Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: 1figN0woxJ4yXTrOgq3O70C9eIESW41pZ1vwrRjoES0=
Subject key identifier: ED:24:6E:DA:26:B9:4B:C6:91:84:89:1F:AB:58:CA:08:27:85:C1:01
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 019655DC99C97CD8A53F4502950535131D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 0594
Signing time: Mon 21 Apr 2025 01:00:42 +0000
Manifest this update: Mon 21 Apr 2025 01:00:42 +0000
Manifest next update: Tue 22 Apr 2025 01:00:42 +0000
Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: W8lACHG9y5TKEHvNv+swPBMXHLpIRWAbRXweFey5RlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:99:c9:7c:d8:a5:3f:45:02:95:05:35:13:1d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Apr 21 01:00:42 2025 GMT
Not After : Apr 22 01:00:42 2025 GMT
Subject: CN=ed246eda26b94bc69184891fab58ca082785c101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:f5:f5:68:02:a2:f8:eb:08:e7:7e:ae:24:
5d:fb:0a:e9:a6:cf:21:23:ba:1a:e7:5a:ab:4f:e9:
5c:a2:d4:90:b1:a3:60:a1:50:29:90:ad:0c:08:70:
08:2d:ff:53:1f:a7:3a:aa:72:4a:2a:66:d7:4a:47:
6b:4d:a1:2f:67:86:69:65:34:98:52:9c:d9:fc:5e:
75:aa:66:ea:8b:da:48:83:ec:7b:58:15:6f:62:bb:
13:ba:f8:c7:5a:df:bf:cc:b1:d6:58:f2:f0:35:40:
9a:24:60:a0:76:25:eb:9b:9c:f4:bd:82:2c:78:1b:
7b:7e:de:3e:a1:c2:ca:1e:9d:b1:c3:1e:73:09:15:
47:25:30:84:7c:80:6c:20:92:6e:d3:15:39:31:98:
5b:40:eb:a4:7d:0e:9f:db:d1:7f:1b:64:4f:7a:5f:
2d:60:d6:df:58:89:d5:af:4e:1f:74:35:06:96:4e:
eb:23:bf:ed:62:b4:c8:41:bb:55:d3:11:20:b0:a2:
1a:7b:da:aa:51:e7:5e:e0:ec:f0:3f:aa:92:79:91:
a0:05:a3:02:a9:3c:47:59:37:df:f5:e3:69:06:ac:
02:1c:ba:4d:ad:ab:66:02:09:9b:6b:82:3f:75:09:
57:ec:9a:62:5e:8d:76:30:30:cf:fc:3a:53:49:9b:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:24:6E:DA:26:B9:4B:C6:91:84:89:1F:AB:58:CA:08:27:85:C1:01
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:83:d4:f9:b6:8a:c2:ce:a2:6d:d0:e4:ee:19:f5:26:14:b1:
66:39:0f:42:a9:f2:9d:31:5e:79:96:0a:97:64:9d:ee:b3:0c:
96:a5:9e:5f:2b:91:9b:c9:a7:3c:0d:6b:a9:fc:11:31:02:4b:
08:c9:6f:1f:6e:80:ff:ba:32:b2:b5:7e:4f:9d:61:40:3c:05:
c5:aa:82:75:2e:52:f5:11:6e:a4:47:df:ad:b4:85:fb:12:69:
3b:d4:36:ba:94:09:80:1f:3a:95:02:ed:c6:ab:f6:ef:3d:d3:
84:17:0f:de:80:99:d8:f2:8f:a6:51:35:aa:0c:94:4f:c3:d1:
4b:de:b4:0f:3e:65:96:6b:d3:81:a4:ce:2b:0e:66:b1:d3:40:
92:4b:23:dd:4d:7c:15:ee:fd:95:aa:8c:9d:b6:55:85:bd:de:
3d:39:92:b1:7a:93:74:b3:6b:88:98:3a:17:95:30:ae:9b:ec:
08:73:a1:a3:4b:12:4b:18:4f:64:aa:b0:45:5f:65:89:4b:39:
00:4a:3e:a2:06:02:63:8d:90:ad:19:bb:99:0d:00:16:24:cb:
9b:df:f7:9b:95:d0:ca:ab:ef:92:0f:3f:32:b4:5e:23:14:aa:
e6:0b:0c:41:dc:80:07:a4:a5:2f:a7:d5:81:ed:2c:29:ca:54:
04:66:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:03:00 2025 by rpki-client