Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: yif6rV2tMTMvHnFY/zmmghpz3bR7Xa3uwnb68ll//m8=
Subject key identifier: F1:1F:A8:E7:4F:5C:28:39:47:05:9F:EB:29:7B:D1:ED:EF:6F:A8:79
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 0196A61CAB0DCF96CD60ADC21657F0BB72A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0A89
Signing time: Tue 06 May 2025 15:00:18 +0000
Manifest this update: Tue 06 May 2025 15:00:18 +0000
Manifest next update: Wed 07 May 2025 15:00:18 +0000
Files and hashes: 1: 9ie56jozGctsQMPeP2PnRQlQSUc.roa (hash: 5kDUdIA6jw7l4e4ssTIC7py/rMtiw/D++uBoc2CI0Qo=)
2: mT-8_dVnmXbsJKgoN35LXNaAywM.roa (hash: o5cN5KMUIwn/VQVHMV9OAvcCU4Z7KPV9dR9Yvh1kUlg=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: ovPhYOASPJIVWRx0ZMJF3Ke2IDueSO5sWZrjk1MYP/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:ab:0d:cf:96:cd:60:ad:c2:16:57:f0:bb:72:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: May 6 15:00:18 2025 GMT
Not After : May 7 15:00:18 2025 GMT
Subject: CN=f11fa8e74f5c283947059feb297bd1edef6fa879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:8c:50:09:bf:a9:3f:58:91:fa:5e:8d:4c:
42:bf:43:49:ee:c5:79:fd:09:cd:c9:80:fa:32:f5:
a2:54:3d:e3:75:65:c1:d9:b6:75:97:fb:80:48:86:
64:30:88:c7:16:5b:1f:a8:90:18:50:53:1a:b4:47:
f9:88:fc:03:bf:bd:f2:b5:ec:0a:11:92:b0:5a:ae:
03:ea:d4:59:15:9a:b7:db:c3:8e:4e:30:a2:11:b5:
b0:f8:50:2b:5a:12:14:f4:4b:a9:05:70:c0:c7:4e:
b4:57:83:c1:65:59:6f:64:06:67:13:6b:59:8c:2e:
b1:f7:1d:ba:c9:b1:6e:9a:9f:d6:74:78:dd:86:61:
e0:54:74:9c:de:d9:97:aa:1f:df:c6:b4:c8:63:21:
a6:60:37:09:2d:ad:75:f3:9c:f2:b3:f1:b7:d4:b0:
be:03:f2:75:c0:08:a3:ae:4f:14:ba:74:d8:37:12:
72:17:ed:f3:e7:70:f5:2e:fc:fe:7e:0c:99:ee:d4:
c1:bb:fc:bb:75:12:41:08:13:39:d1:d7:ed:e3:25:
02:0c:37:08:8f:70:1f:d8:20:ea:bc:32:28:cc:d1:
a3:2a:29:58:bf:5f:75:7e:32:b5:be:50:e9:10:11:
d1:8f:81:7d:c2:b5:ed:42:12:89:3a:c6:77:dd:9c:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1F:A8:E7:4F:5C:28:39:47:05:9F:EB:29:7B:D1:ED:EF:6F:A8:79
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:06:90:e3:00:b5:71:a1:05:d4:26:25:3d:da:7e:d1:a4:cf:
1b:3a:75:1e:13:cd:ad:04:97:8b:ed:6f:e3:c6:3b:de:2e:c0:
e0:8f:36:06:3f:17:41:a0:55:f6:d1:97:a3:02:34:6f:ad:8d:
30:7e:cf:12:1b:d3:de:1e:f6:87:9a:31:9b:54:eb:9c:e5:de:
ed:da:b7:c5:8f:a2:16:fb:c2:56:3a:31:89:42:29:57:af:70:
5f:56:3f:96:12:be:b1:a6:f0:7e:3d:f4:6f:f4:db:34:40:53:
d6:83:57:b6:97:cc:8a:57:88:8f:9b:b1:a1:7a:2d:8e:e9:60:
e8:15:79:43:00:95:57:ce:c2:47:31:ed:3e:a5:b4:2b:e5:39:
08:c5:c2:dd:30:3c:5a:1b:0d:14:06:31:9e:1e:0e:1a:1b:f2:
8d:5e:18:c9:ee:d1:5a:f8:30:49:2e:aa:0b:8c:76:e8:c0:24:
fa:64:2d:c3:a8:f8:c6:94:f4:a8:53:0c:78:7b:56:53:3d:48:
06:d3:f2:a6:28:fe:e5:b8:80:f5:fe:21:73:0e:1b:83:a8:8e:
31:87:66:00:7d:28:b5:5a:01:32:f9:b9:45:5c:75:4f:0b:9c:
6c:b9:11:36:88:01:80:16:da:2a:26:70:22:3e:5c:1f:63:c2:
ef:62:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:49:37 2025 by rpki-client