Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: yqXkkxnfpVlmOjowLe4gLXIdZzhXYotOycPVDty4kcI=
Subject key identifier: 5B:D4:D5:E6:E7:45:22:97:19:CD:39:9F:E1:4E:1C:36:C9:E3:67:05
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 01967679D6DC23780D1FF4540826B30C804F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 01AD
Signing time: Sun 27 Apr 2025 09:00:18 +0000
Manifest this update: Sun 27 Apr 2025 09:00:18 +0000
Manifest next update: Mon 28 Apr 2025 09:00:18 +0000
Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: RO6OS0MArSuGWMteUPJ27wbcaQm0CAOYAFCseAFsYrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:d6:dc:23:78:0d:1f:f4:54:08:26:b3:0c:80:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Apr 27 09:00:18 2025 GMT
Not After : Apr 28 09:00:18 2025 GMT
Subject: CN=5bd4d5e6e745229719cd399fe14e1c36c9e36705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:ea:fb:b7:72:47:81:4d:f2:1b:63:62:3b:
31:6b:b4:fc:02:4e:8b:10:dc:d5:15:51:7e:54:0c:
b0:31:78:3e:ae:1f:31:0d:e9:08:af:04:55:80:12:
07:f3:89:bd:8a:ef:94:e5:58:82:bb:77:11:44:2d:
bb:39:e1:ec:5b:66:e5:f1:30:9a:e3:09:9d:90:c1:
2e:ff:63:9d:b7:09:04:82:7b:b1:d6:f1:d1:a4:70:
2d:60:54:49:5f:b9:36:d2:11:22:ce:3a:c6:7e:11:
78:95:36:3a:5f:ea:10:19:75:a7:0e:d0:40:0e:77:
38:7a:68:da:df:a0:17:d1:f3:8c:74:1b:b6:01:aa:
53:f9:6f:37:8d:ae:16:59:52:31:02:05:71:33:e7:
f3:61:f2:9c:bb:c6:60:7b:8d:f5:64:08:95:d0:23:
58:65:29:4b:12:3d:3a:ee:40:3c:dc:2f:16:30:4d:
f8:1b:11:2e:2a:2a:c5:4a:fb:14:05:c1:ef:db:b7:
f7:a0:f5:e4:86:06:b2:a8:ed:dd:b6:7a:df:4a:de:
0a:97:e9:27:a1:85:b0:f9:b8:a9:c2:c1:13:0c:67:
8d:4d:58:4f:47:c3:b6:b2:4a:b1:b3:93:72:45:96:
04:98:a2:18:6a:68:85:cf:96:c0:44:1f:fa:ef:aa:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:D5:E6:E7:45:22:97:19:CD:39:9F:E1:4E:1C:36:C9:E3:67:05
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:42:fe:0b:cf:76:bd:2c:2a:bb:68:a7:64:24:e0:de:4c:99:
64:a7:73:66:a8:51:65:ab:73:e5:58:aa:01:18:b8:27:29:7a:
ed:df:cf:31:b8:69:69:e5:b0:a8:06:41:13:90:1e:fc:5e:95:
40:bf:db:8d:75:1c:4b:7e:1b:88:12:ce:62:1e:79:6c:82:b8:
e9:59:e8:fa:66:36:c1:00:89:b0:97:b4:b3:23:24:a9:f9:21:
88:de:1e:d7:56:45:b8:26:c7:bb:73:30:d3:b1:d5:35:99:7d:
d1:8e:05:62:02:51:23:93:e8:f6:30:be:e5:42:03:e1:39:be:
08:fb:4f:5f:a3:ac:02:c0:0f:ba:b2:f7:4c:6a:90:40:3c:4f:
8f:c7:8b:00:fb:42:f1:df:a8:39:5b:8d:fb:4f:ee:11:23:22:
b6:24:61:15:b2:38:41:29:90:9d:e1:68:b0:0d:41:88:cd:ac:
cd:da:4a:84:ab:5f:20:27:90:b9:29:36:14:d7:01:fc:d1:17:
13:0d:b3:9d:15:7a:66:40:97:b2:29:69:ce:fc:1c:93:b9:62:
71:c2:98:f6:f4:50:e1:c9:cc:14:1b:db:9a:7c:2c:78:18:d5:
eb:9e:52:c8:29:c6:78:89:f0:7d:b4:ae:c2:bd:d1:6d:3c:b1:
26:8a:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:19 2025 by rpki-client