Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
File: tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft (raw, json)
Hash identifier: 3furmOXCmLPzZhatCBWGLPuQGkJ1KC5TdN9Lg8PjLgU=
Subject key identifier: CC:A5:BB:EF:6D:E9:3D:96:39:37:DE:4B:B5:00:1D:02:37:AF:5F:BF
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Certificate issuer: /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial: 019655A5676B159D03BA833A91D74E987E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:00:25 +0000
Manifest this update: Mon 21 Apr 2025 00:00:25 +0000
Manifest next update: Tue 22 Apr 2025 00:00:25 +0000
Files and hashes: 1: tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl (hash: lUUm+lJ2nbHZNx5M/o4LlYzCI/HoHFqL3oMVRsA9Cq4=)
2: y75cXyuDLpcYexdmkwYwYU3Mg-w.roa (hash: x/UMSX0QI4HQrUWQqpp/rIJY0lp7ztidnsmz2QLBnXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:67:6b:15:9d:03:ba:83:3a:91:d7:4e:98:7e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
Validity
Not Before: Apr 21 00:00:25 2025 GMT
Not After : Apr 22 00:00:25 2025 GMT
Subject: CN=cca5bbef6de93d963937de4bb5001d0237af5fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:97:74:82:35:75:49:9b:f0:14:74:49:ee:
1f:da:74:e3:d7:79:fb:04:20:3b:12:b7:80:d3:30:
f3:35:ea:c6:e8:96:5c:49:66:f4:c9:79:70:e2:da:
f4:6a:a8:e0:72:16:fd:7c:33:3e:f2:b9:11:86:78:
29:60:4f:50:e5:ea:a6:15:1e:7c:c4:d7:cd:90:8c:
ad:13:2b:59:3f:fa:88:dc:86:59:4c:84:52:9a:8e:
b2:16:55:75:6a:29:6c:b1:5c:45:70:20:90:73:3f:
d5:2d:4d:26:90:30:8e:4d:cb:82:0c:2e:39:41:c2:
f0:a6:0d:45:61:c6:ac:5c:ec:21:69:98:f4:09:43:
79:2b:ca:f2:18:b1:b2:71:f5:c6:12:d8:5e:19:a7:
d8:87:ba:10:6d:d1:9a:0c:2c:a3:f3:81:36:c8:59:
c5:db:be:20:94:4e:19:76:26:fc:2a:c4:d4:da:71:
b5:8d:9d:3e:97:01:fc:e9:77:e6:c3:d5:c1:9c:b4:
7a:7b:f2:be:0c:63:be:01:9c:ff:4b:b2:c7:93:18:
f5:ac:22:67:c0:51:c4:8f:41:9c:1b:0e:23:20:2a:
a3:6a:3a:78:c3:f7:73:0e:6e:6f:0f:27:8b:11:97:
e9:a7:79:8d:6a:18:3c:3f:76:89:96:33:29:64:e5:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A5:BB:EF:6D:E9:3D:96:39:37:DE:4B:B5:00:1D:02:37:AF:5F:BF
X509v3 Authority Key Identifier:
keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e4:09:bc:03:28:09:a3:2e:d8:67:66:03:ac:9b:73:dc:3d:
b8:81:41:db:33:58:f7:f4:8c:6b:a4:1e:69:17:25:fc:32:57:
ab:cf:3d:a4:5b:8c:de:ab:ca:bf:3e:1c:1f:27:41:3a:fe:ce:
e1:51:e6:00:56:1c:44:68:81:9c:50:dc:a7:bc:e9:61:64:54:
92:bd:61:9a:56:6b:64:9e:e5:ca:12:86:c7:4a:53:cf:02:58:
d1:a9:3d:a2:9c:d6:6e:34:f4:a9:cc:f8:d0:01:7e:5b:1f:84:
d5:f7:00:63:e1:5e:02:8f:c7:5a:ed:c6:ee:a2:db:67:89:c2:
73:96:83:02:10:3a:a7:bc:db:20:1a:83:b8:b6:af:b4:b6:ea:
61:be:3f:c5:90:50:5c:f5:ff:ef:52:6a:6c:df:64:1a:92:bd:
3b:44:7e:10:31:9b:fd:ef:08:38:d8:22:37:57:37:96:06:99:
0a:20:6a:33:9a:ea:a7:a3:37:9b:65:81:e0:a5:c1:2a:ee:7d:
2b:e0:ed:ed:23:58:7c:04:a3:fc:5c:96:d8:e5:4d:4c:94:e2:
ea:32:1e:3e:a4:ef:cf:7a:ee:61:83:30:bf:b9:cd:a5:48:16:
07:bf:7e:71:81:a7:09:5c:7d:ec:09:69:27:7b:ad:11:f4:05:
b7:48:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:23:34 2025 by rpki-client