Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: UAhn46Un7x413O9BXy+Grd4HrwuzxLuZ+c94KJr8LiI=
Subject key identifier: A9:A0:4D:94:EC:8A:24:85:AE:06:90:2A:89:06:2B:67:91:7E:1C:2B
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 0196A352D2CFF034A255E4D53E45E1D307A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 4C
Signing time: Tue 06 May 2025 02:00:36 +0000
Manifest this update: Tue 06 May 2025 02:00:36 +0000
Manifest next update: Wed 07 May 2025 02:00:36 +0000
Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=)
2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: AcvCr8pxNPZRplXNXgftMZg/dnkTtg/PBbl70miDyNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:d2:cf:f0:34:a2:55:e4:d5:3e:45:e1:d3:07:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: May 6 02:00:36 2025 GMT
Not After : May 7 02:00:36 2025 GMT
Subject: CN=a9a04d94ec8a2485ae06902a89062b67917e1c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:dc:a9:54:0d:98:15:75:8d:77:a3:d2:d5:
e3:be:47:b3:37:34:63:e3:31:c4:1c:84:77:f2:76:
50:b9:f2:0f:5f:27:72:ae:fc:83:18:71:b9:e7:c3:
4f:57:ec:31:80:19:4d:58:73:c9:48:ef:4b:d0:01:
43:c8:68:76:5e:ea:69:d5:90:e9:4e:ea:b9:3b:93:
27:fb:0f:66:05:1a:bc:6b:7e:d7:62:7b:cb:da:b3:
5c:67:c0:32:2f:58:6c:90:b3:2a:ca:14:21:bf:ff:
24:e6:cb:c3:ec:a9:d5:6b:61:8b:9d:66:67:7c:c9:
3c:aa:b6:a0:57:68:ca:8b:f8:4f:49:8c:07:88:a2:
ff:bf:a9:5b:13:9c:f9:7c:0b:09:b4:ba:8d:1b:86:
29:69:c2:87:68:98:6d:92:b9:fd:cf:61:ea:f8:24:
f6:1b:bc:76:39:d9:e2:6d:39:2c:17:e8:78:65:1d:
11:64:0b:76:9d:29:c2:45:08:07:b3:d2:cd:fb:c9:
cc:62:c4:62:86:0e:be:b0:ca:f5:af:1f:c2:1f:bc:
e1:5c:e3:4d:e2:44:21:1d:28:30:1d:12:91:81:d1:
25:45:24:8c:59:48:d0:d7:dd:0c:42:4b:2b:b0:15:
9d:7c:83:a5:61:75:7a:26:be:62:07:9e:18:c8:7b:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:4D:94:EC:8A:24:85:AE:06:90:2A:89:06:2B:67:91:7E:1C:2B
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8f:7d:80:1e:16:a2:e8:e9:74:c3:cc:50:82:41:8a:b8:3e:
2d:de:36:bf:6e:41:a2:08:63:97:36:25:fb:67:29:4e:9f:18:
77:8d:1a:76:97:c2:45:26:cf:77:ce:db:45:4a:13:7b:e2:e6:
16:df:fc:cb:80:40:37:bb:62:d1:a0:46:80:52:b1:80:a7:31:
bc:e0:f1:82:d9:cc:b0:41:1d:15:be:6f:e4:b2:6b:17:ff:17:
c9:c5:84:96:81:a4:30:10:d4:5f:95:2c:78:05:00:46:3c:ba:
c3:0a:1c:6d:89:65:25:2e:bb:d4:c5:61:a8:c4:50:e7:ce:2e:
ff:d9:76:cb:8f:4b:de:dc:3c:3c:8f:11:45:1a:e4:2a:23:b8:
06:43:fc:a7:f2:ad:1d:09:60:3d:e5:0f:be:d4:22:07:ac:ec:
81:8c:fe:ae:3b:65:29:d3:1c:a7:3c:e7:33:b6:b6:29:37:a7:
30:3a:d7:e8:c3:19:1c:50:94:32:2c:fd:e2:bf:2f:00:4b:0f:
44:bb:a4:f8:00:ee:11:1f:2a:0e:f1:db:58:26:f2:ad:8e:b0:
dd:99:7c:4b:95:c1:87:5f:64:eb:e0:b3:7c:4a:41:3f:25:d0:
50:2a:48:52:0e:cc:06:c5:32:49:88:b6:29:4a:b1:17:64:42:
42:29:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:21:01 2025 by rpki-client