Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: vMNSGpQU5SJ8QnAUMDq/V1ctDdGbfaVXma8kF2kQWo0=
Subject key identifier: 25:1E:2E:1B:B6:5B:83:DE:04:55:39:57:0F:09:81:46:08:06:35:7D
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 0196225D387A8052B8A0BF636F3212024171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 14E5
Signing time: Fri 11 Apr 2025 01:00:56 +0000
Manifest this update: Fri 11 Apr 2025 01:00:56 +0000
Manifest next update: Sat 12 Apr 2025 01:00:56 +0000
Files and hashes: 1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
2: NNbGYKZN2MczsbLVZDvW2hdl718.roa (hash: 4E2t0fTnEc7nZVPHCni1To4F2fDuKI/+fcnfWn1WYJA=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: 4YyhtlqodFss/PPF8lhZCEXdIyZgAoNr4C7xOflR7X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:22:5d:38:7a:80:52:b8:a0:bf:63:6f:32:12:02:41:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Apr 11 01:00:56 2025 GMT
Not After : Apr 12 01:00:56 2025 GMT
Subject: CN=251e2e1bb65b83de045539570f0981460806357d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:67:74:e9:77:59:e8:e4:a3:2d:58:5c:59:
6e:c8:89:ef:50:04:59:62:90:90:aa:37:aa:3a:f2:
ab:d0:3b:a2:b9:3f:a4:98:76:77:4a:f3:ad:b5:e2:
40:80:1e:4d:6c:e8:76:13:e6:80:fe:6b:63:d8:2f:
96:d8:fa:8a:ad:ab:cd:7d:5f:7e:c0:71:ba:21:14:
c5:29:9b:3b:db:34:44:d8:1f:92:05:85:c9:4d:11:
c8:7c:c3:3f:e5:47:9c:84:3f:0c:66:de:07:08:89:
af:02:94:92:81:9c:c6:81:e6:28:7f:b6:eb:ed:3d:
76:d9:9a:3c:bf:18:a1:6f:4c:92:60:60:94:c9:0d:
b3:35:95:c1:fd:f4:7a:ce:72:5e:6b:a0:f4:28:95:
eb:d3:04:a2:5a:d3:b7:63:a2:f7:34:2b:f4:bd:d3:
db:7e:7c:1f:22:8c:94:7e:39:0e:c1:c2:41:d3:8c:
dc:eb:e9:1b:83:c8:8d:24:b9:2f:1f:4a:6a:f6:c9:
b0:15:4f:eb:19:bc:a7:ce:e7:2c:e3:2b:bd:bd:e7:
0f:4f:13:01:ad:bc:e5:b7:a8:1b:e6:55:9f:4f:65:
a1:bf:ea:14:02:61:27:2e:fa:59:c2:9b:b2:ef:bc:
4c:33:b7:dd:bd:24:16:63:30:4e:cc:0c:76:02:dd:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1E:2E:1B:B6:5B:83:DE:04:55:39:57:0F:09:81:46:08:06:35:7D
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:58:f4:96:da:4f:7e:45:15:7a:9d:8e:7e:3b:b9:e2:13:b1:
be:2f:ba:50:d8:35:9d:b8:82:ef:25:6a:7c:ba:9f:32:f4:7e:
7d:fb:24:04:c2:8c:49:1b:50:9f:f2:a4:42:40:ca:b9:57:59:
2d:7b:6f:62:a6:8c:3f:69:f7:8b:44:54:c9:0f:5f:d7:22:16:
8c:6e:a1:57:96:18:0f:27:e5:26:2c:7b:8d:fd:b4:cc:ca:30:
18:d2:f9:8b:28:67:73:03:c0:d7:16:7e:c2:78:12:0c:d1:88:
4c:0c:9a:3d:93:a5:94:8a:59:44:c7:09:d1:3c:db:cb:3d:8c:
62:2b:e2:7a:a8:ba:f5:be:d1:7d:34:49:b9:0a:48:59:b3:b6:
a3:11:43:df:24:0a:4f:ad:2c:ff:5d:09:41:12:f8:be:23:3e:
b8:bf:ee:1c:54:5a:7e:d1:f6:63:2c:24:1b:1a:ba:6c:92:4e:
9b:25:f7:ec:16:06:d0:fd:f9:df:f2:1c:7d:91:56:39:56:82:
7d:fd:c3:cf:db:24:79:90:44:1e:54:aa:f5:fb:49:59:0d:ae:
56:d5:57:40:ab:d9:68:2d:89:1a:83:47:6c:f6:dc:17:43:c2:
28:db:69:c5:c8:a2:79:40:ba:8b:27:02:27:1e:fd:f0:d2:3b:
8e:02:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:25:45 2025 by rpki-client