Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: ywcg6ZcvJiOnBAi2qX7sSZ7BFYkxNJZKREPV/QJDQ1k=
Subject key identifier: 55:2D:99:65:7F:6E:26:D9:61:01:7A:32:C5:B9:EA:84:03:AF:0F:BF
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 01962D862B8F4090B704D3374125B5655BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 0C61
Signing time: Sun 13 Apr 2025 05:01:29 +0000
Manifest this update: Sun 13 Apr 2025 05:01:29 +0000
Manifest next update: Mon 14 Apr 2025 05:01:29 +0000
Files and hashes: 1: Cr7WIZXJqqSxx1MgWk3fJvY56gA.roa (hash: W0p2Ng/L4A+CUhGlPSgje47dkJ8+aMEjdUAnh4zo9Rc=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: YJFcT/RP+cXswXVHa16vGQ9ARtAptAZzVQuUwG5FP1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:86:2b:8f:40:90:b7:04:d3:37:41:25:b5:65:5b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Apr 13 05:01:29 2025 GMT
Not After : Apr 14 05:01:29 2025 GMT
Subject: CN=552d99657f6e26d961017a32c5b9ea8403af0fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:96:86:7f:62:3d:11:a2:6d:4b:59:2d:6c:
db:07:27:b2:10:a7:55:9a:cf:d2:d1:e4:74:7f:f3:
9f:8c:74:f4:c2:cd:db:98:67:31:bf:7b:50:98:c6:
8a:44:0a:b1:49:c1:81:c8:c3:e9:1a:6e:09:3f:7f:
3b:3a:3c:87:77:c0:8c:d0:5f:75:f9:02:2b:cc:84:
f4:34:30:7a:cd:58:52:56:0b:85:d4:1f:50:3d:44:
eb:72:9e:e9:a5:78:84:43:c7:dc:8a:b7:1a:00:6a:
7c:d0:51:bc:a9:d2:82:69:b9:26:0d:da:45:87:86:
9d:0e:e4:60:f9:3e:d4:c7:7c:1e:97:b9:0a:e0:d0:
9c:97:d7:36:95:f7:e3:47:05:be:75:f6:63:0e:77:
36:97:b5:00:3f:77:34:75:a1:7f:06:12:2b:37:bb:
55:dc:0d:ae:28:5c:f8:a2:ef:71:af:b0:2a:b6:7d:
d7:4f:a2:e1:78:90:21:64:d5:9c:b5:48:1f:81:9a:
4a:d2:b2:59:7d:82:bf:e7:2f:b3:74:e8:36:e3:e2:
83:e6:17:81:54:49:b3:eb:2c:83:45:af:59:d3:17:
d4:23:9e:8f:99:0a:ed:ff:e5:18:e9:03:80:5e:28:
e9:91:e4:91:a9:2a:87:ea:da:56:18:de:b5:ed:b8:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2D:99:65:7F:6E:26:D9:61:01:7A:32:C5:B9:EA:84:03:AF:0F:BF
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:60:f8:70:71:f2:7d:e1:87:41:bb:bb:b2:b2:6f:c9:bf:
d5:12:ed:5b:d2:30:e9:5e:e8:78:50:e8:5d:2e:85:a3:49:29:
8e:4b:58:cf:2b:34:9b:13:74:b0:ff:d4:ac:f9:9e:1c:d2:25:
79:b7:8a:6b:1c:b1:4a:2d:4d:58:41:9c:cb:7b:46:26:2b:88:
5b:1a:fe:96:c4:97:05:ce:80:d7:f8:5b:2c:dd:69:29:02:08:
d4:f4:76:8f:32:2d:7e:ac:d2:ff:f8:12:42:71:c9:1c:b4:c2:
25:ed:89:8e:81:0c:cf:18:2e:67:a4:c6:60:48:89:f7:cf:90:
5b:df:ce:aa:24:4a:8c:23:be:74:63:0e:0c:02:5e:96:e5:a8:
eb:b7:dc:40:91:70:90:af:4e:90:42:0a:76:43:b9:6d:84:fb:
ec:eb:e6:66:d5:b4:49:c2:8b:e4:56:5e:17:74:14:36:86:92:
da:79:87:0b:e7:b4:1e:5b:2c:5e:d8:88:39:1f:18:33:99:da:
6a:db:67:f5:5d:30:db:72:5d:d1:e3:fb:50:45:84:ab:d7:2c:
c6:a3:0c:24:c2:cb:97:cc:82:de:97:c0:7b:b8:db:15:88:e9:
3d:59:4b:73:4a:da:64:ac:3f:9c:56:11:e1:7b:78:d6:b1:9b:
60:bd:33:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:31:34 2025 by rpki-client