Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: 3Pcx4XdBobai7YVIxZcdscW9+pNNBqdSxrcTGpRklUc=
Subject key identifier: 83:98:06:3D:3E:71:FF:89:3E:D3:77:9F:6A:02:6F:1B:B9:8C:9C:00
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 0196B6A2C3D664B35817EB0058EA6EFE8051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 20:00:42 +0000
Manifest this update: Fri 09 May 2025 20:00:42 +0000
Manifest next update: Sat 10 May 2025 20:00:42 +0000
Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: ecItCFUL4Y035HPeX7RlOKGvRvTHrZLm3nQSdhN/iqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:c3:d6:64:b3:58:17:eb:00:58:ea:6e:fe:80:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: May 9 20:00:42 2025 GMT
Not After : May 10 20:00:42 2025 GMT
Subject: CN=8398063d3e71ff893ed3779f6a026f1bb98c9c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:98:c2:0a:61:e1:fb:a1:3d:18:30:b4:d7:
95:82:8d:98:8c:14:10:bd:e0:0c:ae:a4:39:f4:79:
4d:0e:8d:12:25:9c:a2:5c:d2:8f:d3:90:84:de:97:
09:72:da:70:f9:64:ca:e1:d2:67:ae:56:6b:d6:34:
d5:df:7d:9b:6e:a6:03:b8:4d:67:e4:c6:b7:4c:e5:
a5:8f:2e:1d:0b:92:cd:b5:a5:bd:03:3a:83:70:cb:
24:0a:a6:71:6d:23:ae:ed:e8:f4:45:7d:3b:d0:d3:
4a:81:64:14:b8:e8:91:40:7a:f8:7a:fa:84:76:53:
03:dd:36:3f:db:88:96:b3:27:82:b6:1a:7b:ea:88:
04:3b:43:7b:1f:f1:2c:1a:55:f5:97:8e:ab:0d:a7:
78:7e:e3:24:e0:aa:86:9e:96:5c:d3:3f:7b:6f:13:
93:a9:2d:14:29:6a:66:29:80:bb:ae:42:b5:3b:06:
0d:97:f0:c3:c1:c0:4f:a7:e5:84:ed:17:08:dd:11:
98:5b:87:cc:13:2f:71:33:60:22:72:73:94:a3:61:
2b:56:8c:ea:ae:15:4c:1f:b3:57:5b:21:5e:d5:cd:
07:28:15:1d:e9:a4:6c:bf:56:ea:e6:18:6f:0b:d3:
20:27:7f:e6:26:15:e7:2c:24:f8:e3:a0:ec:76:3b:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:98:06:3D:3E:71:FF:89:3E:D3:77:9F:6A:02:6F:1B:B9:8C:9C:00
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:95:d2:54:f2:19:48:70:d2:55:ad:de:3a:b8:6c:9b:e2:0b:
fc:a0:7a:ff:f7:15:ca:5f:7a:cc:ea:91:d0:4c:fe:14:4b:c6:
99:a3:08:de:40:6d:4b:6e:7a:52:d4:c3:94:74:44:89:55:c2:
eb:88:23:ab:c2:7e:45:18:3e:be:2c:c4:66:d1:61:68:81:ba:
43:75:22:c4:e6:b4:23:50:54:e1:bd:24:cf:78:8a:f1:dd:4f:
85:75:20:44:ec:f0:7e:15:02:cb:02:e1:de:a5:0e:92:90:e9:
17:09:23:af:8a:9a:07:c1:0b:87:6d:99:3b:cd:e4:a6:18:3b:
ca:14:fc:18:2e:0a:35:47:95:a5:88:01:e1:95:eb:b0:54:31:
cb:d0:74:ca:ec:72:d4:79:bc:07:c6:93:29:18:b7:ed:c1:43:
ee:d5:f3:40:ad:a4:4d:84:f1:d5:51:65:d8:78:7e:61:b9:93:
2f:bc:20:d1:98:73:c1:db:46:5e:d1:21:5c:cd:3c:83:6c:0a:
6d:eb:15:0b:27:44:4d:90:ca:95:fc:b8:c6:2f:25:15:28:82:
66:59:e7:97:dc:24:1b:fa:b9:76:de:34:47:4c:6e:bd:3e:b1:
ad:44:3c:5b:fe:df:15:fc:a8:73:55:90:cb:7f:a4:7f:2b:4e:
e4:09:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:48:19 2025 by rpki-client