Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
File: Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft (raw, json)
Hash identifier: M+nH2r0ecv7pG1Av4kRmw3VND+5/MI/idfMTFiWAYVU=
Subject key identifier: 62:34:D1:85:72:A8:9B:67:43:5A:D3:30:21:A7:87:29:55:0A:8D:39
Authority key identifier: 4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
Certificate issuer: /CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Certificate serial: 0196BA11E48114A8446A8955669A6CC43718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
Manifest number: 120F
Signing time: Sat 10 May 2025 12:00:56 +0000
Manifest this update: Sat 10 May 2025 12:00:56 +0000
Manifest next update: Sun 11 May 2025 12:00:56 +0000
Files and hashes: 1: Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl (hash: 3TcMGvm3iYCOuskwQFL1vbfG+NCsTa/6suVI56xi/MI=)
2: fQVuwKT50hbkCaxxsedkAc4v4DM.roa (hash: 7+f7vmuufbnUl5kubA16fvBKejBnvUX170UQ3Kwi8yM=)
3: yI_RXXqJUefuh1flF2oTn9wC4DI.roa (hash: j2h6Y5w4TEDmVG2v4OM8fOFhUfhpchqy4oEvpRV83t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:e4:81:14:a8:44:6a:89:55:66:9a:6c:c4:37:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Validity
Not Before: May 10 12:00:56 2025 GMT
Not After : May 11 12:00:56 2025 GMT
Subject: CN=6234d18572a89b67435ad33021a78729550a8d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:c0:ea:0d:2a:82:77:0f:48:31:4a:07:1c:
0b:33:4b:e7:da:79:0a:4e:bf:19:8b:00:a9:4e:b7:
5f:54:ef:80:3a:8a:d5:15:6d:01:cc:2b:6d:42:35:
1b:1a:c5:6d:7c:f3:33:61:b5:9e:e7:e7:c3:43:f9:
b6:e2:5b:45:8e:dd:04:7b:20:e2:07:c5:b8:02:53:
6c:14:02:43:99:be:54:f7:4c:3f:8d:3e:fd:4d:1f:
81:87:d9:99:47:60:ab:c9:fd:5c:d0:19:2a:7b:fd:
53:de:76:dd:92:cf:ef:41:d1:ca:b4:01:d4:8d:fc:
c2:2c:98:79:9d:e3:30:31:fe:b2:44:06:08:06:bd:
d0:ee:b7:a4:39:e8:3d:ce:95:7f:8a:37:67:6f:1e:
a4:d7:37:a2:20:da:55:88:47:4e:ba:aa:f4:0e:82:
29:7e:5d:da:37:88:51:60:bc:9d:f9:63:1e:73:5c:
59:f1:dd:21:08:02:8c:ca:79:3b:d4:18:8d:63:25:
78:e6:5f:8c:bf:6e:6f:e5:77:23:a3:d6:a8:12:d4:
1e:1d:e5:18:f1:d6:38:07:d3:dd:b0:5c:e2:3c:ff:
c6:5e:0c:ca:a3:5e:a8:24:f8:75:c8:05:76:a1:1a:
80:93:bf:31:a1:ff:e9:fc:98:f4:97:0e:f1:aa:f5:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:34:D1:85:72:A8:9B:67:43:5A:D3:30:21:A7:87:29:55:0A:8D:39
X509v3 Authority Key Identifier:
keyid:4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2f:6e:21:ca:f8:3e:2a:8b:41:e8:c8:cf:c9:66:dc:8e:b1:
8c:6b:7f:ef:86:c4:72:4d:97:24:d3:ee:01:c2:84:ff:80:59:
17:24:7d:48:2c:c7:cb:cc:fc:5d:fe:d7:0c:e9:98:4c:a7:97:
6e:85:2c:d0:e9:b8:8a:20:93:bb:7c:c7:1d:a7:a2:ab:aa:8b:
66:8a:5a:80:fd:6a:03:21:11:39:fc:01:cd:2c:24:66:27:4d:
f6:f5:cf:5f:78:27:b3:4a:a8:51:6f:a9:ef:e5:f7:3c:9e:18:
3b:b3:84:06:73:17:3a:6a:d2:df:4b:ce:65:c5:2a:81:7a:03:
e8:0d:50:d7:e4:46:b7:8c:63:9d:10:0b:e6:b5:ff:cd:02:13:
50:9a:5d:39:10:c4:14:be:c8:28:df:5a:59:85:1a:59:8f:f0:
6b:a3:4c:60:e7:08:f8:03:04:eb:87:4f:a9:21:d9:72:a0:c8:
c5:3f:81:87:f3:b0:ae:26:4f:0f:17:cc:a5:5d:b5:f0:3e:24:
00:d9:b4:97:a3:2e:69:25:59:e1:88:71:14:c8:09:6b:cb:af:
96:ef:ba:db:8d:0d:9b:a6:6e:44:ee:46:b0:4b:38:07:6b:40:
14:2a:0a:41:01:d7:9f:2c:d4:0a:dc:f1:32:b2:05:3c:38:f2:
22:73:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:00:39 2025 by rpki-client