Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File: tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier: NGqFUVMeVabp3ukAfMocImXQ+dQbTUyfjqOByJRA7bM=
Subject key identifier: 11:73:E2:9B:94:32:18:A5:10:78:CF:B6:E8:B6:13:58:F7:3B:2F:F2
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial: 01974A7A6688FA22447062C5DEABDBDB2CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number: 0E1B
Signing time: Sat 07 Jun 2025 13:00:24 +0000
Manifest this update: Sat 07 Jun 2025 13:00:24 +0000
Manifest next update: Sun 08 Jun 2025 13:00:24 +0000
Files and hashes: 1: AoPTcwy6H2m6XsU7z7Y2AN7ROE0.roa (hash: EkcAF/FP1ByxQSttbvF051kXzqctUYj/EMjpBXkG1v8=)
2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: Qo0z755Dt/+Ke37x5LAduDjq97zXU85gegl9ziSyVPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:66:88:fa:22:44:70:62:c5:de:ab:db:db:2c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Validity
Not Before: Jun 7 13:00:24 2025 GMT
Not After : Jun 8 13:00:24 2025 GMT
Subject: CN=1173e29b943218a51078cfb6e8b61358f73b2ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:92:85:35:00:28:ef:c4:bc:ec:dd:14:ba:
ce:92:c8:77:45:7c:f7:06:91:15:84:0d:4d:89:88:
30:15:9c:8c:3f:b9:a9:40:b6:3b:5c:31:14:67:99:
9c:38:3c:f7:2d:67:ca:f8:c3:b1:8a:8c:38:00:9f:
26:f2:08:3f:b7:4e:49:c1:db:f3:29:12:28:0a:fb:
6f:9b:ce:a4:66:c5:f0:90:fc:8f:11:88:4d:34:42:
31:6a:53:e5:f1:fb:1e:32:69:74:d2:09:f1:ee:b5:
26:11:0e:9c:21:85:d4:f8:f1:f5:74:c2:fd:10:08:
88:7c:ff:e8:08:9a:e1:0f:ed:bd:0f:56:4f:81:07:
bd:da:c8:92:30:80:0e:11:37:2e:fd:c7:dc:7f:d3:
0b:7e:8c:bb:ca:a5:60:94:48:3d:ae:54:ec:9c:b7:
75:43:29:44:59:10:7d:7d:93:1b:2a:0c:45:2b:06:
60:6a:7e:47:07:65:0c:b5:04:ac:65:33:3d:69:bc:
06:ef:f1:1b:74:ba:df:04:2c:cd:02:4c:e4:34:69:
4a:59:9e:b9:aa:97:30:9d:15:d4:c5:2c:09:c6:22:
fe:50:7f:5e:39:b9:14:9c:11:99:31:28:24:a4:b0:
c8:04:d2:fd:3e:c5:bd:1d:01:40:63:d4:bf:51:b0:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:73:E2:9B:94:32:18:A5:10:78:CF:B6:E8:B6:13:58:F7:3B:2F:F2
X509v3 Authority Key Identifier:
keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bd:00:8c:a7:93:2c:f5:9e:08:ac:e9:78:4d:d8:43:a5:d4:
8b:3a:22:5c:df:82:f4:5c:e5:08:66:bf:e3:7d:ee:b3:07:2c:
d4:80:bb:c4:d2:6e:00:2d:70:80:88:e4:5e:cf:c9:ad:11:90:
eb:b5:9c:5a:8b:e2:f4:10:11:99:0f:ed:20:46:81:be:70:e8:
d0:2c:03:87:c9:e3:6e:d7:50:92:a7:4d:3e:ba:5c:06:b0:88:
89:7c:e2:6e:00:30:9b:cb:7d:0b:f2:a1:6e:5c:bc:1f:fb:43:
ec:6b:c9:fc:c9:ba:15:fa:b9:99:8d:2f:67:71:4f:6c:85:84:
1d:ca:05:63:1e:1b:8a:0d:a7:b2:48:ff:86:4e:34:04:24:bf:
df:ac:b3:d9:a6:ea:28:6f:8d:db:21:3a:d8:f2:4e:f3:44:90:
71:16:48:55:62:21:cb:0e:25:98:16:90:ec:6f:ab:cc:d6:cf:
36:8e:d5:1f:cc:bd:4b:c1:eb:ae:86:09:b0:76:87:db:57:ae:
3b:9d:64:e2:f9:7b:08:2b:ac:34:ee:20:00:b0:cc:ff:2c:c4:
17:6d:91:cd:3e:8e:e1:bd:47:62:00:a1:00:3e:9e:b5:bf:66:
ef:31:78:7e:60:86:17:8d:8b:83:60:a0:76:6e:0a:0a:c4:44:
0a:8e:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:11 2025 by rpki-client