Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier: OFjHTQsiYUZiyM/mRHbz5SUjb9m6e9s4HRESsbnp9iw=
Subject key identifier: C8:E0:86:3A:76:B1:0B:6D:15:83:A6:54:26:43:ED:93:CC:6B:B5:8C
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial: 0196A954B72B04FD7DA7BC38F6B3AC94E646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 06:00:23 +0000
Manifest this update: Wed 07 May 2025 06:00:23 +0000
Manifest next update: Thu 08 May 2025 06:00:23 +0000
Files and hashes: 1: iRWK7zhmEqe5kSfNzw4pTeBGjvE.roa (hash: x9g5RUDfgJ6Mixu1OZfai6p4BgXIl99taX8ijSdqumo=)
2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: Hto6fVCQawYjlDGHcn9S7MGdlXBw2bHS2Af0pc8rYXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:b7:2b:04:fd:7d:a7:bc:38:f6:b3:ac:94:e6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Validity
Not Before: May 7 06:00:23 2025 GMT
Not After : May 8 06:00:23 2025 GMT
Subject: CN=c8e0863a76b10b6d1583a6542643ed93cc6bb58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:05:e3:c6:19:ad:18:f5:3d:dd:cb:10:0d:
ac:07:e7:40:91:a8:b5:4f:b2:f9:ab:e7:be:56:ee:
82:14:ed:56:29:b1:aa:df:c3:ed:c2:b9:93:c7:de:
c7:b0:97:78:2d:1a:d4:c8:4c:18:2e:00:5b:84:a2:
6e:73:b0:49:3d:cb:b9:51:a4:69:be:2b:4d:f9:01:
fe:25:78:5d:d8:8e:8e:ed:a9:bf:42:65:9e:ee:97:
93:77:f4:04:00:f2:a7:24:81:46:e3:1a:3a:40:a6:
dd:b2:19:63:d8:d6:44:78:0c:4e:cd:aa:b8:a2:e2:
70:23:df:7d:7e:49:6a:fa:96:5a:d5:2b:bd:a2:fd:
dd:a3:e0:28:cb:fe:08:59:ff:b4:2b:48:d8:d5:6d:
fa:70:e6:07:9a:48:6c:d2:a0:cf:b0:e5:90:75:02:
b1:1e:45:15:c2:ed:72:88:25:63:15:e6:54:6f:fc:
40:a3:0e:bb:40:bc:bd:3f:a9:92:6a:c5:ce:53:7c:
79:6a:a3:5c:32:f0:9b:1d:75:30:2b:db:94:b6:de:
fd:58:b5:c1:0f:43:69:db:2b:b2:93:2b:d9:0b:e4:
f1:d0:83:ba:11:fc:f2:1e:09:93:63:9d:0b:01:8c:
1b:ca:26:e2:ef:08:85:7f:81:f1:1f:ee:7f:04:86:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E0:86:3A:76:B1:0B:6D:15:83:A6:54:26:43:ED:93:CC:6B:B5:8C
X509v3 Authority Key Identifier:
keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:87:e7:5b:2f:46:cf:60:dc:0c:4d:a6:b6:d1:e9:dc:7e:33:
29:b0:c7:cb:d3:25:24:8e:dc:79:f6:63:27:e1:23:26:df:80:
90:c9:26:9f:40:95:20:49:ee:43:aa:d4:8e:9b:4c:e4:c0:b7:
1f:dd:d3:44:f4:05:a2:8e:df:6b:a6:91:df:3e:b8:37:dc:2c:
00:f4:0a:5c:2a:d2:f3:b5:59:37:50:40:99:6f:78:6a:ab:c1:
79:c8:c2:76:b9:66:78:06:c3:79:72:24:0f:46:80:2a:9a:47:
a9:6c:07:00:d5:75:5c:83:1a:10:33:31:9e:f3:82:f5:08:11:
c6:38:61:df:a8:82:36:68:2c:a8:ed:39:a4:67:11:73:7a:21:
b8:77:68:b4:7a:19:ac:eb:00:a7:ec:82:a9:d6:16:88:72:98:
83:24:f9:ae:91:b1:44:22:96:eb:c1:77:4b:6f:2e:55:5f:28:
7c:c8:33:1c:c5:85:be:df:2d:c3:b0:af:b8:b7:db:19:00:b9:
94:fb:45:bb:b8:0f:54:9a:0b:5b:20:35:84:44:85:48:c5:2f:
54:1b:8f:f1:af:f4:8a:98:a5:b2:cc:41:90:d1:13:f4:c8:c6:
48:a1:68:a6:47:32:20:3e:4a:12:88:15:da:d4:86:88:49:a9:
d1:a8:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:33:54 2025 by rpki-client