Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: wqUjgLkARCucJc2owEMdE3BjBpXjEHpNodInOdZYg4w=
Subject key identifier: 16:24:95:FC:4A:67:6B:39:E7:C4:24:B0:9E:8E:23:AD:AF:D8:E5:4C
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 0196C1CB2BF982EB19D5854E0DADF3F4A49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 00:00:39 +0000
Manifest this update: Mon 12 May 2025 00:00:39 +0000
Manifest next update: Tue 13 May 2025 00:00:39 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: jXHoy3mXjP9sjGMU1FSvuKjVMAEK9iq/i4T1eP+V0E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:2b:f9:82:eb:19:d5:85:4e:0d:ad:f3:f4:a4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: May 12 00:00:39 2025 GMT
Not After : May 13 00:00:39 2025 GMT
Subject: CN=162495fc4a676b39e7c424b09e8e23adafd8e54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:81:97:c8:dc:1b:c4:31:02:d4:03:bb:b4:
56:bb:a7:a8:5c:38:52:40:6e:ef:e8:2b:b6:63:a6:
da:75:d6:ff:c2:4a:67:25:45:1f:5f:2c:9b:17:bc:
1b:23:e3:92:7e:42:8e:fa:45:6b:41:e8:4d:99:fb:
01:54:57:4b:b1:e6:4b:46:83:6c:e1:68:ce:3a:88:
a7:d3:24:9e:08:25:d8:c8:63:d0:04:34:b9:a9:96:
0d:ef:49:fa:bb:4c:b0:4e:2e:ea:f3:0d:1b:9d:90:
f9:b3:ff:a2:37:2e:d3:f1:ee:35:a3:80:9c:b1:e1:
f3:37:e8:7c:28:ad:cd:e8:fa:43:87:e0:b5:35:3c:
d4:f3:73:24:27:93:47:38:2c:93:84:ce:1c:fb:c6:
49:ec:c7:a6:d6:4a:bf:15:c3:d3:9c:23:f3:0d:60:
91:31:02:18:7a:ef:da:97:bd:48:98:4d:65:22:1f:
23:f8:d8:63:89:e1:3e:1d:e9:50:5f:99:a1:68:03:
4c:3e:06:68:5f:df:3b:63:80:26:d3:f3:48:5f:0e:
53:45:ec:37:2f:0e:64:00:38:bb:b3:07:fb:e1:04:
82:0c:4b:b5:c7:b1:24:2d:d9:e2:a4:16:63:2d:68:
fa:f0:a8:d2:8d:f1:84:a6:cf:ac:8b:b9:c1:29:69:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:24:95:FC:4A:67:6B:39:E7:C4:24:B0:9E:8E:23:AD:AF:D8:E5:4C
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:07:a5:4b:29:5b:62:4c:e1:eb:5c:64:5f:ba:3c:f2:be:a2:
b9:2c:23:61:bc:e0:24:e2:9f:80:b2:6a:22:f7:2c:a4:53:51:
79:8f:77:27:16:c6:4a:9e:7d:0a:35:77:52:32:79:50:65:a9:
c3:43:1a:a2:49:2a:68:dd:8c:35:b5:ed:da:11:97:c6:19:80:
3e:47:1a:44:28:b9:36:d3:2d:83:e2:d7:23:44:0c:13:4d:51:
1b:f2:24:e7:a3:fc:b0:93:91:46:97:fe:11:5d:bd:4a:38:55:
6a:ac:45:d0:d6:a0:0e:e0:bc:4f:b5:9d:28:ca:50:19:95:69:
f6:36:b2:c6:93:7e:61:8b:77:c7:b5:fd:a9:5e:f4:e3:49:01:
81:e9:32:05:4d:0a:d6:0c:47:4b:45:03:dd:05:8d:34:93:05:
c8:20:cc:7b:2e:2f:39:81:f7:0d:f5:3e:b9:5c:37:25:13:1c:
8f:b5:4e:0f:56:a2:bb:b0:7e:d2:df:ff:5f:05:2e:6c:2d:ff:
54:c7:c1:47:50:d2:69:83:3e:ef:17:a2:36:14:7e:3c:ed:f8:
da:6d:ab:9a:ad:46:9e:cf:93:03:4d:93:ca:f0:44:cf:c8:ec:
d9:a5:36:51:7e:a6:16:1e:da:c1:d7:aa:72:d5:2c:f9:54:83:
9c:3f:27:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:08:48 2025 by rpki-client