Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: MfqRZeJsru6EBmnue56kAN/SjaygILuxFhTTXWiwRII=
Subject key identifier: F8:D0:BA:01:7C:E4:C6:3E:EF:7D:B9:4D:AA:43:F6:4F:44:9F:CA:90
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019694F26FAEF17A281C6A4F95B37EBB2C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 151F
Signing time: Sat 03 May 2025 07:00:38 +0000
Manifest this update: Sat 03 May 2025 07:00:38 +0000
Manifest next update: Sun 04 May 2025 07:00:38 +0000
Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: JxQ2W1PuvUo0c0HTQ7X6Wljm1b5laF4GjE3rhrrNN2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:f2:6f:ae:f1:7a:28:1c:6a:4f:95:b3:7e:bb:2c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: May 3 07:00:38 2025 GMT
Not After : May 4 07:00:38 2025 GMT
Subject: CN=f8d0ba017ce4c63eef7db94daa43f64f449fca90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:88:cf:46:b9:96:04:66:63:6a:2e:f2:d3:84:
e1:2c:ae:18:99:9f:9e:c3:f2:ff:07:ec:18:a8:6d:
f0:7c:63:13:a6:43:9d:13:39:16:23:02:33:90:df:
b3:a1:c6:35:03:c6:95:ef:29:c6:b0:fe:3f:be:8b:
b7:1d:b0:dd:c9:94:8b:d6:75:17:54:07:61:6b:d5:
49:b8:e8:7b:ed:0e:44:57:92:06:d9:20:d8:3e:e1:
2b:46:20:14:a9:41:1a:fc:df:74:63:71:3d:4c:25:
93:11:f5:fc:c9:09:13:41:a4:fe:42:1a:c4:f4:c3:
9c:9e:50:73:6d:1a:ba:b2:51:6c:07:0f:1d:b2:fe:
01:83:8d:fe:96:e7:10:29:c9:75:2c:93:ec:1f:51:
9c:f0:e9:47:23:ba:2d:4a:54:a5:25:78:03:50:31:
fd:44:00:ba:48:69:41:ed:a3:b3:48:48:f7:e2:f8:
a2:79:cf:d0:42:89:ba:99:c0:45:a4:ed:4f:08:71:
90:c3:f3:5c:bd:9c:74:f0:97:d7:01:8f:a0:29:68:
82:e3:01:f4:c7:aa:b1:b9:c4:d0:92:9b:f7:92:92:
3e:3a:72:ab:e0:70:16:1a:95:5c:a0:dc:93:da:6c:
1b:ef:87:ea:80:5d:cc:7c:81:98:22:2a:c3:20:15:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D0:BA:01:7C:E4:C6:3E:EF:7D:B9:4D:AA:43:F6:4F:44:9F:CA:90
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:66:9e:35:7a:39:02:55:52:4b:a2:ee:cd:cf:ac:7e:a8:6b:
e2:78:2d:12:e0:fa:b8:80:dd:6c:4e:77:0f:27:21:9e:33:6e:
04:1a:ff:76:eb:7a:20:21:0f:aa:1e:0a:81:96:4c:d1:56:d5:
20:13:08:c1:28:3b:31:d3:04:1b:4d:e1:25:9d:12:0e:27:25:
22:74:ca:b5:44:bd:90:17:04:1f:74:63:ce:87:f5:e8:ce:59:
89:1f:1d:15:5e:49:58:38:f6:64:8b:a4:87:54:35:e8:e0:d3:
68:f4:76:49:62:77:b7:dc:32:3b:29:c4:9b:f6:0e:01:6a:5f:
cd:2d:f1:6b:83:12:3d:52:91:a4:48:6d:05:e6:59:d1:94:b8:
44:2f:c3:5a:b9:7d:00:bc:99:c2:62:de:66:88:9c:c3:b5:09:
9c:39:2b:08:9c:fd:9e:ea:7e:47:f9:bc:89:81:fa:e4:ba:f8:
bc:1a:4f:d5:57:72:8e:b0:7f:9b:5c:6f:52:ab:fe:6d:37:7b:
95:bf:77:a2:79:f2:b0:e8:4c:62:d6:18:b8:ff:d5:db:3c:23:
a5:e4:58:94:68:95:09:be:1d:32:9e:18:e8:32:e9:b9:1d:61:
e6:47:4b:91:13:b8:79:85:99:5d:ea:d0:f8:32:62:6a:3c:f5:
bd:d8:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:35 2025 by rpki-client