Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: mJum6s2V8RICn23e77E5px9B/xYvvlHOI6JXryX7kOs=
Subject key identifier: 85:C8:AA:0A:B8:C7:39:D9:D9:F7:45:AC:53:81:E8:DC:E0:32:32:63
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 019683911D789300653E5289E6382EB936AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0B96
Signing time: Tue 29 Apr 2025 22:00:47 +0000
Manifest this update: Tue 29 Apr 2025 22:00:47 +0000
Manifest next update: Wed 30 Apr 2025 22:00:47 +0000
Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=)
2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: 4p9mnJVsRg6rqeWt44r/uk/MVpL/zKi5Qk314o2R9lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:1d:78:93:00:65:3e:52:89:e6:38:2e:b9:36:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Apr 29 22:00:47 2025 GMT
Not After : Apr 30 22:00:47 2025 GMT
Subject: CN=85c8aa0ab8c739d9d9f745ac5381e8dce0323263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:81:84:0a:16:39:c7:81:c1:55:3a:6d:f0:
db:de:37:92:5a:71:34:a0:d5:99:49:92:ea:d0:54:
f7:db:60:92:03:2f:5d:31:99:5a:33:45:42:19:7b:
19:6a:00:73:fc:85:a8:17:61:80:9c:55:d9:07:22:
2e:35:e6:c3:68:a3:e6:5c:aa:ab:41:84:df:ca:d5:
f1:88:ab:2b:89:54:62:2c:86:06:10:1f:35:0c:d1:
e7:a3:b2:ff:ed:4c:87:36:10:53:83:cf:fe:c7:9e:
d1:19:f5:e6:39:ab:af:63:5f:fb:36:99:29:55:03:
91:cf:0c:10:f5:3d:30:e5:09:24:ef:59:2f:96:4d:
e2:69:d7:65:b4:ca:b8:8c:5e:a0:fb:e8:d6:0c:fc:
43:0d:fe:1f:0a:d0:a5:10:17:79:a5:43:0f:64:b4:
a0:c2:b3:4c:33:fb:9d:c7:06:f0:05:01:5b:39:c3:
d7:66:01:93:f1:8a:0e:b0:12:ca:f5:c4:e1:63:7f:
b1:1b:04:ca:64:bf:0c:63:c8:b5:98:3d:29:6f:8c:
fe:a6:1e:1f:e5:77:45:55:1e:aa:38:49:ba:e7:b8:
69:0e:7b:a9:64:59:9a:b5:b4:75:d4:d4:55:49:c8:
dc:33:e1:27:6a:56:f8:69:86:d7:07:04:16:19:0b:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:AA:0A:B8:C7:39:D9:D9:F7:45:AC:53:81:E8:DC:E0:32:32:63
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ef:9e:60:56:20:57:3b:8e:fc:26:1f:b8:7b:e6:be:17:92:
9a:31:02:87:5e:d8:61:cd:c1:e2:d5:a3:4c:eb:6f:07:f9:59:
7c:4b:74:88:7b:09:a5:3e:82:05:bd:ee:b5:23:1a:81:f6:ed:
99:8e:36:2e:f9:cb:43:63:b0:7c:f0:23:c7:9b:0c:46:83:d4:
b0:1b:72:ef:4f:c4:8f:fc:fd:b3:bd:c5:d9:f5:8b:9d:ed:1d:
6c:8f:4f:8a:ce:dd:af:b1:7e:a6:1b:5c:ac:4a:83:63:04:89:
1f:01:c1:60:8e:93:7f:cd:f5:43:94:2f:03:6e:58:7e:75:aa:
97:b7:00:a0:d3:df:58:eb:39:ab:4e:5b:6c:5f:42:16:76:7f:
0e:a1:87:1f:8a:10:ef:87:09:02:37:3d:74:6c:14:f3:36:45:
91:33:d1:88:c8:07:3b:c4:b8:64:0c:e6:3b:61:20:78:d2:8b:
db:81:af:47:5a:bd:41:4a:a1:67:2f:b5:5f:42:cd:08:60:0a:
e0:bb:2c:b6:09:d0:56:ec:61:08:19:5b:5a:a0:92:be:de:25:
7f:d6:18:9f:97:2f:de:7e:5d:53:08:e1:5e:08:e7:53:ba:32:
c6:df:d7:c0:4a:47:3f:20:8f:fb:68:a7:43:95:6b:33:c2:88:
f3:22:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:51:22 2025 by rpki-client