Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json)
Hash identifier: edxwTN95nPL1vZ9lG/gEDTHULcdKb+HV3B1zChj3sqk=
Subject key identifier: 5B:37:AE:0F:F3:5D:E2:A6:38:31:BB:A9:94:00:FD:02:EA:6B:1B:70
Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Certificate serial: 0196A16503578539DFB38F387C35CFFD9634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
Manifest number: 1227
Signing time: Mon 05 May 2025 17:01:13 +0000
Manifest this update: Mon 05 May 2025 17:01:13 +0000
Manifest next update: Tue 06 May 2025 17:01:13 +0000
Files and hashes: 1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=)
2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: /o34O9jA9Mmcjh7n9U0t6hsog5B6c9LhNLs5SQlJzLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:65:03:57:85:39:df:b3:8f:38:7c:35:cf:fd:96:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Validity
Not Before: May 5 17:01:13 2025 GMT
Not After : May 6 17:01:13 2025 GMT
Subject: CN=5b37ae0ff35de2a63831bba99400fd02ea6b1b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:f0:ef:d7:45:e1:e8:42:59:98:59:b8:20:
58:4e:25:f2:e2:c5:b5:87:09:3b:e1:2a:ae:ed:21:
ec:ae:51:8b:1e:ab:49:01:24:ce:35:37:8c:7b:0e:
7d:73:f3:4f:99:e0:13:93:6e:34:e6:0c:bc:0f:2a:
4d:82:97:d3:04:97:e0:b7:22:58:94:37:26:b9:a0:
bc:3b:ce:74:3f:bc:8f:fc:25:68:c3:b0:50:c9:e4:
f8:13:0d:75:54:ba:81:82:ec:26:d4:95:ad:c2:98:
99:8a:07:b9:07:9a:2a:95:63:29:8b:71:41:93:4e:
b9:48:f2:78:77:f0:13:31:cc:7d:97:78:c0:54:38:
c7:f2:27:7c:ec:4b:1a:c3:95:30:7e:14:2e:76:14:
be:41:74:47:2f:a5:43:db:79:a9:df:47:56:c2:53:
3e:13:2a:87:e7:e6:5a:19:f1:d4:68:14:93:ad:e4:
ff:4b:b4:e8:33:be:a1:44:1c:06:a2:50:5a:98:7d:
3e:b6:83:00:ea:e5:2d:3b:e4:d3:4f:41:81:97:ba:
76:bf:d6:23:7d:3e:fb:53:a4:f0:58:0d:b0:37:75:
f6:a1:b9:e0:d5:21:3b:3a:1e:6b:b5:3a:b1:bc:86:
00:3c:f3:af:a6:0b:f1:00:e4:b1:86:33:53:d3:1e:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:37:AE:0F:F3:5D:E2:A6:38:31:BB:A9:94:00:FD:02:EA:6B:1B:70
X509v3 Authority Key Identifier:
keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3e:61:1b:88:46:88:d7:51:d5:ed:7c:b5:43:90:e2:0a:e6:
bf:98:2a:fc:9f:c1:21:5e:13:9a:3b:4b:a8:37:f4:28:c5:d4:
0f:c2:31:11:fb:97:49:4f:9f:ad:fb:02:06:51:7f:b0:25:3e:
11:6a:fb:20:99:d4:d4:78:a2:4a:d2:e9:07:ac:b7:d1:5c:4f:
21:82:e1:f7:99:37:02:10:8a:6f:06:41:60:f9:ab:b4:d8:9e:
e4:bc:06:98:d3:75:83:82:a5:89:be:86:9b:76:00:3f:1b:b7:
e7:75:f8:50:9b:39:87:de:94:b0:1b:4d:fa:a5:b9:b1:b4:1e:
a3:ca:95:9b:89:1e:11:aa:9f:66:a0:fa:8b:35:36:cc:3e:c6:
df:3d:c7:13:9b:83:a3:f6:c8:35:a6:39:db:35:3f:31:04:a7:
7d:98:5f:63:95:bd:bc:8d:70:18:6b:46:fd:36:45:ec:ca:26:
19:c4:b0:18:ef:a1:e7:31:47:e9:d6:a8:09:79:e4:bd:fc:2d:
7c:e1:e2:e1:8d:d4:2e:54:1d:da:3e:30:46:e9:43:54:e8:ea:
85:1f:94:cf:89:2f:6a:c1:6a:4b:ed:2c:bb:a6:ec:a7:6c:19:
d0:c8:5b:95:6b:fb:eb:31:d8:3a:aa:fc:10:20:22:e8:4d:1b:
fc:67:ce:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:42:12 2025 by rpki-client