Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: +eyCE1yscvLTIBeJNhTCbXw1R6bcXYlQwfaBxIcxuqM=
Subject key identifier: 9C:80:9E:6C:38:25:26:51:BD:47:A4:18:AA:3B:C0:2E:F9:4C:CF:A8
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 019653B7CA15B8C8AF438A2CD167E2921B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 0F5C
Signing time: Sun 20 Apr 2025 15:01:15 +0000
Manifest this update: Sun 20 Apr 2025 15:01:15 +0000
Manifest next update: Mon 21 Apr 2025 15:01:15 +0000
Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: FwOmWIyZT43rMB3A7/kp/FXWHoCUD5rfgSYT7S/pugs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:ca:15:b8:c8:af:43:8a:2c:d1:67:e2:92:1b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Apr 20 15:01:15 2025 GMT
Not After : Apr 21 15:01:15 2025 GMT
Subject: CN=9c809e6c38252651bd47a418aa3bc02ef94ccfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:4a:dd:73:c3:62:4b:dc:63:13:b3:65:18:
76:03:57:ff:cd:91:87:84:a1:f9:b2:0d:c6:19:bf:
6e:e0:ca:1b:5b:29:73:24:a6:76:7c:ff:51:1f:03:
c1:94:84:ca:b0:ca:54:ad:eb:4e:f8:aa:c3:2e:84:
f8:1e:e6:d6:9b:9c:5c:8c:cc:6e:b3:b5:67:07:d2:
6d:85:36:da:5b:31:87:70:d7:ec:19:3a:5a:b5:df:
91:0d:a0:46:a0:d3:09:ae:8c:b0:98:a2:b2:d5:6e:
16:3e:f1:2e:5c:3b:31:62:de:02:bb:63:bb:cd:f8:
1f:40:ec:52:4d:a9:dd:2d:53:be:28:4a:cb:97:ad:
d5:8a:5a:43:b3:d2:d0:00:d5:91:48:fc:d2:80:b2:
f5:a1:05:2b:a6:4a:2a:b0:77:32:d0:51:97:19:fa:
92:9d:77:ab:9d:11:10:c8:61:75:a6:2c:c8:da:aa:
c6:37:fa:1a:da:ab:21:b4:a2:1c:e6:a6:b0:1d:e6:
31:3c:17:f2:3f:32:d1:d5:b9:b7:7a:f4:19:7d:46:
36:f7:9a:37:5d:f7:8c:5c:8d:5f:9f:14:40:ee:86:
e7:2d:56:b8:9c:50:d7:4a:84:9b:43:9b:4e:80:f6:
ee:67:0e:86:f8:45:b5:a8:7e:48:99:9f:97:36:9f:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:9E:6C:38:25:26:51:BD:47:A4:18:AA:3B:C0:2E:F9:4C:CF:A8
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:23:75:a6:1c:33:15:34:fc:95:8f:1d:c3:fa:fa:4e:91:97:
e9:05:87:2e:9f:0e:c4:e4:74:4d:2b:a7:a0:14:25:82:ff:78:
f2:18:cc:f7:d1:13:98:5e:00:53:f7:91:7a:33:9d:ac:f6:cf:
83:4a:c6:d2:cc:94:f0:0e:73:48:83:07:01:f6:12:f1:04:45:
62:95:ed:2f:20:fc:ce:d5:c7:52:b5:e9:7b:c4:2a:f4:af:69:
b4:a5:8d:2c:62:b2:42:c5:b2:04:3a:10:34:98:40:45:5c:0a:
a0:10:ee:06:28:b2:40:09:48:60:9b:27:a2:46:db:9c:46:db:
63:df:1d:d1:36:cf:d4:6c:68:8c:a7:00:f5:45:34:f5:4f:76:
24:13:de:09:c7:21:e5:39:83:a8:2e:cc:07:86:0b:de:72:17:
93:19:4f:4b:68:98:e1:8c:7f:60:7f:b8:6b:3d:85:5f:fb:bc:
99:5e:0b:82:e9:84:64:cd:ca:66:41:50:c4:b6:34:18:3c:cc:
bd:cb:5e:a8:9f:a5:d8:91:8a:dd:53:19:b3:77:dc:b3:5d:59:
28:bc:18:52:60:45:9b:8e:7f:6c:b6:e0:e8:ab:ac:ee:d4:92:
38:30:8a:2a:b1:7f:97:47:aa:d8:45:8d:a2:aa:b7:14:b1:9b:
0f:c2:60:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:11 2025 by rpki-client