Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
File: t_bDO_udlL0PdKc45_FtDp2gw7k.mft (raw, json)
Hash identifier: 0w/qr8oYsLcJ1WA5Ujw9hOuVbjQTeqBLzcRiGqAox+g=
Subject key identifier: AE:E7:99:3A:82:8C:96:31:40:66:58:4F:10:A8:6C:7C:10:89:80:BB
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial: 01968B4ACE60A2C3AF6C74C7CC4F503C40F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
Manifest number: 14EB
Signing time: Thu 01 May 2025 10:00:57 +0000
Manifest this update: Thu 01 May 2025 10:00:57 +0000
Manifest next update: Fri 02 May 2025 10:00:57 +0000
Files and hashes: 1: dQipKZolIhGkhWFJoygF3CDiTvg.roa (hash: +eA96uDNL0C8CyvGH+7b3dtqwE+sSbn83k1fDZzMPtg=)
2: t_bDO_udlL0PdKc45_FtDp2gw7k.crl (hash: l6Ft/kgCQKoYXRX36S+XoxBe3K9BCmRiGqixoMByDZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:ce:60:a2:c3:af:6c:74:c7:cc:4f:50:3c:40:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Validity
Not Before: May 1 10:00:57 2025 GMT
Not After : May 2 10:00:57 2025 GMT
Subject: CN=aee7993a828c96314066584f10a86c7c108980bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4c:f6:0d:11:1b:31:97:67:20:ec:a0:f5:57:
2b:35:36:bc:06:8d:32:b0:15:79:1c:ad:a0:7f:81:
80:df:45:3d:1d:59:8d:90:25:76:fd:78:1e:30:6d:
9b:7d:d5:20:2d:94:cb:b5:60:a1:8c:37:cb:2a:02:
42:51:96:3a:69:24:6c:40:c9:7f:dd:dd:8b:d3:9c:
ab:a5:a3:e8:21:00:93:d7:9a:76:ba:a4:79:ee:58:
49:93:e5:90:af:7d:c3:0a:b9:90:5b:43:ac:9f:a1:
4a:fa:b7:20:b7:5b:86:78:3b:69:70:a2:de:78:0c:
24:5c:19:c2:fd:a0:fc:27:2b:13:3c:ee:c5:1d:58:
5b:9b:8f:e7:f9:cb:58:71:60:22:ad:da:78:f3:b5:
44:1b:6f:a2:80:3a:52:49:21:19:2f:f8:7f:29:66:
37:a5:d3:4c:b3:fc:56:f4:0b:56:e6:c5:5f:72:a3:
7d:ef:7d:fb:eb:22:91:05:e7:4c:b7:f4:43:72:02:
20:b0:1a:91:74:4c:0f:5e:c9:a9:8d:97:58:71:0c:
a9:5a:f1:f0:d8:8a:57:29:39:bd:36:82:09:32:3f:
fb:8f:b5:04:da:e2:04:7b:06:14:0c:02:6d:23:04:
09:d1:d6:4f:c0:2a:2a:2b:00:10:e8:f0:8f:ce:c4:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E7:99:3A:82:8C:96:31:40:66:58:4F:10:A8:6C:7C:10:89:80:BB
X509v3 Authority Key Identifier:
keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:05:61:53:7a:82:9f:49:46:85:e7:ba:7d:a6:f0:1a:46:f8:
6b:3c:42:3e:93:b4:27:98:fe:b1:ef:20:b7:04:ba:da:bd:b7:
e4:8f:0e:04:86:4b:8d:55:99:ee:97:b2:10:c1:5e:af:57:65:
54:56:11:99:18:25:0f:59:e6:f3:59:e9:14:56:7e:7b:d6:1d:
03:6d:50:d4:2c:5b:68:6c:9f:e7:47:d1:35:ac:4f:15:2a:0e:
20:fd:2e:53:27:01:6c:e6:0e:b5:75:46:51:67:37:ce:b7:83:
df:57:e4:68:1d:bb:eb:2b:dc:6a:c3:5c:13:06:f5:5c:9c:36:
c4:99:d6:cb:7d:16:c7:2a:11:49:fa:17:86:c8:3f:96:0f:92:
71:44:08:26:e2:3d:42:16:5f:d0:33:d2:60:ac:6e:be:82:69:
70:4d:d5:87:76:cf:b7:58:11:f3:b4:80:2b:47:a5:30:70:fa:
ac:9c:43:74:40:91:66:57:a0:5e:ae:db:2b:96:53:ef:33:cf:
1b:f7:72:e9:32:5c:ac:5f:46:ef:66:72:a4:12:c7:bf:a4:bd:
ee:f8:18:ac:1e:66:1e:24:44:c6:d8:98:c7:39:e6:c3:af:61:
a6:0a:d7:1a:7a:65:ef:d6:47:1b:b6:d9:94:d7:dc:78:e5:ca:
10:8a:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:06:29 2025 by rpki-client