Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: dBOojmlIGBWZgzWn8JHBeDhrYtOXvKIXYknHzpv9wbw=
Subject key identifier: 8A:6A:16:83:EA:AC:CE:65:DB:EB:6B:CA:0D:CE:54:89:E7:40:2A:6B
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 0196410C136560231307991E729373526F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 1186
Signing time: Thu 17 Apr 2025 00:00:32 +0000
Manifest this update: Thu 17 Apr 2025 00:00:32 +0000
Manifest next update: Fri 18 Apr 2025 00:00:32 +0000
Files and hashes: 1: Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa (hash: 1/urxUwqVm4ILEtV4SR7woJSlB4+PTBY3yo3Lt2enUw=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: GZXDik+p9jCeltOtdgTGQXgS2rXlU027VdvrEFNw2Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:0c:13:65:60:23:13:07:99:1e:72:93:73:52:6f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Apr 17 00:00:32 2025 GMT
Not After : Apr 18 00:00:32 2025 GMT
Subject: CN=8a6a1683eaacce65dbeb6bca0dce5489e7402a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:47:1a:f4:71:e2:48:3e:97:2c:0b:1a:e0:
8f:c6:88:00:a7:74:de:c0:ec:34:e8:85:8d:04:4b:
f9:ae:b3:cc:43:9e:3a:ea:09:8f:ce:c4:c7:a6:48:
98:49:d8:70:29:8f:ef:a8:ae:e4:a7:5b:e5:45:6b:
ae:8a:80:01:ef:62:e0:60:29:4e:59:15:ea:b2:3f:
f3:ad:24:5f:c7:d5:50:66:30:f7:5c:0e:e7:a5:61:
7e:03:e6:db:82:2e:0e:61:a2:47:ae:ed:2d:3b:6f:
34:3e:a3:c7:cb:7d:58:e0:29:cc:ba:e9:78:f6:c1:
3d:5b:36:e7:34:08:37:b5:d1:b8:77:5e:72:08:06:
69:2e:b9:6b:03:61:45:19:8f:01:a9:79:16:11:93:
3f:ef:09:ec:57:0d:cc:99:24:f4:59:e8:6a:7a:1b:
c0:20:e6:dc:73:0c:96:37:72:b7:33:85:5c:99:41:
4a:97:1e:31:84:35:f9:7d:e3:f2:80:81:04:5b:34:
7a:bb:44:94:58:bd:b5:8d:d5:0a:ce:d4:3d:21:6c:
a3:29:6b:86:78:b0:37:a3:be:f6:6f:4f:3d:35:ce:
29:b8:cf:c1:13:85:0c:18:30:df:65:0b:78:b3:d9:
09:8f:a5:55:ca:da:50:fc:f6:3f:15:b5:4e:bd:32:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6A:16:83:EA:AC:CE:65:DB:EB:6B:CA:0D:CE:54:89:E7:40:2A:6B
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:30:8f:08:6c:c9:29:00:fa:e8:ea:0f:4a:48:71:bf:17:49:
00:d5:33:ee:75:dd:28:26:69:f3:35:19:0f:43:c6:10:78:20:
8f:7b:38:33:0d:43:ea:0a:99:71:86:69:55:52:1a:e6:92:ec:
f0:29:b3:1e:06:52:40:55:81:d9:37:4b:a6:da:a1:9f:76:ae:
05:cc:6a:3d:84:6a:77:75:31:d4:cf:e6:f5:4e:84:8f:dc:91:
12:67:c3:4c:24:a5:72:56:8c:88:c9:d9:8d:44:c4:2e:fd:8d:
08:73:7b:77:0f:80:91:d2:77:48:07:50:73:74:31:b3:3f:84:
b7:7e:df:f6:22:0e:57:1e:b9:47:e3:72:f7:2a:16:60:15:dd:
d4:1e:1b:27:af:32:19:d0:31:75:f5:49:5f:b4:d4:57:72:55:
e8:21:36:dc:98:84:e5:2c:71:d0:2f:28:88:3a:ce:bd:69:65:
00:87:d6:ec:96:9b:61:be:f6:fb:c4:5a:2a:77:7b:13:33:b3:
0a:ca:32:ef:7b:db:e0:73:30:a4:ec:0f:96:8f:fe:fc:d2:06:
5a:71:a2:f7:3a:90:1a:b4:5b:08:f1:c4:9c:f8:a9:d3:c4:23:
d6:dc:20:95:60:ec:f6:11:26:d7:3e:cb:8a:87:a4:36:09:f1:
a1:87:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:05:33 2025 by rpki-client