50:64:2d:b8:5b:
ef:51:e0:e0:8a:ae:9e:4f:7e:7b:e7:82:87:59:d5:
55:e4:0a:f4:5f:ce:1a:c5:80:ad:d2:d5:a7:b9:6f:
aa:4e:b4:54:1e:8d:8e:1a:c3:48:41:63:a3:4a:30:
d7:ea:4f:f2:34:ad:75:a6:a5:5e:d1:14:db:39:cd:
a1:c2:2f:cd:3d:6a:c3:e5:0b:b1:b2:74:9b:57:49:
ac:27:43:43:d0:54:c2:f7:40:6e:ca:e7:65:20:57:
54:92:7d:e5:22:37:ce:5f:9a:b5:d2:d0:5a:66:60:
8a:b9:98:53:22:f3:cc:c8:17:43:c9:f9:ef:95:ae:
ca:bf:a0:ad:1f:16:32:11:bc:77:4a:c1:46:df:a9:
eb:44:6c:af:a7:11:bc:97:9b:25:b3:44:7d:92:e0:
cd:d4:65:cd:ba:80:38:12:3b:cc:68:32:bf:d1:34:
19:25:43:5b:67:9f:41:b9:00:8d:e5:d3:1a:81:fd:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:05:3E:F7:91:59:19:4A:2D:9E:3D:86:94:6E:77:92:13:DE:C1:36
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1f:53:f8:1d:3c:cd:d5:ae:b2:4b:a4:d5:cb:e0:76:1e:80:
17:ef:fb:35:6a:32:86:cb:c1:9b:4e:59:75:1b:35:fb:ca:02:
c5:15:e0:bb:d9:57:b2:ca:77:34:a4:a5:ba:dd:5b:ba:d6:6c:
f0:53:66:d3:93:d3:4b:1d:ef:9c:44:cd:9b:31:cc:7f:ea:97:
d7:85:c4:21:f3:82:6e:b9:17:20:fd:1a:66:fe:80:bd:00:c1:
61:11:63:a9:3d:49:12:02:ef:de:f1:4c:f1:7c:c0:ab:b2:31:
9d:99:fe:e9:d6:71:bc:fa:50:13:1a:bb:23:b6:97:50:8c:24:
fa:08:ec:02:ee:4b:33:74:c1:f2:d4:fc:f1:58:74:cc:86:1e:
ba:c8:f5:7b:5a:9f:8f:91:69:3e:8a:67:99:9b:9b:88:1c:87:
d2:62:eb:a1:11:5e:e0:13:5f:7f:f2:eb:47:49:d9:ae:c3:6f:
d4:4e:03:43:be:e3:12:26:cf:c2:93:62:82:b8:ec:4f:96:3b:
88:6e:a1:f4:4b:d2:3e:02:2d:21:02:ef:2b:e2:12:52:cd:76:
4e:d9:4b:2d:c5:4b:a7:4d:18:27:b4:dd:95:d9:9b:9d:a2:26:
98:f9:30:2a:0e:8d:39:36:b1:fc:13:da:b9:f4:d0:a8:36:f4:
84:55:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:08:19 2025 by rpki-client