Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
File: tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json)
Hash identifier: AkzVqWR955jq2PtB1ufv6Pi1IEml88KmaKitaeC+fcI=
Subject key identifier: 7A:3D:84:54:D7:A1:DD:02:8F:F8:30:35:8C:19:E3:90:33:32:71:46
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial: 0196586F81FDE7D4941040970E940EDC823E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
Manifest number: 0AEC
Signing time: Mon 21 Apr 2025 13:00:24 +0000
Manifest this update: Mon 21 Apr 2025 13:00:24 +0000
Manifest next update: Tue 22 Apr 2025 13:00:24 +0000
Files and hashes: 1: Y7rbDno7w__NNU8_Y1vybLh8QhU.roa (hash: JcJWoK6XwWQ+PAZZ9rS/dpHArel2kscu87IT6w7P4BM=)
2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: lzmOROHazQ96EiolepGVct5yb7tJFFldrlYUlISjSMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:81:fd:e7:d4:94:10:40:97:0e:94:0e:dc:82:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Validity
Not Before: Apr 21 13:00:24 2025 GMT
Not After : Apr 22 13:00:24 2025 GMT
Subject: CN=7a3d8454d7a1dd028ff830358c19e39033327146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:1b:5b:59:d8:1a:3a:4c:27:e0:50:5d:3c:
61:e9:77:50:3c:af:d9:06:16:62:c4:e1:cc:8d:81:
25:62:3f:83:5c:35:95:95:0a:29:bb:f0:8b:bb:35:
4c:ac:63:81:01:a3:70:82:74:f4:a4:4c:39:03:7e:
69:da:09:10:08:42:1c:51:d9:81:cf:fb:14:cd:c3:
7d:ba:0b:d4:95:9b:e3:0b:e4:0b:5d:da:9d:b8:cd:
c6:cd:d8:8c:4d:85:b9:b8:3d:1e:18:77:18:db:64:
76:c2:8e:7e:a1:ef:3c:8e:25:9f:c4:0f:63:ef:44:
e9:2e:13:aa:8a:ef:bc:df:0c:86:96:8e:04:91:86:
4e:a5:f7:9d:29:dd:7c:c8:17:a0:11:a9:be:ec:de:
76:01:a9:13:91:63:1a:4e:d5:8c:25:ae:da:4f:87:
0c:c2:e4:e1:dd:7c:c1:a5:9c:7d:9c:4c:e3:60:07:
de:5f:ff:70:76:f1:b0:f4:1e:8a:65:12:a9:79:89:
b1:c4:96:d6:d0:8f:29:b1:b3:df:94:f8:0f:28:02:
65:bb:d1:6a:bd:58:13:6e:3b:e8:2f:ed:fb:17:be:
96:77:12:d1:5b:1a:f2:7e:51:16:20:c2:ff:da:22:
ea:bb:f2:9c:6e:3a:a2:3c:38:83:13:1e:78:5c:0b:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3D:84:54:D7:A1:DD:02:8F:F8:30:35:8C:19:E3:90:33:32:71:46
X509v3 Authority Key Identifier:
keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2e:1b:c9:1e:e7:7b:29:de:e0:dd:d5:b3:8f:b9:55:58:53:
7a:40:5c:db:d8:4c:e0:63:14:c6:4c:d2:c2:49:b2:26:fa:76:
f9:89:39:16:ad:d2:ec:13:3c:ff:dc:6a:b5:14:34:cf:8d:13:
57:cc:55:d0:c5:7a:6f:08:92:a5:7d:c6:26:86:4f:93:7a:32:
2a:26:37:7f:db:7a:2b:fd:4e:11:5e:67:3b:7c:5c:28:22:57:
d1:e4:c6:9a:f8:98:72:0f:6b:00:2a:f7:bc:44:a2:39:a7:78:
3a:ef:f6:33:b7:d8:b3:54:e0:2a:bd:52:91:75:b0:4a:d3:e8:
91:96:10:b2:e5:77:fc:e2:df:96:66:bc:05:b1:1c:0b:04:f3:
37:53:9b:3f:56:46:41:48:55:1d:b9:cc:7b:49:1b:42:5a:99:
ac:5f:6a:67:b2:5e:d4:75:30:4f:ad:85:cf:11:64:d6:ec:7e:
dd:41:c6:2e:e6:57:39:02:b7:a2:09:40:73:02:9d:44:b8:30:
28:13:f1:a3:83:cb:80:29:5f:9e:e3:e7:e8:21:d8:78:2b:98:
f6:b6:1b:11:7c:74:ef:05:67:a4:1d:ac:50:e5:46:8f:1a:33:
1f:d0:66:a9:09:ab:bf:15:90:68:e9:a2:d6:35:48:9f:27:cd:
b2:c2:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:07 2025 by rpki-client