Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
File: tpHQC9tiauVzB9XNTord2UdWgLM.mft (raw, json)
Hash identifier: KJMNrB1jnPAcfo9J4l1F3+wEjagsmSKWnNw0BOxiQnA=
Subject key identifier: 7C:CC:48:37:B6:37:9B:DB:CE:7B:AB:74:42:79:E1:49:FC:45:18:FC
Authority key identifier: B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
Certificate issuer: /CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Certificate serial: 0196AB0C22E650B0478D9B644AD36D16487B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
Manifest number: 0DFE
Signing time: Wed 07 May 2025 14:00:21 +0000
Manifest this update: Wed 07 May 2025 14:00:21 +0000
Manifest next update: Thu 08 May 2025 14:00:21 +0000
Files and hashes: 1: AQvnwjdpCCJVGghqg0nwe9L0mVk.roa (hash: lmMkrxQHgFH9/tCkdiNxxBNSfZZ+AeKUjyZG6YnOW/4=)
2: tpHQC9tiauVzB9XNTord2UdWgLM.crl (hash: 0RHUe3FYv1DVerBTsOiEl+92tv3bCbtN//c/pRwnKCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:22:e6:50:b0:47:8d:9b:64:4a:d3:6d:16:48:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Validity
Not Before: May 7 14:00:21 2025 GMT
Not After : May 8 14:00:21 2025 GMT
Subject: CN=7ccc4837b6379bdbce7bab744279e149fc4518fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:88:66:aa:54:b4:63:93:2a:2a:73:77:c7:
e7:74:04:97:97:64:8e:b8:89:1f:5f:56:d9:9c:f2:
c8:2b:e0:45:a0:a4:0d:6c:f6:c1:a7:63:7d:4f:fb:
2c:a1:aa:1c:cf:86:2d:82:d8:70:02:12:d3:e9:c5:
8a:c8:6e:aa:70:fa:dd:36:f4:29:b4:df:32:0f:b5:
5d:94:5e:7a:1f:a5:54:45:57:62:ab:aa:35:45:17:
c9:5d:d1:d7:0c:70:fd:de:8f:2d:b1:c2:e9:cd:28:
3e:ae:0f:28:b5:e9:01:87:7e:2d:19:03:81:02:a0:
14:ef:7a:92:01:b0:56:1e:59:e3:d3:8d:8c:8c:06:
0b:a9:f2:99:b0:84:95:6c:a6:c6:1a:a7:8e:26:e3:
8b:b8:ca:15:96:36:ca:f1:9c:b0:f0:a3:2a:1e:80:
ec:cf:d5:bf:d0:ad:7b:64:24:67:f8:b6:51:45:f4:
66:76:2b:00:88:97:0e:bf:b2:b0:07:0d:69:3b:35:
db:14:09:c2:28:62:2b:dd:e3:02:00:76:eb:ce:d7:
89:cc:17:7a:6a:a8:b7:9a:17:e6:8c:b0:a5:66:e7:
4e:e0:2b:6c:75:8f:dc:25:64:a4:a7:2f:3b:4a:4e:
1f:0e:0d:6e:06:ef:af:3f:f5:03:fe:22:50:fc:77:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:48:37:B6:37:9B:DB:CE:7B:AB:74:42:79:E1:49:FC:45:18:FC
X509v3 Authority Key Identifier:
keyid:B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b0:80:8b:85:4e:8a:22:69:12:38:5f:a6:81:82:27:38:6a:
ca:75:7e:2c:ce:fb:e8:5c:91:c0:cf:41:75:c5:58:30:ca:4b:
76:0a:9f:4f:2b:f5:c1:5c:2a:1c:98:8b:e3:68:c7:67:ab:6e:
8f:ac:b1:7e:6f:d3:66:fb:0c:e9:f4:42:27:23:ab:e6:4f:e1:
c6:5a:eb:1b:a6:02:fe:ea:5e:01:2d:2e:53:26:53:47:6b:a4:
50:57:31:84:a9:21:4e:c9:a3:a1:47:0f:5b:fb:8a:fc:0d:5a:
1d:0d:5c:e7:45:7e:73:7f:c8:45:5a:dc:b8:e6:21:07:7e:35:
89:3e:4b:e9:c5:54:91:d2:36:4a:04:78:10:2f:ad:fa:86:59:
25:66:cd:37:48:53:c2:12:b8:f8:ab:18:dc:2d:31:d4:6f:f2:
61:e6:24:5a:dd:0a:03:bd:41:b2:98:8e:9d:59:b0:a3:66:62:
e0:3c:52:0e:5f:f9:d1:ae:b1:71:c1:a0:08:f8:e0:4b:af:66:
8e:cb:68:42:bc:e2:fe:6e:4e:16:7d:c8:f4:23:9e:87:58:20:
3f:3d:98:8b:45:78:b3:3d:d8:d8:ae:95:33:c8:33:8f:ff:c3:
97:b3:cd:7f:df:ba:b5:ce:4a:d9:90:2f:dc:3c:20:d3:77:05:
32:ef:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:52:54 2025 by rpki-client