Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: thBYMZFi7LLs2KjUlaA7kBz/3O/jSWflOb3q/iLXUMQ=
Subject key identifier: 89:8E:32:FC:A4:29:46:0B:30:AC:B4:77:C4:4C:C6:D9:4F:AD:C7:FA
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 01965BA7BB500ECEB58C5E7CAB0E161C3755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 0109
Signing time: Tue 22 Apr 2025 04:00:41 +0000
Manifest this update: Tue 22 Apr 2025 04:00:41 +0000
Manifest next update: Wed 23 Apr 2025 04:00:41 +0000
Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: vxO7I5Q8goaat6+SLD7zBUK2L9AvwaVh+HvnIoLLmL4=)
2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:bb:50:0e:ce:b5:8c:5e:7c:ab:0e:16:1c:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Apr 22 04:00:41 2025 GMT
Not After : Apr 23 04:00:41 2025 GMT
Subject: CN=898e32fca429460b30acb477c44cc6d94fadc7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:99:d7:23:8c:90:79:df:98:2a:d9:33:01:
76:f8:01:8b:9b:56:dc:64:7f:2c:c4:2f:1c:c6:4b:
fd:47:46:69:51:49:33:f7:81:c2:a1:65:87:56:12:
af:e3:d9:59:e7:71:6b:7b:c2:3c:87:3e:bb:ff:c6:
c7:eb:14:36:00:8b:82:43:56:33:ac:1a:8e:02:5a:
72:37:00:ee:74:49:ca:88:8b:7e:2a:ae:f4:7d:d5:
be:f8:62:af:85:47:3e:44:b2:4a:97:65:85:80:1d:
e4:e0:94:09:82:28:4d:77:d3:36:2d:9e:70:e8:db:
34:e0:d8:9c:78:56:23:6e:f6:6b:2d:44:81:81:69:
1d:41:7a:1c:d1:bc:ac:97:b3:39:62:2a:99:e7:98:
73:b2:0e:68:14:57:a7:94:7b:18:1d:57:1a:fc:f4:
91:e6:ba:4a:4d:6d:83:23:6a:38:d8:56:a8:53:5a:
ac:82:b7:5f:f9:4a:64:ab:d6:f0:f3:99:11:6a:3e:
84:ef:1a:8d:5e:43:bc:3c:4f:72:51:45:f3:64:50:
fc:6f:da:22:6a:ad:5e:22:1c:47:03:24:23:9c:18:
fd:ef:93:63:30:78:27:32:1d:e1:99:86:b9:d5:00:
bf:ec:cf:1d:d4:f8:e8:a8:41:a7:d8:7e:47:ba:6e:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8E:32:FC:A4:29:46:0B:30:AC:B4:77:C4:4C:C6:D9:4F:AD:C7:FA
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:48:10:c4:25:81:e9:ab:4f:c5:d6:92:22:50:ad:61:82:2f:
04:90:68:91:24:5b:c3:9e:b1:06:7b:04:7a:40:1a:2a:fe:cb:
53:9e:b5:fe:68:13:60:0c:87:c9:1b:93:86:46:d7:35:28:4d:
cd:68:7d:d8:70:6c:72:53:28:06:06:74:58:43:a8:ee:59:7c:
47:01:3c:05:33:d2:44:2c:e2:03:63:68:a5:4a:cf:79:e0:54:
e1:49:a9:e8:16:51:f1:32:e3:ec:a3:3a:c5:4c:85:e3:82:ae:
a2:18:0c:c4:91:7d:a1:30:9a:3f:64:01:e3:d7:b4:1e:af:b4:
06:57:44:71:08:5a:46:71:73:e2:e5:b3:eb:da:b3:fc:25:0c:
43:4d:8d:df:65:79:3a:00:96:62:ba:f7:d4:9b:96:f9:ef:84:
f8:b2:fd:60:a7:9e:3a:b0:49:52:c5:e2:cf:28:2f:6c:0c:fd:
35:c3:bf:54:31:32:29:98:87:79:7f:5b:be:01:19:b6:21:76:
f1:ae:49:2e:22:79:c5:9f:b1:97:c4:84:3d:89:c5:30:c5:56:
e3:27:30:e1:1c:3e:db:6e:27:96:59:6b:cc:09:07:97:7b:6d:
bb:cd:f3:fd:e5:c8:d5:e8:17:f0:5f:90:36:55:2d:45:f4:f1:
3d:df:fd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:46 2025 by rpki-client