Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: Oesp19x8ALtwbGjBLmiLrs29Dm2gDtRNqcz13loLdho=
Subject key identifier: 5B:73:0B:5C:1A:DA:C2:74:B2:13:52:2C:D6:AD:94:53:21:D5:25:22
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 0196759E9AA7458720F9423C20AA1C705DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 05:00:50 +0000
Manifest this update: Sun 27 Apr 2025 05:00:50 +0000
Manifest next update: Mon 28 Apr 2025 05:00:50 +0000
Files and hashes: 1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: sdT8DQH/88Z4WlkdpUFjAF/xxwPF8+QTUjspjFR/jXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:9a:a7:45:87:20:f9:42:3c:20:aa:1c:70:5d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Apr 27 05:00:50 2025 GMT
Not After : Apr 28 05:00:50 2025 GMT
Subject: CN=5b730b5c1adac274b213522cd6ad945321d52522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:9d:78:dc:60:24:89:fd:8a:5c:ca:a5:72:
98:a6:fe:8b:69:8b:5c:54:3d:b1:26:74:88:01:04:
a9:c8:eb:d7:fd:11:fb:ba:70:a8:cc:9f:d4:9e:eb:
a0:76:5e:a2:14:84:cc:ab:db:04:86:0f:d9:2d:01:
d4:8d:95:ad:23:f6:d8:0b:43:af:32:25:c3:58:4b:
fa:e4:b2:27:58:ec:26:66:71:c2:b8:a6:52:df:b3:
03:41:01:1d:03:c4:e8:2f:1d:c8:16:fe:c9:f9:e7:
61:84:05:2e:7f:03:a5:4e:9b:d7:7b:a3:90:77:c5:
7c:7c:f0:17:a9:f9:b2:7e:03:e3:3e:fe:30:f1:40:
3e:7c:cf:b2:8e:c9:52:81:38:de:0e:5f:aa:27:b5:
63:8e:8b:6a:9c:f4:a2:ff:66:10:4e:38:c0:1e:52:
c3:14:2c:ad:53:8f:00:38:97:d0:2d:b6:cf:6d:3c:
b2:21:28:fa:d0:99:28:fa:20:d3:66:42:40:1f:cb:
82:fb:e3:5d:54:a5:ee:32:b2:98:4a:0c:1e:0e:8d:
50:93:c2:d1:a8:d8:05:f6:43:7a:45:a6:cd:5c:ca:
82:e2:f7:ae:10:b5:79:ce:d3:c9:68:be:53:7c:a7:
5f:84:db:21:ec:22:7f:58:ba:9f:94:af:e6:d1:a4:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:0B:5C:1A:DA:C2:74:B2:13:52:2C:D6:AD:94:53:21:D5:25:22
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:55:61:74:6a:78:55:7c:55:a5:c2:a5:4d:9f:9f:fb:0b:03:
39:21:17:20:6f:bf:af:3e:ad:f7:05:b3:56:3a:bc:a1:dd:35:
a3:bf:e0:a8:4e:09:05:56:5c:34:08:45:8a:b3:89:79:4c:ff:
b0:43:87:f2:b4:17:b4:53:97:97:ac:44:5a:ac:fd:4e:08:db:
14:56:2f:0e:9c:70:f0:66:06:13:f2:15:80:54:1b:25:93:65:
70:41:60:0a:35:a5:e0:7e:6b:07:da:2c:4a:13:c5:e3:b8:ab:
89:31:44:eb:cd:17:24:9d:36:53:ea:03:d4:5d:68:e9:5c:01:
74:73:38:bf:1e:72:f0:2b:df:f6:57:50:5e:93:1f:47:7d:8a:
8e:0e:71:bb:1f:7d:98:36:2d:90:e1:27:01:9f:30:b1:22:c5:
d3:ba:7b:9b:44:3b:dc:5f:40:61:78:41:be:54:7a:54:58:96:
a2:52:97:a6:08:93:6f:5e:ae:d6:28:ec:c1:7c:fc:07:e7:4d:
8b:a7:1e:1c:fd:14:43:a8:eb:89:b5:2a:e5:2a:42:d3:73:9c:
0e:8a:7e:58:52:b5:e9:20:c4:06:03:29:68:3a:f0:aa:41:b3:
be:f3:9b:a4:af:8c:cc:83:dc:b0:d9:cc:1c:80:2b:04:54:74:
74:1c:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:21:02 2025 by rpki-client