Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
File: tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json)
Hash identifier: l8navAkvT95TXCxIcZ0UUIbQZRv7Y7/1W9JncVGuKt0=
Subject key identifier: 27:E3:3C:9C:64:0C:BF:B4:20:0C:7E:7D:8A:DF:08:3F:08:90:A4:0A
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 0196BA1158CCC8E614261112BE444B1E60D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 12:00:21 +0000
Manifest this update: Sat 10 May 2025 12:00:21 +0000
Manifest next update: Sun 11 May 2025 12:00:21 +0000
Files and hashes: 1: n5jiYoIoGZQqwQOVrCfprt-PApk.roa (hash: MrCF/3iJ71+/LWf1gBDblDTWmF567DIjZvwBvhh1aT0=)
2: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: W1/gl0Ah7Cb2K/DzjECBBFUn5+0rH2dunnRZvAPvwi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:58:cc:c8:e6:14:26:11:12:be:44:4b:1e:60:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: May 10 12:00:21 2025 GMT
Not After : May 11 12:00:21 2025 GMT
Subject: CN=27e33c9c640cbfb4200c7e7d8adf083f0890a40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:eb:4a:0e:1a:c2:3e:e5:26:dc:d3:3a:92:
ad:6b:61:6d:cd:80:b0:b8:c3:a9:70:33:eb:5f:7b:
37:f8:32:19:c7:b4:a4:03:f7:e4:d6:da:06:d2:36:
56:c7:ea:e3:aa:78:4e:1b:36:7f:56:76:64:d1:88:
e0:13:f3:55:01:ac:1e:22:83:7a:7a:28:06:0a:aa:
fd:03:ba:df:34:73:a6:df:0a:75:43:5f:ff:24:30:
dd:f4:3f:79:1f:66:0b:12:f4:62:e0:ff:9c:8c:d8:
70:83:0b:e3:f2:f1:2b:7c:23:ce:72:3c:9b:92:9e:
56:8a:47:1a:b6:39:3b:40:13:3c:d1:3d:a7:72:fc:
fc:25:3a:19:84:9b:9a:a3:ce:21:2a:d1:1c:c0:0a:
d0:e0:1f:15:50:92:8b:f2:59:f3:ec:0a:5f:52:f5:
de:8c:8f:68:d4:5c:3d:c7:e9:35:80:5c:72:57:db:
11:8b:65:77:94:8f:41:25:35:52:6c:66:b7:4e:a5:
65:05:0b:43:bd:34:1a:0c:cd:fa:f9:b5:91:c2:06:
19:bf:0d:ba:e2:7c:ac:b4:ef:6c:b1:18:38:e4:a4:
84:e5:4f:f3:74:4e:e5:ea:73:d4:aa:4f:4f:26:12:
af:1e:e1:f7:36:f1:9f:91:8b:67:4f:80:69:0f:ad:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E3:3C:9C:64:0C:BF:B4:20:0C:7E:7D:8A:DF:08:3F:08:90:A4:0A
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:79:2a:b1:01:f2:ac:d7:de:38:04:7a:03:41:96:0b:b9:
ac:80:bf:51:1f:d4:ae:a6:ed:02:04:c2:ae:51:f6:55:41:93:
9e:81:9f:b3:ef:8b:8c:38:d9:67:ea:c8:bc:96:61:10:eb:d9:
9a:bd:48:34:af:3e:f7:91:91:66:cc:e9:86:1b:eb:da:c2:60:
a0:0f:2e:2a:fe:b7:ce:07:38:02:24:6a:d0:b6:b4:2b:d1:83:
58:e4:9e:d2:4d:ac:3f:6f:1c:7b:eb:4c:40:02:22:d1:ac:66:
da:42:61:e8:84:a7:2d:fa:31:6c:8f:2f:33:2a:d5:02:fe:93:
6b:95:12:ff:57:67:a0:41:f3:58:4e:a4:72:2d:be:d4:fd:1e:
75:6c:10:c2:ba:25:4c:64:1a:e9:60:24:36:35:58:23:32:b2:
fd:16:f4:a7:b7:e5:12:0f:ea:17:59:2a:aa:2c:9c:2a:68:fd:
89:c5:9f:dd:e4:97:fa:83:7d:7b:6f:29:36:3f:36:f7:2a:17:
11:94:6a:5b:6c:7e:99:e4:a6:53:60:ee:dc:4d:f9:ae:fe:8b:
06:bc:5d:f0:53:a8:a5:d1:47:0a:52:54:65:59:ea:03:44:d7:
b9:00:0d:99:65:aa:5c:18:7e:07:14:bf:e1:03:61:4b:fc:e5:
97:49:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:43:44 2025 by rpki-client