Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: quW3V1TbIZHdBjhjpYhq3ILWZo3b25sRgT97gcHBQaM=
Subject key identifier: 05:C7:BA:44:5F:7E:8C:F8:79:EB:66:9C:25:5A:F9:3F:50:9A:89:34
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 01963F544B245B9A291A55675EFC8F7FA5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 06DF
Signing time: Wed 16 Apr 2025 16:00:10 +0000
Manifest this update: Wed 16 Apr 2025 16:00:10 +0000
Manifest next update: Thu 17 Apr 2025 16:00:10 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: A6Via7T/S+aml/4yLALd2lDif6IS0X+bwCXjaqEpZPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:4b:24:5b:9a:29:1a:55:67:5e:fc:8f:7f:a5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Apr 16 16:00:10 2025 GMT
Not After : Apr 17 16:00:10 2025 GMT
Subject: CN=05c7ba445f7e8cf879eb669c255af93f509a8934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:f2:73:cd:8a:af:b2:3d:37:1f:f5:7e:2c:
8c:1e:08:d7:a7:ac:e8:fb:f9:7f:5f:f5:50:71:f0:
f8:d6:89:15:71:40:d8:11:a1:52:a9:8f:eb:48:5d:
5c:8a:08:4b:11:38:f9:66:b2:28:44:38:91:49:04:
6c:fa:f6:74:51:cc:01:92:f1:58:b5:8c:dc:e2:61:
27:ac:f7:e9:97:a5:55:69:bb:2c:68:56:ad:26:b4:
0f:20:60:e5:ae:5d:74:54:f5:14:e9:1b:eb:1e:ab:
a4:15:f1:11:50:5a:1d:f8:e1:5a:35:ed:97:93:f5:
cb:c6:7e:5d:9b:f2:24:51:7a:cb:83:b9:00:4c:59:
c9:28:ed:b1:45:18:23:d1:18:59:1b:af:1f:ec:42:
2e:17:6e:da:ee:4c:8e:84:0e:97:fe:4d:a4:59:d5:
84:24:9c:d5:d7:0b:9a:65:84:5f:e3:6d:2b:58:d2:
1f:72:25:c1:6d:cc:0f:95:37:a5:31:88:a6:89:f7:
5c:1e:8b:02:39:5e:68:25:77:9a:3b:bc:4a:d2:5e:
78:28:04:e7:6c:41:2e:3b:88:a9:41:1a:ee:c9:93:
aa:50:70:1a:83:f0:c8:65:36:91:5e:a1:79:c2:c5:
77:ee:7e:84:37:88:0b:1b:e9:79:c2:0f:f1:1b:1b:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:BA:44:5F:7E:8C:F8:79:EB:66:9C:25:5A:F9:3F:50:9A:89:34
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ca:6a:55:c6:f7:b6:9c:be:8b:d7:69:6e:06:20:47:a0:fb:
4d:08:21:59:43:2f:6b:3a:28:a8:5c:fc:e9:aa:93:fc:cf:c6:
a2:44:32:5f:81:1a:bd:8a:b3:58:79:27:f5:e6:ab:d4:03:4e:
7c:56:24:23:8f:4b:c5:d7:01:21:c3:e3:0d:f5:3f:7f:0f:e1:
3a:1f:19:96:f6:fd:36:68:7f:e7:36:b2:f0:03:f2:93:d4:f4:
04:ab:07:45:b9:e4:44:c7:09:48:6e:69:10:91:38:27:fa:d6:
8c:26:2e:ec:e4:af:e8:c2:f5:a7:07:1c:90:c1:26:71:2e:a6:
ac:20:90:ae:da:d4:26:57:ac:de:64:9c:58:e0:6a:1a:22:ca:
a9:00:c2:95:91:87:c6:69:d9:7d:bf:4a:6e:3a:dc:ff:b2:97:
dd:e5:b3:f5:91:10:58:57:36:78:d6:23:1f:48:95:7d:e4:56:
c4:ee:43:3c:a2:24:5a:30:48:61:eb:c1:71:43:24:53:2e:8f:
34:1f:2c:fe:8f:0e:c4:8c:32:f3:63:2d:f0:e0:f9:4b:35:17:
17:2f:00:68:ff:ed:c3:a8:f8:ce:aa:42:a2:d8:06:f1:ec:57:
be:51:e0:34:2a:8b:68:47:6e:c2:c8:12:27:e1:b7:e1:32:76:
79:df:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:04:34 2025 by rpki-client