Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
File: tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json)
Hash identifier: uhCj/EVA93sU70mLksKb9ub01rq1IqdtEslgy/6J95g=
Subject key identifier: 85:8A:45:91:DB:B5:7D:D5:94:89:56:0F:77:8A:E3:51:8A:44:4D:A3
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial: 0196771F14E6FA36A36341A223B42E917D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
Manifest number: 12CB
Signing time: Sun 27 Apr 2025 12:00:47 +0000
Manifest this update: Sun 27 Apr 2025 12:00:47 +0000
Manifest next update: Mon 28 Apr 2025 12:00:47 +0000
Files and hashes: 1: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: 7iYtxzAnuY5OlMyafFNzUO9SBr8WVMpKlSQ+BbL9UfI=)
2: vBSjooCv1VbYtFGvr_WsQil5zco.roa (hash: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:14:e6:fa:36:a3:63:41:a2:23:b4:2e:91:7d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Validity
Not Before: Apr 27 12:00:47 2025 GMT
Not After : Apr 28 12:00:47 2025 GMT
Subject: CN=858a4591dbb57dd59489560f778ae3518a444da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:2b:08:d2:e5:7f:67:68:7c:4a:28:9b:07:
df:39:28:91:df:ca:91:26:6b:71:b9:f3:71:22:3d:
26:6e:1f:cb:ec:58:71:f1:96:a9:67:3e:2a:9f:e6:
c4:a4:28:68:5e:73:63:be:36:21:2f:94:5b:da:bd:
8e:b2:4e:68:f6:17:07:0c:10:61:36:bf:8b:6e:bd:
25:38:30:11:88:59:d5:1b:f4:75:42:b0:3f:64:14:
a3:8c:55:99:52:aa:51:f5:ea:fd:bf:69:b6:23:73:
6e:ff:db:b9:26:58:7d:cf:19:2f:de:be:95:ea:92:
2b:35:03:2d:e6:ed:7e:60:8d:a2:b6:50:74:4f:4d:
0b:fd:a1:13:0c:79:9a:5a:39:ef:01:a3:fe:a9:c8:
a9:77:2a:cb:e9:ca:7b:c1:af:77:a2:e2:5f:79:50:
77:1a:60:fa:d4:c6:4b:e5:97:68:77:93:e1:3a:26:
e0:b6:47:df:77:d1:c4:d3:ca:d3:83:0e:a3:39:b5:
36:45:6f:2c:8d:bb:4c:bd:72:b4:84:e9:33:cf:3c:
71:55:b9:fa:2c:1e:c8:03:58:d6:ff:ed:b8:1c:88:
ae:1a:fc:89:7d:ab:40:8d:e0:6c:d1:ab:c3:37:59:
d5:61:b9:e8:a5:42:0b:88:26:03:3f:db:3e:a1:9c:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8A:45:91:DB:B5:7D:D5:94:89:56:0F:77:8A:E3:51:8A:44:4D:A3
X509v3 Authority Key Identifier:
keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1c:85:7b:89:00:0a:dd:70:41:00:46:c2:9e:ab:93:09:58:
b4:56:db:d6:3b:f0:46:1f:e9:af:78:a0:35:e9:ce:60:0a:d0:
3b:a6:42:48:b4:05:20:31:61:37:3d:80:74:56:20:14:32:e6:
1e:42:3a:15:6b:65:31:90:f3:be:8f:09:e2:54:09:87:d0:37:
2b:7c:98:96:4a:b6:e0:92:8f:f4:be:87:46:92:2e:cd:7b:7e:
e7:fa:fe:0e:46:72:90:02:06:09:08:7b:d6:47:b3:1a:d2:c1:
c9:4c:7f:da:e1:67:57:3e:75:1e:8f:97:be:b3:bb:08:7e:c7:
e3:c6:8c:ae:23:dc:1c:87:3d:0f:1b:78:53:6c:2e:b0:03:78:
8e:6f:57:2b:b4:75:59:f2:8e:1f:56:be:4e:32:c4:29:8a:56:
71:c7:75:e4:93:79:b4:7f:6a:c8:48:cc:00:b1:df:3d:31:15:
7e:69:1e:2b:7c:e3:a3:71:f4:07:20:73:85:8c:de:6e:c0:fb:
94:86:0f:06:c6:f0:34:fb:0e:f8:2c:92:25:e6:07:88:12:57:
aa:32:21:5d:51:c3:6d:05:8a:23:de:8e:56:e1:55:9c:54:51:
b2:6f:d2:73:67:04:0a:37:01:38:c9:5f:48:36:ff:ee:7d:ad:
5b:83:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:41:19 2025 by rpki-client