Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier: U3drVOF4vaHQ367P4RF5QVAT61tZK1tulDqvltYahMo=
Subject key identifier: 05:47:21:BE:0E:EC:5A:0D:27:8A:E9:96:14:A6:9C:C2:D9:FB:B2:CD
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial: 019675678F4FA59741AEB37083396DEEEC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number: 0B8C
Signing time: Sun 27 Apr 2025 04:00:43 +0000
Manifest this update: Sun 27 Apr 2025 04:00:43 +0000
Manifest next update: Mon 28 Apr 2025 04:00:43 +0000
Files and hashes: 1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=)
2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: SNiE1JTyaY3v1CMqMjU9UB0ppkEsE+50JaEQ0zXCCX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:8f:4f:a5:97:41:ae:b3:70:83:39:6d:ee:ec:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
Validity
Not Before: Apr 27 04:00:43 2025 GMT
Not After : Apr 28 04:00:43 2025 GMT
Subject: CN=054721be0eec5a0d278ae99614a69cc2d9fbb2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:c2:e6:4e:a6:04:e6:57:3b:28:f6:7f:37:
bf:88:86:23:7d:ba:02:06:64:86:03:c9:01:35:92:
3a:06:eb:86:7b:64:6f:a3:ec:87:f5:c3:be:8f:eb:
3d:20:14:e6:5f:fb:85:40:d1:6c:68:a0:5a:b6:b2:
f6:2b:ca:ce:b3:2b:b0:04:c2:06:9b:8d:82:bc:dc:
cf:f7:bb:ae:06:44:0a:bf:4e:cb:e5:85:69:4d:95:
a2:05:db:28:df:eb:72:d5:99:a2:c3:1b:68:e0:39:
66:cb:d5:44:d1:b4:5e:d5:ec:c5:e7:32:0b:3b:a7:
7f:c1:fc:82:2c:3c:39:97:02:58:b3:99:3a:11:f3:
4d:82:0c:81:1b:91:c9:dd:13:00:0c:2f:e3:7f:62:
ab:bb:48:59:30:fc:e4:6d:40:6e:e1:a5:4a:98:9e:
69:50:29:78:ad:c8:d7:3e:e3:2d:e6:6b:38:9c:cd:
f5:1c:ae:53:08:45:d7:77:0b:20:f9:14:98:8e:71:
68:fa:dd:a2:1e:bd:3e:dd:72:7c:ae:4e:45:8c:10:
5a:f2:6a:0a:5f:e2:9b:2a:8a:65:55:dd:1c:99:7c:
6f:e7:84:61:91:40:64:6f:c5:8a:66:db:44:7a:63:
80:c0:8e:0a:29:4f:11:61:0c:4b:b2:ee:75:51:7d:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:21:BE:0E:EC:5A:0D:27:8A:E9:96:14:A6:9C:C2:D9:FB:B2:CD
X509v3 Authority Key Identifier:
keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6b:ec:85:9f:3f:ee:7f:bb:6c:c7:70:11:57:b2:c1:dc:2c:
22:14:f5:4a:4b:3e:bd:e0:09:c4:f8:78:e3:f4:21:ea:e9:6b:
87:83:a6:c6:bb:41:af:fa:e6:57:79:e2:15:f9:db:83:c6:b6:
21:01:be:b6:9a:f8:6f:c6:3e:1c:ce:92:99:ca:a7:0d:69:e1:
22:86:fc:ae:4a:78:a1:42:7e:6c:25:0e:22:63:59:6b:52:2d:
ba:06:e2:d2:06:7b:e1:54:b6:5f:9b:aa:06:29:ed:b7:f9:ce:
55:42:3e:3c:64:72:5a:48:a5:b0:11:ac:f2:77:ef:7b:76:46:
03:b8:69:0b:9a:10:18:28:1a:49:ff:ff:e4:89:91:82:51:25:
59:32:69:c0:19:b8:f9:59:b6:11:ab:f4:b1:47:e8:4d:d8:cf:
e3:82:02:5e:d2:a7:c9:3b:76:0b:08:a3:dc:79:80:50:17:8f:
6a:13:50:71:3a:c1:54:5b:13:44:46:78:72:22:6c:b6:d8:51:
9b:4f:51:f9:01:58:48:e3:bd:8a:1b:8b:5e:f9:a6:62:b5:3a:
b7:df:cb:98:93:a8:6e:a4:05:5b:73:35:56:3e:a4:b8:d6:eb:
36:e0:8f:98:86:e3:f3:ad:7c:e5:15:43:25:c3:b9:2d:ab:a2:
0c:01:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:35 2025 by rpki-client