Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File: t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier: 24DlM8GQr3rvp8pb1zVzA9RfsvdoYCSB1yYBJer7/AE=
Subject key identifier: 85:12:D0:81:98:83:E9:AB:D6:E7:15:F8:38:42:33:A9:EA:C2:29:91
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial: 0196A1646845584D3E7FCCF5B57F71A76B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number: 0EF1
Signing time: Mon 05 May 2025 17:00:34 +0000
Manifest this update: Mon 05 May 2025 17:00:34 +0000
Manifest next update: Tue 06 May 2025 17:00:34 +0000
Files and hashes: 1: oAZxYtQ4Og3cgsl-3lYamhsa7e4.roa (hash: 3ae/XOyTNvdp+V+oKgkV4BxFv5zwWxKjx15ZyehKjvA=)
2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: gJoPN+vFELxiNMw/kVA2NbAo5HdjE15hlW2ArQ/BOwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:68:45:58:4d:3e:7f:cc:f5:b5:7f:71:a7:6b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
Validity
Not Before: May 5 17:00:34 2025 GMT
Not After : May 6 17:00:34 2025 GMT
Subject: CN=8512d0819883e9abd6e715f8384233a9eac22991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:92:09:52:0f:e0:c7:05:a0:75:0f:47:2d:
67:11:95:d5:3b:ed:f7:a4:4c:61:bf:e8:e5:b9:0a:
1d:73:59:90:75:22:bb:f5:94:a3:cb:95:e1:ae:55:
3e:e0:e3:cf:61:df:66:0b:53:f8:be:0a:f6:05:1a:
d5:fc:14:62:17:56:43:c9:e4:06:00:b4:89:f5:ef:
5c:f5:cd:fc:32:e4:49:79:94:13:90:c0:bb:28:75:
81:14:05:03:f5:e8:00:06:db:a0:d7:78:23:71:ce:
d3:ed:8c:40:05:11:56:2a:0d:59:48:b3:0a:ad:a6:
dd:6b:af:b6:b8:af:c2:97:17:5d:3c:5f:4d:79:4a:
73:90:27:8b:8c:7d:f3:e9:cb:27:b6:87:4b:f4:b7:
3c:82:61:fe:eb:06:e2:c5:2a:a1:87:01:69:6c:b3:
a4:5c:9e:a5:42:e6:10:9c:30:52:c4:eb:d9:3f:00:
b1:6e:15:8d:31:c0:88:20:ec:ef:00:e1:42:ea:7f:
58:cf:4a:ad:3b:39:b3:dd:dc:9c:95:c1:f5:9c:0f:
d1:df:d1:7b:c1:27:72:42:16:72:99:c2:c0:40:72:
c5:75:70:2f:d8:31:09:a5:56:8b:45:2f:4e:81:c5:
a0:1b:0c:3e:cd:dd:e4:b2:3d:db:6a:52:65:cd:40:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:12:D0:81:98:83:E9:AB:D6:E7:15:F8:38:42:33:A9:EA:C2:29:91
X509v3 Authority Key Identifier:
keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3e:f0:23:7f:cf:94:16:6b:b6:26:f2:4f:49:97:85:a0:a4:
05:32:d2:47:25:91:92:84:80:81:25:8a:8f:dc:09:d5:4c:d1:
8b:f6:5e:f6:84:d1:92:35:db:8a:ca:a0:bd:82:01:53:8b:38:
f8:62:d3:ef:d8:87:1e:88:6e:6c:a2:6c:12:93:21:5f:43:b4:
19:99:71:70:96:f9:8e:82:ea:30:18:8b:b1:a2:ab:6a:a0:aa:
fd:bb:e7:a6:ce:cc:a4:e4:f9:6e:95:65:f6:82:70:9d:52:22:
ed:d5:41:54:47:2e:90:d4:e7:8b:94:28:33:a9:25:8e:44:dc:
9a:7a:f2:a0:24:a8:4d:55:e1:aa:33:e2:9b:4e:08:67:c6:a1:
cb:de:10:0f:2a:63:32:a9:ef:ad:d0:53:d0:3b:92:d1:d1:26:
64:b7:c7:17:b8:36:27:ae:d0:0f:3a:8d:e8:e1:00:02:b1:a0:
4d:5f:ba:57:56:25:89:01:57:d4:07:a1:57:99:12:27:78:5d:
1a:10:1e:c7:06:ab:8c:16:32:90:22:e8:cd:44:02:3e:56:96:
d3:3c:e4:82:44:42:82:a8:c7:39:28:88:bd:7e:39:d9:6f:e2:
19:2a:04:03:63:a8:2b:26:0c:46:b2:36:18:b4:2e:81:a9:01:
1d:c7:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:59:05 2025 by rpki-client