Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: WkdWTEJGSvXR/rCsXhIUYsf4DBKbiC4WrRn/9/LSEBg=
Subject key identifier: 99:7D:00:A1:7B:57:D2:76:A2:08:18:89:CB:A6:8D:F8:13:FE:FB:59
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 0196AD68CAD362BFC9A5B736572677A958F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 0F9C
Signing time: Thu 08 May 2025 01:00:48 +0000
Manifest this update: Thu 08 May 2025 01:00:48 +0000
Manifest next update: Fri 09 May 2025 01:00:48 +0000
Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=)
2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: UVnenKqSahjc7fRQ2BU7vQMSL2gnzY5qkiR7z+XVWOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:68:ca:d3:62:bf:c9:a5:b7:36:57:26:77:a9:58:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: May 8 01:00:48 2025 GMT
Not After : May 9 01:00:48 2025 GMT
Subject: CN=997d00a17b57d276a2081889cba68df813fefb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:0f:33:42:7b:05:bb:ff:16:ed:c0:26:94:
5c:68:73:2e:c2:6f:87:7e:b2:dc:62:8f:87:aa:16:
1c:b7:86:98:76:65:df:18:99:62:aa:da:dc:62:04:
fb:7b:e8:b5:3d:6e:04:1e:2d:20:03:bd:e5:c7:34:
05:b9:ae:b6:a7:95:e8:ce:08:5e:74:62:2f:f7:04:
11:87:5d:43:95:3a:96:4a:b1:07:65:85:07:bb:49:
47:ef:9a:99:c8:3d:65:27:06:99:fe:a8:ab:8f:38:
a0:9c:ce:6e:5c:4f:97:6d:48:d7:1a:7d:8e:2e:49:
eb:4c:24:a2:ca:a4:81:29:d4:80:8c:57:c5:f3:94:
08:47:c0:79:bb:31:dd:26:9c:05:4e:73:35:8d:b8:
fa:0a:22:3a:51:bd:23:00:23:bf:f3:cd:81:cf:42:
51:9d:41:58:dd:3f:e0:a7:0e:c9:d3:f9:54:22:49:
1e:ca:10:19:8f:79:50:c3:cf:70:68:a7:19:c1:77:
9b:64:dd:76:c8:a4:d6:83:f0:07:25:6d:96:06:55:
94:35:c6:27:a4:05:24:de:43:8d:f8:bf:1e:21:67:
82:47:52:cc:2b:00:67:73:69:7d:51:2a:ab:da:1c:
56:89:7a:a6:6c:4b:fc:e8:f6:6c:46:0d:bc:7b:bf:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:00:A1:7B:57:D2:76:A2:08:18:89:CB:A6:8D:F8:13:FE:FB:59
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c7:d8:8f:02:f8:bf:7f:86:dd:3e:55:56:ac:9a:fa:c3:5a:
fa:9d:2b:3c:9b:1b:ea:ea:da:d3:2b:74:3a:64:39:af:23:17:
30:70:ac:cb:a6:6e:6d:00:47:a6:f8:a1:f5:77:91:31:bb:91:
3a:b5:ef:b1:f5:26:3a:d7:52:40:b9:2f:87:9f:f9:be:be:ca:
98:e7:cf:ba:76:8c:89:71:1d:aa:cd:ff:86:fa:42:3e:ea:fc:
f9:35:fa:0d:ad:dc:aa:ef:8b:52:41:ef:7d:5e:87:45:a6:c6:
66:5e:c0:4d:08:c2:c6:a5:b8:17:02:33:18:d1:4f:1e:82:38:
a6:dc:5a:ce:1d:69:07:42:6e:e0:94:99:dc:a2:08:77:26:20:
0a:1e:5c:ec:0f:db:cf:e4:83:16:28:79:85:e6:c2:68:ad:50:
cd:7b:36:13:43:b4:b2:b8:d3:52:42:bd:a6:fd:8a:3c:58:9a:
ea:2c:a8:d5:0c:a6:84:a7:ff:c6:b8:b0:8f:e8:36:7b:85:3d:
a1:0e:5a:da:fc:2a:c4:c2:41:14:cb:73:24:ab:e7:c1:17:da:
d5:85:09:6c:fc:68:a0:3d:62:12:75:66:07:4c:90:64:68:af:
b2:10:a9:d6:26:31:c7:1b:f9:c4:67:46:17:ab:dc:04:bc:20:
9d:96:ce:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:27:19 2025 by rpki-client