Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
File: tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json)
Hash identifier: d7ia/gYpG1mqVVF50jJ37Qj4CCaAkkueo5uA38/EJCk=
Subject key identifier: EC:65:9C:2C:1B:7B:0B:CE:7E:32:F8:0C:50:F1:B5:5E:1F:66:28:04
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Certificate issuer: /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial: 01968E824AB5CC940E4C3BD08EBC6D09EEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
Manifest number: 0F16
Signing time: Fri 02 May 2025 01:00:25 +0000
Manifest this update: Fri 02 May 2025 01:00:25 +0000
Manifest next update: Sat 03 May 2025 01:00:25 +0000
Files and hashes: 1: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: KyKiqdR4JnNenHJ5UzWsT2jw4yPPrQkkChGAXLCkhSs=)
2: tyBiH_k1-T3tg2PjNihavpjVNFg.roa (hash: +MCpw/+jgYqZnXSoZlFEXezP/GiLWQcwVakj6OdX0hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:4a:b5:cc:94:0e:4c:3b:d0:8e:bc:6d:09:ee:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Validity
Not Before: May 2 01:00:25 2025 GMT
Not After : May 3 01:00:25 2025 GMT
Subject: CN=ec659c2c1b7b0bce7e32f80c50f1b55e1f662804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:7d:b7:cb:32:06:5e:03:09:8f:f9:cd:07:
89:85:9c:7f:bd:26:4b:9e:13:0a:24:93:42:7c:47:
1e:4c:f7:a2:79:a9:e8:48:92:8c:fd:cd:98:33:5e:
80:18:23:99:b1:a1:9f:2b:f7:28:f7:73:c2:b6:8a:
7f:9a:56:be:10:08:f5:1a:16:7c:9f:56:c0:75:fd:
34:e0:31:25:8f:18:d7:71:75:4d:d7:35:09:00:9f:
e9:3a:d4:bf:77:f9:a5:e6:0a:9b:fb:78:0c:b9:8e:
03:cb:09:2c:b5:0b:c8:11:e7:48:cf:42:cb:b8:5d:
86:44:26:48:ab:2d:9c:23:9b:c2:ee:ce:bf:d9:50:
88:03:42:cb:0a:6b:70:fe:a9:f3:1b:09:c8:c3:d1:
2a:af:bd:34:06:5f:1a:1a:40:27:ed:b5:52:e2:ab:
44:f4:71:b3:0d:28:1e:57:08:8f:8b:8f:6c:72:60:
b9:d6:72:be:03:da:9c:81:2d:37:46:66:2f:21:22:
85:6f:38:28:16:8a:e6:17:00:ac:3c:13:0c:27:bd:
0d:34:fb:57:83:29:82:8f:4b:56:0b:94:ea:7f:a0:
13:e2:69:e7:23:f6:b1:1a:0e:ad:b5:88:87:dd:30:
e6:33:03:71:2a:71:dc:91:cf:47:91:b9:10:1a:17:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:65:9C:2C:1B:7B:0B:CE:7E:32:F8:0C:50:F1:B5:5E:1F:66:28:04
X509v3 Authority Key Identifier:
keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:a0:89:1b:d6:f7:31:dd:55:1d:84:a8:f9:9d:8d:b1:a3:ea:
82:44:dc:0f:5e:d6:e5:e0:a9:23:9a:6d:a0:77:3f:fe:96:1d:
dc:8b:0b:e7:c5:31:ad:bf:64:24:76:bd:c5:d4:39:fe:22:10:
99:cb:b9:b9:b2:3a:d7:29:a2:1f:8d:e0:a6:bd:72:47:f7:43:
b9:17:35:4a:a1:e6:f5:a9:45:b7:58:34:fc:5c:1d:4c:6b:b4:
51:c6:2f:80:e0:4b:4a:c2:ab:06:be:23:14:38:01:97:48:b4:
61:7c:4f:fc:3d:98:ac:80:4a:f5:5e:1d:78:ad:67:88:78:b3:
9c:49:b2:ab:85:85:a5:9d:a0:bf:f0:35:0b:93:68:83:71:8c:
c1:a4:85:c9:34:fc:dc:e3:bd:37:93:d1:06:3b:2e:96:6e:40:
11:f8:95:34:4e:48:25:8b:63:97:4f:82:56:03:3e:e1:ba:f5:
17:93:90:c2:16:9d:31:74:8b:78:34:dd:6f:f3:8b:42:0c:ca:
83:2f:2e:91:32:da:9c:4f:cc:7f:bb:44:27:71:b9:c3:69:36:
a1:3e:e3:3b:00:8b:38:6d:e1:b9:26:93:ba:4f:04:f6:35:3e:
c5:e2:ac:8a:17:f5:46:8b:21:80:fe:6e:1d:42:90:08:1e:49:
bc:8f:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:01:50 2025 by rpki-client