Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: f9ce7b0/fMEmv9Fk9/ibGfA8G0Eh7pD+EaLP4lisOOk=
Subject key identifier: C5:97:56:4C:96:7B:B7:AC:78:93:E2:0F:D3:45:76:2F:67:6D:8A:8F
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 01967679CE1110F06E6FE5CA58AB1BC2FE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 1234
Signing time: Sun 27 Apr 2025 09:00:16 +0000
Manifest this update: Sun 27 Apr 2025 09:00:16 +0000
Manifest next update: Mon 28 Apr 2025 09:00:16 +0000
Files and hashes: 1: DAiAlkKu2uIH3tPrZHXW35UovoY.roa (hash: ii+y3ES147W1gYE6b/JQu7S5U4fp3robU9GiKGcJGDs=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: KYc8KuIDScyCqsy2B/nIVywcTkEyl0MMx9XKl2brgFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:ce:11:10:f0:6e:6f:e5:ca:58:ab:1b:c2:fe:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Apr 27 09:00:16 2025 GMT
Not After : Apr 28 09:00:16 2025 GMT
Subject: CN=c597564c967bb7ac7893e20fd345762f676d8a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:5e:8f:7c:9c:e2:45:84:d4:bb:3d:62:77:
7c:2f:17:1c:4b:03:1f:f8:c9:25:27:ba:0e:da:7b:
20:54:83:b8:44:b9:25:d2:35:ed:cd:7a:ca:6b:6c:
61:9b:d5:9f:6b:0b:0e:de:d0:8f:79:8d:40:43:b1:
5a:99:b9:1a:45:c3:6e:01:8d:60:de:8c:c3:06:be:
d1:b0:05:13:ab:45:99:5c:81:96:b1:b5:a9:86:57:
b5:7e:29:62:36:49:94:11:a3:f8:29:28:7d:76:f3:
30:16:90:b0:f4:6f:11:84:72:19:b7:2d:d1:09:0a:
7f:64:82:b1:1c:37:f2:50:ca:47:78:fb:54:66:d2:
cf:4a:4f:05:75:bf:96:c1:86:a2:d4:b5:e9:1e:0a:
a6:2c:13:f2:22:d5:aa:0d:d1:f0:9b:23:82:21:5c:
48:e5:47:3a:0b:86:69:4c:c8:69:e0:65:fa:d7:0d:
0e:09:51:d6:58:63:92:6c:26:44:88:a5:96:28:0a:
2c:50:11:9b:de:a0:e5:5a:12:ce:9e:81:d0:9b:60:
57:16:55:a8:1b:7d:de:7b:23:70:29:24:57:a8:26:
fa:f3:d4:5a:de:7d:23:ac:68:4e:0b:81:05:54:4e:
1d:7f:dd:a0:fe:1c:7b:a8:a1:35:a0:1c:c6:21:65:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:56:4C:96:7B:B7:AC:78:93:E2:0F:D3:45:76:2F:67:6D:8A:8F
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:55:f2:02:7e:d8:bc:6a:f8:85:e0:79:04:1d:e0:bf:0f:c8:
eb:4c:02:5f:6f:ff:76:be:55:f4:a1:98:d3:34:a3:92:d5:7f:
ce:86:e4:27:7d:d7:66:44:0e:1d:bc:d9:87:10:39:0a:0f:47:
7f:59:8e:cb:c7:d0:aa:fe:dc:5f:69:29:6f:fd:4d:92:2b:e3:
e7:85:93:58:20:76:7f:67:c7:38:97:02:b0:b1:f6:7f:b7:fb:
1d:2e:1a:c9:1d:4f:b6:7e:ba:3c:61:f6:19:1c:3e:aa:e2:68:
63:03:a9:37:68:c1:31:61:6b:33:1c:35:b7:cb:4c:12:8e:06:
d9:09:06:07:e3:50:7f:32:0e:95:73:b6:e7:c6:04:2f:e5:d3:
fe:fa:f1:0c:65:76:8f:dd:3f:45:21:0e:ff:f3:f3:5f:92:e7:
26:0e:4f:4d:fd:2c:6f:66:87:7c:18:37:e2:98:28:2f:da:d0:
d8:3e:c3:86:7d:d4:99:ad:08:12:dc:9f:86:ed:23:18:87:a9:
1f:77:1e:b9:cb:34:e3:44:8a:65:43:61:ca:d9:02:ee:a3:7a:
53:ca:91:90:b6:fa:fe:c2:53:de:cf:ef:bb:87:93:73:e3:13:
a0:af:4d:63:f8:75:73:7f:6d:4a:2c:98:e0:0e:09:59:cc:a6:
bc:82:5f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:37 2025 by rpki-client