Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: rsN1NB6DUzjX2/h6QpESAGvyGWvtdsuaL9k0ZlqjsKw=
Subject key identifier: 55:C9:89:24:23:CB:67:B9:3F:C4:76:6A:E4:91:03:CA:1F:0D:BE:0B
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 01969F75E2614E68F375045B6BE507DC174F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 07C5
Signing time: Mon 05 May 2025 08:00:25 +0000
Manifest this update: Mon 05 May 2025 08:00:25 +0000
Manifest next update: Tue 06 May 2025 08:00:25 +0000
Files and hashes: 1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=)
2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: WibJO9rmpv2v9KGjOKYSDo2Sp71JpvUhQFr7Luar0N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:e2:61:4e:68:f3:75:04:5b:6b:e5:07:dc:17:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: May 5 08:00:25 2025 GMT
Not After : May 6 08:00:25 2025 GMT
Subject: CN=55c9892423cb67b93fc4766ae49103ca1f0dbe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:ae:26:c5:2c:9b:89:b4:b8:39:77:15:12:
3d:99:cd:70:5f:a4:ba:e9:25:1f:88:ed:f9:f6:41:
10:cf:57:1a:3a:78:ae:6d:3a:58:39:d3:e2:6e:90:
8a:be:fe:b9:18:24:9d:c8:e8:56:fc:d4:68:dc:eb:
5d:4d:df:e1:9a:05:7c:fb:5b:1d:64:9f:62:4e:30:
76:b0:4b:b7:07:a1:2c:34:5a:22:da:1c:cd:49:df:
e9:d1:cf:8f:ef:4e:50:2e:55:0c:8e:0d:6d:46:05:
57:05:2c:86:85:7f:9a:60:23:d2:df:83:e3:4e:13:
ec:cc:f9:ca:63:8f:aa:c8:02:3b:fd:45:c8:58:3e:
9d:87:c8:84:0f:88:e4:96:89:b4:a9:0c:26:a8:1e:
31:54:fd:23:42:8e:bc:61:7e:38:71:9e:09:0f:96:
5f:46:66:b6:24:5d:54:30:a1:d0:0e:ee:44:d5:64:
08:05:d0:ae:ec:0e:8d:57:97:c5:72:a8:9c:a6:54:
26:41:ab:f4:fa:e4:0a:37:26:8a:e0:cd:a1:ea:5b:
f8:b1:6d:85:f4:8f:e9:56:4f:5c:d2:5d:74:13:4d:
cf:fb:80:67:45:75:df:ca:1e:0a:62:f1:dc:a7:dd:
9f:67:25:45:2c:b8:f9:86:3a:56:8a:91:c5:25:31:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C9:89:24:23:CB:67:B9:3F:C4:76:6A:E4:91:03:CA:1F:0D:BE:0B
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:df:7a:1a:e5:a7:ed:e6:a9:2f:45:08:da:cf:2b:d1:55:24:
78:34:c4:b3:2b:cf:a4:64:a5:0e:97:47:59:53:2b:ec:9a:53:
4f:db:4d:26:8e:c8:70:15:99:b0:6c:80:df:5b:e4:14:ca:cd:
f5:6f:ef:3a:b9:7e:e8:78:36:39:e7:88:05:38:b4:4a:3d:1d:
75:2e:2c:c6:56:de:49:8b:08:53:17:e4:e5:a8:fb:cb:d5:a3:
7f:84:5f:c1:e1:6e:7c:65:15:fa:5b:25:e9:06:e9:16:df:a3:
58:9a:90:23:25:b4:1c:46:42:fd:ed:dc:0f:8b:e1:9c:78:3a:
99:f0:5e:29:3a:6f:cc:5e:0d:1e:b1:a8:65:7b:60:42:34:27:
f2:48:70:06:ca:95:83:cf:43:05:50:04:5a:36:fc:f0:3f:d2:
1c:78:8d:02:55:21:22:4c:73:d7:77:52:57:a4:7c:77:19:6a:
fc:3a:55:4b:2e:7e:d9:87:70:65:c0:23:d3:d1:31:42:2e:83:
0e:5c:4b:07:b9:46:27:f5:29:7f:52:17:ea:d0:c2:a6:74:25:
dd:a3:08:2b:26:2e:22:1b:2e:ba:50:e3:35:80:ae:f4:ba:87:
4c:8d:df:87:78:47:7c:5b:c4:7c:19:6d:2d:6d:81:d9:64:b2:
89:ea:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:33:41 2025 by rpki-client