Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: 5PNt7hw3zX3N5jRz3xNtTJDyjCOzfjk306B+7LdBRi8=
Subject key identifier: 9F:09:03:69:4E:F9:78:CD:EB:DC:25:91:EA:9C:FF:C3:A9:72:2F:B9
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 019673795A8E0FBCF84FFF67ACF31A9C790F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 19:00:54 +0000
Manifest this update: Sat 26 Apr 2025 19:00:54 +0000
Manifest next update: Sun 27 Apr 2025 19:00:54 +0000
Files and hashes: 1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: m3yIdebR1Iw0AbBjrJnIxDUv4bLg/4E7ucH38mc2ljE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:5a:8e:0f:bc:f8:4f:ff:67:ac:f3:1a:9c:79:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Apr 26 19:00:54 2025 GMT
Not After : Apr 27 19:00:54 2025 GMT
Subject: CN=9f0903694ef978cdebdc2591ea9cffc3a9722fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0b:f3:0a:ce:a2:37:d4:72:88:d3:84:64:ef:
25:35:c7:2d:fe:44:e6:63:2c:a8:3b:91:db:17:1a:
d4:26:74:fa:e1:bb:1c:48:03:e7:db:f9:d1:34:83:
69:00:c2:bf:59:d9:84:ef:eb:d3:75:8c:d5:69:4b:
84:37:25:7c:f8:54:98:f3:10:b4:1d:1b:5d:24:65:
3f:50:09:03:f8:7a:2f:52:59:f6:e6:fa:9f:35:bf:
c3:22:3b:59:3b:69:4f:b9:ee:c2:d0:f9:54:bc:04:
da:ef:77:ff:a6:09:57:74:ae:10:ad:a2:19:e1:b2:
c8:89:9f:d4:31:fc:f5:56:4c:1b:b9:8a:a8:15:dd:
d3:18:8a:65:4c:e3:48:91:d9:c9:59:f0:5d:49:05:
70:1e:f1:cf:b0:97:1a:d2:57:3b:c8:bb:d3:16:43:
f5:00:af:b0:f6:54:d9:4a:c9:0d:0a:27:92:3f:94:
63:9c:cf:20:c2:44:ab:17:af:a5:69:fe:71:b6:23:
5b:82:4c:4f:0f:ba:db:ae:e9:95:bd:49:8e:47:b1:
97:b5:da:90:db:e7:47:69:54:d0:08:8e:69:61:11:
e9:83:8a:5d:6c:ce:19:a9:cc:b2:35:8c:8a:58:ad:
47:88:6a:ea:c3:58:69:8a:e7:9e:64:e8:16:c2:fc:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:09:03:69:4E:F9:78:CD:EB:DC:25:91:EA:9C:FF:C3:A9:72:2F:B9
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:25:5f:b3:43:a7:ef:83:06:cc:cb:e1:98:2b:30:a6:d5:6d:
50:7f:8b:dc:5a:52:ef:2a:fb:d5:ca:e8:f5:d6:4a:2e:a2:bb:
ef:53:4b:e4:d1:4f:b7:4c:c9:41:c8:88:7a:b0:c3:3c:5e:fa:
f0:b3:4e:86:a3:59:7f:35:d8:0e:65:97:5f:01:21:8e:cd:e1:
b0:41:7f:1b:fc:86:9b:24:76:bc:32:ee:f0:83:35:04:49:46:
52:23:32:7e:b6:43:f7:6b:e2:d1:92:e5:a4:92:23:5a:32:8e:
5f:b5:b3:ca:64:43:b1:46:85:00:a8:39:82:11:33:83:bc:db:
84:14:ee:86:5d:d6:ad:e7:cc:57:e1:d2:3f:8b:30:91:c4:66:
3a:76:5e:88:74:72:0a:f9:ed:21:09:3e:1b:c6:6c:96:ba:40:
7a:71:79:68:5a:f9:34:a8:9b:f0:f2:3a:f0:85:b8:d2:a7:e5:
99:69:30:14:5a:60:83:29:ad:39:ac:7e:f0:16:1a:1a:99:90:
be:db:a3:50:43:7f:3b:1f:d8:e3:56:61:0b:68:28:a9:82:0a:
b6:6a:24:17:ad:b7:6f:82:b9:8e:ad:11:e5:da:a0:e6:02:9e:
8a:49:52:ba:ce:9e:fe:96:87:db:8e:eb:1a:35:0a:ba:34:37:
41:cf:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:17:18 2025 by rpki-client