Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: PFiIHNtDzXDHIa9CevN4g7JfxYW4E0N57X7BbhXHn/k=
Subject key identifier: 8D:3D:05:58:97:A3:0E:50:85:98:C7:FB:7F:28:63:2B:07:E2:C5:E8
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 01968A379100E5A6512BD5A3AB23A4843013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 05:00:19 +0000
Manifest this update: Thu 01 May 2025 05:00:19 +0000
Manifest next update: Fri 02 May 2025 05:00:19 +0000
Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: dr49bfQxdUU4CrEW+Xl8spXGQ08BBz4f9aU6IuUNg18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:91:00:e5:a6:51:2b:d5:a3:ab:23:a4:84:30:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: May 1 05:00:19 2025 GMT
Not After : May 2 05:00:19 2025 GMT
Subject: CN=8d3d055897a30e508598c7fb7f28632b07e2c5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:a3:c4:0e:eb:7d:ee:15:0c:98:13:96:ac:
a2:54:e4:51:d3:b2:cd:d1:f5:3c:b2:3f:66:2e:55:
34:5e:ab:ae:21:a8:75:9c:ab:7b:9c:31:d8:51:a2:
d8:ca:5e:df:9e:66:65:90:97:29:23:66:b6:cf:0f:
f0:10:b3:40:5b:90:47:e1:07:29:17:10:0f:0d:6e:
22:85:0c:ba:1e:cb:83:54:1c:32:be:e0:4d:8e:64:
86:5c:2e:2b:bb:b3:10:63:ea:50:ce:94:df:7e:28:
7e:1c:88:14:f2:d8:18:d2:f1:75:73:f7:4d:4a:af:
ff:2c:fc:cd:82:86:86:aa:9d:1d:f0:1e:9e:06:00:
ad:9d:d5:1d:e6:63:e7:25:e3:ef:71:f7:f6:79:b7:
a8:cf:bb:21:98:49:5e:6f:ee:d8:82:10:f7:30:72:
c5:9a:56:72:45:e5:6e:28:3d:df:65:bf:db:b7:75:
a4:98:78:35:51:2d:cf:f8:29:78:07:54:2b:cc:62:
c7:72:03:95:6c:b3:f9:cb:9d:28:55:76:84:a1:60:
2c:5e:e0:79:c5:39:44:fa:2d:72:0d:44:46:8c:4e:
c1:8b:ec:16:0e:1e:6c:ef:56:c7:d3:08:87:7e:e6:
1e:6d:db:89:ca:0a:90:b5:9b:39:17:55:01:82:38:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:05:58:97:A3:0E:50:85:98:C7:FB:7F:28:63:2B:07:E2:C5:E8
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d5:41:84:4c:ae:63:70:9c:ac:ef:95:0c:3b:06:c5:bd:0f:
35:a5:be:85:40:6a:06:ec:11:9f:8b:33:a4:85:37:20:5f:9d:
b2:b9:22:3f:54:98:fe:ef:5c:be:3c:b2:e2:44:98:ac:6b:d1:
ea:ab:f6:42:09:46:38:d8:81:b9:7b:88:be:72:32:b1:bb:99:
8e:87:28:be:f8:01:b1:16:d4:a2:13:ab:63:ed:04:d1:a8:61:
46:64:84:55:d2:0a:9d:f1:1c:ef:2a:af:13:b3:4e:5c:fb:2c:
e8:f3:5d:69:22:14:58:b7:93:86:2d:57:31:48:03:e9:5c:ab:
0e:8a:d1:c7:96:2c:8c:f0:5a:3a:e7:1d:0c:f8:fd:91:d1:e9:
cb:ef:9a:d6:8c:54:46:c2:ba:8e:12:4d:e5:df:be:1f:33:c5:
bd:83:30:17:f5:9c:99:c8:eb:9b:ec:b3:c1:6f:8c:56:af:ff:
b1:25:fa:82:60:81:85:60:c2:2b:37:28:d7:cd:81:7b:06:98:
19:a6:d8:4b:7a:09:27:dd:20:44:70:82:21:74:8a:07:da:5b:
36:69:a7:4d:96:c7:70:7f:80:a3:20:53:10:a9:a6:82:5a:f1:
65:7a:55:bf:5d:64:ee:1e:cf:23:4c:16:f6:59:ea:5e:07:9c:
e4:56:3e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:34:05 2025 by rpki-client