Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: Czg04tlNP2ONeGe3TUH9/16Xb2KhhOdXTRGjRe3yi/Q=
Subject key identifier: 97:A6:D0:52:CC:96:AD:27:CB:C4:36:E9:45:D3:86:77:4A:BE:5A:6B
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 01967F0FB6698CE939DF39A6DAD9B3F81356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 01:00:58 +0000
Manifest this update: Tue 29 Apr 2025 01:00:58 +0000
Manifest next update: Wed 30 Apr 2025 01:00:58 +0000
Files and hashes: 1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
2: NNbGYKZN2MczsbLVZDvW2hdl718.roa (hash: 4E2t0fTnEc7nZVPHCni1To4F2fDuKI/+fcnfWn1WYJA=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: 8ppXBhasbg2wkMvNYcTWFBMusYCS8Dy5ACUGZ4466vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:b6:69:8c:e9:39:df:39:a6:da:d9:b3:f8:13:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Apr 29 01:00:58 2025 GMT
Not After : Apr 30 01:00:58 2025 GMT
Subject: CN=97a6d052cc96ad27cbc436e945d386774abe5a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:54:5d:96:97:da:62:70:1e:50:c6:32:3c:
1a:90:4b:1b:52:91:eb:7a:e0:46:b1:79:2e:f0:b4:
88:41:52:28:cb:96:76:0c:2c:76:d5:d6:7b:7d:22:
de:68:4f:57:70:17:a6:89:de:83:89:55:bb:c6:1b:
de:7a:79:59:f7:a1:43:4b:25:e9:9b:1d:50:35:f8:
a9:6f:a2:92:2e:fd:bd:fa:d9:de:df:96:f1:22:fd:
51:6c:63:49:36:34:de:90:55:ce:60:98:5c:dd:ed:
b9:f9:20:e2:79:21:fc:fa:0f:30:c5:cd:a3:4e:ab:
aa:32:1e:03:89:6e:6e:b1:7c:33:eb:9d:4c:a6:3e:
49:f4:5f:7d:9f:a2:d4:52:3b:fc:29:98:e3:fa:e9:
90:9b:99:79:62:41:a5:f8:7a:fc:f2:32:ba:79:26:
5e:da:42:9d:07:66:72:ae:d9:c2:63:40:46:cb:f4:
9c:59:1b:31:6d:9f:fd:2c:49:cc:18:5c:04:b9:13:
ab:d8:76:cb:ba:8d:48:d3:94:cf:be:fe:44:81:83:
69:b3:01:d5:fc:b3:cf:e2:72:d9:77:b8:1c:17:9b:
e5:26:59:fd:4d:db:de:86:6f:79:30:8c:a6:d0:f4:
11:78:39:fb:60:ce:ab:fc:ff:14:0e:31:ca:6b:f5:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:D0:52:CC:96:AD:27:CB:C4:36:E9:45:D3:86:77:4A:BE:5A:6B
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c2:87:f2:a3:f3:4b:13:8b:b5:e5:0a:8e:5f:92:d4:26:eb:
b3:6f:0d:7e:0f:3c:60:96:e6:10:44:9d:f6:84:bf:37:0d:ca:
5e:cc:d2:40:48:c8:1b:39:5f:6a:33:dc:e5:82:2b:f5:e5:c7:
12:47:e4:3a:1b:0e:46:23:59:69:8b:3e:8c:95:56:7c:72:c2:
10:8a:ea:46:aa:cd:7f:09:45:ed:2d:d6:31:7e:63:5b:41:23:
2b:88:93:47:59:4f:54:3f:36:e4:e5:72:27:87:c9:c3:5b:69:
3b:af:94:55:72:1c:73:ea:f7:e7:b0:75:9a:a4:40:fd:5b:a4:
dc:50:3f:50:74:0f:94:c8:c8:40:13:84:48:5d:7b:73:8f:2f:
25:20:0e:f4:00:0b:d0:b5:04:92:3c:fb:68:e7:ea:0d:0c:04:
ec:92:4b:32:4d:75:4d:0b:6c:0d:65:44:c7:c7:b1:70:78:b6:
dd:64:28:c3:ca:1f:2d:3d:ac:54:ed:8a:36:35:9e:ca:f7:5a:
9d:84:f2:18:74:c7:dc:5c:1f:f3:bf:fa:00:b7:1f:fa:84:52:
24:c2:3e:ec:96:06:a5:90:7f:68:4e:af:9d:5b:73:e1:32:39:
12:39:e2:2b:be:ce:85:58:8b:26:43:b7:fd:80:c9:8c:be:cb:
a2:27:0e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:20:06 2025 by rpki-client