Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier: 2FSpzx3xMUOijlFt4CHcnAECVKSJGB5ROKMQH1PwkOs=
Subject key identifier: 18:33:E3:3B:89:7C:A7:BF:0A:E1:43:48:5B:EF:BD:C7:C0:A5:06:4A
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial: 0196C15D39E44A50BE892BCDDBDF2B8EA9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 22:00:34 +0000
Manifest this update: Sun 11 May 2025 22:00:34 +0000
Manifest next update: Mon 12 May 2025 22:00:34 +0000
Files and hashes: 1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: 49qHxa757OGo0jYQGuZFVepDPwEfjPDy81weVShtnGQ=)
2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:39:e4:4a:50:be:89:2b:cd:db:df:2b:8e:a9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
Validity
Not Before: May 11 22:00:34 2025 GMT
Not After : May 12 22:00:34 2025 GMT
Subject: CN=1833e33b897ca7bf0ae143485befbdc7c0a5064a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:c4:c1:c0:04:35:de:53:e7:68:f6:c7:bd:
fa:70:36:24:16:e1:83:49:ed:62:3b:9d:86:2b:2e:
04:f4:36:4c:0b:f2:d7:55:3c:99:ba:6b:d4:10:24:
5b:84:6b:69:5d:4d:31:5c:f1:c7:de:fe:d2:ec:ff:
50:df:ec:16:47:6d:43:80:47:bc:30:84:e5:25:08:
a6:71:23:ed:a0:05:69:0c:00:1c:11:1f:0e:27:8e:
ef:e7:17:e6:a8:40:5f:96:4f:76:eb:08:2a:71:68:
d3:0b:b7:3f:c8:1e:c3:7a:e9:d5:9e:f3:f8:ec:13:
f8:d1:03:b6:97:b6:74:f4:6b:bc:0c:e5:50:41:85:
11:ce:2c:e9:ae:bc:90:ad:f8:2f:a7:e5:47:29:b2:
84:62:f2:06:c2:1b:9c:01:a3:07:23:74:b0:1f:d6:
bf:27:09:7a:5d:96:36:82:61:79:99:ce:26:c1:53:
06:71:53:95:90:09:60:69:3e:a7:dc:f6:e3:39:47:
13:d7:7d:46:b1:0f:38:2f:1e:53:39:ef:0a:d7:b1:
99:e5:61:4f:ec:60:63:a3:dd:58:b5:13:5f:65:a4:
d8:79:2c:33:8f:88:f1:a0:ef:99:d2:f9:f2:d0:9d:
e5:a7:28:c7:a2:19:03:6e:ab:b2:1a:b2:46:ea:f5:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:33:E3:3B:89:7C:A7:BF:0A:E1:43:48:5B:EF:BD:C7:C0:A5:06:4A
X509v3 Authority Key Identifier:
keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ce:c4:d5:45:d1:11:81:bf:42:bd:4b:e5:cc:50:8d:2d:0f:
e5:57:a3:c1:f3:f7:a4:97:ff:e3:a9:d9:51:6a:fc:ed:bd:5f:
64:ab:a7:ce:94:19:a5:aa:87:10:10:f8:71:59:e5:7d:b9:57:
90:94:ae:eb:15:52:63:37:84:c6:7a:00:25:a0:88:b1:c7:65:
98:ab:13:0a:0d:aa:3e:84:36:62:df:0c:6a:4f:4b:a5:c4:a0:
67:83:e1:ff:9b:df:07:fc:d9:13:5d:a7:ae:e8:0f:0b:f6:a2:
ab:0d:24:dd:a1:4f:0a:26:4e:b3:3e:46:4c:37:7b:d2:bf:fd:
72:81:74:57:5b:d3:76:b5:1d:b1:7e:83:a7:0a:af:1a:60:63:
3f:58:d9:52:04:3a:ca:41:d0:9d:4c:91:1e:b7:e5:13:ee:00:
fc:5f:fd:23:88:35:53:7c:30:5c:dd:94:59:11:56:72:2a:8c:
a3:11:ae:20:4a:0f:39:63:9a:3f:59:48:3a:5e:be:7a:c6:e5:
42:a1:a6:91:14:e3:c5:ad:18:57:91:c2:cc:b9:8b:f8:be:78:
00:10:92:4e:7d:e6:7b:af:66:6a:24:38:cb:87:31:8c:5c:45:
5d:44:48:2a:a3:4e:5f:ad:d8:12:f3:2d:72:ce:19:07:e7:22:
e1:9e:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:25:09 2025 by rpki-client