Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier: VEZIm5LH9NxzDRpF2vLXLLZ2mjwsZMQUz9pfTfwlrWc=
Subject key identifier: AA:01:1F:83:33:1C:CE:8C:1A:EE:5D:72:40:97:86:32:1F:13:A6:D9
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial: 019673B048B0B771CBEB2AD14E379982BD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 20:00:54 +0000
Manifest this update: Sat 26 Apr 2025 20:00:54 +0000
Manifest next update: Sun 27 Apr 2025 20:00:54 +0000
Files and hashes: 1: QdWm_iYTkmRwOlae6fa_m0n_xoY.roa (hash: GAwdxYROZcqJfJWKya6QGN1+Dp1F3FkjXyRiudeAVk4=)
2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: uwKKfJNAgWdrShpEd1H2HusJDxdm6jyCvZl+m8EDfPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:48:b0:b7:71:cb:eb:2a:d1:4e:37:99:82:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Validity
Not Before: Apr 26 20:00:54 2025 GMT
Not After : Apr 27 20:00:54 2025 GMT
Subject: CN=aa011f83331cce8c1aee5d72409786321f13a6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:cf:d5:c9:f7:9b:59:6e:87:b7:09:f6:35:
d9:1a:73:3a:73:77:a1:f5:59:f2:04:5f:32:79:b7:
62:62:fc:62:6b:6a:a9:dd:91:c2:99:2d:7c:a5:83:
8e:a8:74:48:21:2c:ed:a1:50:6e:fa:fe:6a:94:20:
65:94:3b:cd:32:f5:de:4d:a1:ea:7a:a0:1a:25:63:
a4:ba:9b:34:0e:4b:9d:96:6d:65:6f:74:5e:d9:7d:
3a:a4:1d:c3:d9:65:00:65:72:f4:88:1b:f4:5d:32:
fe:95:74:f0:19:ae:eb:a2:c0:f2:2a:7f:84:7e:42:
0a:02:72:b4:e3:14:ea:ef:dd:f6:a8:98:5b:b0:7c:
e7:5f:0d:5d:74:a3:34:8f:b5:a5:91:1c:13:57:05:
da:39:01:43:a3:54:7f:9d:5c:42:9c:cf:09:1a:ec:
e1:fd:69:9e:ab:0e:81:2d:6e:df:2c:05:c8:71:60:
49:3b:08:70:ad:34:2c:19:86:22:3d:fe:e4:65:ad:
7c:7d:c5:58:e6:99:76:65:11:14:e8:67:6a:90:2e:
56:22:e3:61:27:6c:0f:19:73:5f:53:6d:bd:2c:ad:
8c:55:4e:5b:a0:f0:c9:9d:f6:3b:ac:1d:2a:e0:21:
6e:0e:6e:6a:7e:ad:64:c9:06:b9:5b:10:6e:81:13:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:01:1F:83:33:1C:CE:8C:1A:EE:5D:72:40:97:86:32:1F:13:A6:D9
X509v3 Authority Key Identifier:
keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1d:86:17:b3:ec:55:b8:3e:8d:35:92:18:4e:81:46:cc:a4:
1b:63:56:00:6d:b6:08:15:1f:40:e9:35:78:7d:82:66:e9:9d:
ae:5e:16:40:1d:67:60:eb:47:e6:1b:b0:6d:01:81:50:06:90:
22:04:c4:e5:c8:d6:73:83:a7:bb:2b:2d:39:12:b9:88:0d:1c:
79:71:5a:f7:10:a7:b4:2b:31:e0:1c:14:a1:3d:cf:6e:bf:3a:
92:6f:d5:95:7f:97:d8:6b:d3:0e:29:36:e2:25:99:6c:3e:22:
de:8e:d2:0d:ce:2b:d7:42:ba:54:fb:00:51:cc:d2:eb:de:fb:
e1:89:b6:dc:2a:6b:ab:6f:86:93:24:1c:85:14:45:3c:92:81:
b5:b0:df:0a:87:7d:a2:d1:80:17:e5:a4:be:d6:82:2a:31:83:
3e:6a:e3:ed:cc:84:eb:20:4a:60:56:00:a3:c9:33:32:00:76:
2e:c8:62:06:b4:6a:0d:a1:33:bd:9c:bc:70:75:df:6b:ed:90:
76:35:3a:e0:3f:33:e2:7c:6d:16:8a:82:3c:c5:f2:41:b7:ef:
b3:2f:41:6b:0f:db:2f:bd:71:69:0c:69:e6:7c:d4:65:86:14:
33:61:e2:73:28:84:5b:de:e9:72:b5:a7:6b:be:41:e1:f5:4d:
d7:51:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:33 2025 by rpki-client