Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
File: tZvm7lSfM1xyhJennxRBA06FLDU.mft (raw, json)
Hash identifier: F1h49f/kIzgBZX2NnUjDOS2kZHdmMiQUsbMiPE2joP8=
Subject key identifier: BA:97:C9:DE:48:36:9B:C8:8C:A5:9D:92:F6:D4:25:E3:1E:84:80:AB
Authority key identifier: B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
Certificate issuer: /CN=b59be6ee549f335c728497a79f1441034e852c35
Certificate serial: 01963FFA012F310BA2D9BEBA5EFF7F0ADBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
Manifest number: 13BE
Signing time: Wed 16 Apr 2025 19:01:10 +0000
Manifest this update: Wed 16 Apr 2025 19:01:10 +0000
Manifest next update: Thu 17 Apr 2025 19:01:10 +0000
Files and hashes: 1: KDCfBX3ad6A_00hrvSAJKYMpmcs.roa (hash: fNL/A2pz+GNUAG3d72o3KDJ4AJqpHRk0BtaNcUYXr/8=)
2: tZvm7lSfM1xyhJennxRBA06FLDU.crl (hash: VLCh1RmQGdKvPtMx+G0DWT55qD3sZ5ShNAzHkmZbzKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:01:2f:31:0b:a2:d9:be:ba:5e:ff:7f:0a:db:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59be6ee549f335c728497a79f1441034e852c35
Validity
Not Before: Apr 16 19:01:10 2025 GMT
Not After : Apr 17 19:01:10 2025 GMT
Subject: CN=ba97c9de48369bc88ca59d92f6d425e31e8480ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:6a:c7:ef:61:2f:ec:9b:5f:93:36:1a:1f:
cc:62:a2:dd:c4:9c:6b:2b:e9:fc:38:10:c8:91:38:
d8:ad:0b:02:48:2b:24:d9:23:56:99:05:32:36:cf:
28:1e:f2:15:35:f7:65:89:2c:01:09:27:90:84:c3:
72:d2:8d:30:6c:49:0e:06:f8:3e:f0:b8:65:63:da:
e5:de:87:4a:72:64:e4:00:17:9b:a1:bf:b4:25:dd:
88:e0:67:0d:4a:3f:95:61:0d:7d:73:b4:43:49:33:
f3:dc:d6:d1:ac:21:52:37:38:a5:52:2d:85:f3:d3:
75:c3:1e:01:64:5b:d6:be:a0:53:3e:2e:70:50:46:
af:db:94:30:e6:6f:cb:2c:a6:9f:48:6e:1c:92:85:
ce:7f:0e:8b:b0:d7:38:34:39:2e:b0:92:a8:48:6c:
c7:12:53:31:60:44:a5:17:b6:76:85:d5:07:82:b9:
4f:14:0e:de:8f:17:8e:05:4f:4e:a5:1b:98:4a:ba:
df:db:db:2b:38:43:26:a3:08:ef:07:c2:1b:b9:55:
f4:59:5d:f6:54:12:da:61:a2:63:47:f9:b1:52:05:
3c:f5:e2:fc:15:e5:62:71:83:7a:5a:6d:7b:82:51:
3d:b1:7a:19:f4:f8:66:96:c0:91:23:ec:28:03:44:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:97:C9:DE:48:36:9B:C8:8C:A5:9D:92:F6:D4:25:E3:1E:84:80:AB
X509v3 Authority Key Identifier:
keyid:B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:5e:ee:75:f6:7d:9e:dc:94:9d:16:9a:d3:85:dd:07:43:f4:
51:ec:f5:6e:7d:6e:ea:0d:9f:f1:c1:dd:75:01:c8:aa:3c:80:
98:11:ab:81:92:1d:f6:16:eb:89:6e:a8:e5:2d:8a:e0:f2:9a:
39:94:2c:39:6a:3c:1f:8d:c7:a4:96:40:f2:53:e3:8b:04:cb:
94:8a:af:76:1a:b0:8c:2b:05:6a:4d:ea:97:69:4c:0a:db:31:
39:43:ee:f9:46:1a:12:63:a9:ad:91:17:3c:f0:90:3c:66:bf:
6f:f4:ea:f9:9d:c3:9d:28:e2:58:0b:34:df:91:38:64:ad:d7:
c0:d3:37:dd:da:63:8b:52:bd:76:06:6e:64:93:38:9a:c2:bb:
1e:e1:5e:3e:97:c5:51:55:8a:6b:e9:93:12:95:ac:fe:a6:2d:
31:8c:08:1f:cf:8b:a5:39:10:d4:ef:54:a2:fe:fc:0f:2a:2e:
0e:b4:bf:87:c1:12:8e:54:54:35:96:59:83:23:9b:d4:1a:28:
6c:fd:fb:8c:c7:71:2e:10:6f:71:f0:ee:3a:f4:78:24:f1:73:
8f:69:f1:8e:cc:bf:7c:9d:5f:cb:46:72:a2:69:20:e4:15:7c:
6c:72:28:67:84:1a:1c:de:29:18:cf:eb:0a:68:cf:0f:07:b6:
50:5c:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:44:07 2025 by rpki-client