Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: wpRoSoHa1J8RZxw0SddFZZmkksP5ulOl2NeHm9nXg6k=
Subject key identifier: 26:5D:5D:1D:E3:B8:6E:69:B7:9E:6A:21:9F:DF:9A:AF:09:A8:C2:B1
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 0196B96CF153CA60254119668F0F62C4E80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 0608
Signing time: Sat 10 May 2025 09:00:46 +0000
Manifest this update: Sat 10 May 2025 09:00:46 +0000
Manifest next update: Sun 11 May 2025 09:00:46 +0000
Files and hashes: 1: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (hash: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: cZQkRW+nNfM+P5+9CvTIjpO1lgPJAwcLO20jYjaBR54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:f1:53:ca:60:25:41:19:66:8f:0f:62:c4:e8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: May 10 09:00:46 2025 GMT
Not After : May 11 09:00:46 2025 GMT
Subject: CN=265d5d1de3b86e69b79e6a219fdf9aaf09a8c2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:9c:13:60:ce:5e:b0:3d:8f:53:eb:f4:1a:
8d:bb:3e:b1:02:cf:b4:4d:3d:58:c7:a5:ca:71:f3:
4c:9e:81:e9:24:bb:7e:65:a8:49:ec:a6:d8:14:ad:
09:50:7c:04:ef:92:e6:60:e7:f4:b3:39:d1:bf:74:
b5:f2:40:ab:40:4c:6d:b5:0e:cc:cf:9c:07:36:0d:
c7:2b:c1:dc:29:20:a4:b3:7c:19:e0:3f:83:28:46:
df:3b:ce:4e:6c:f0:90:2b:29:81:6d:b4:68:6e:f5:
fb:32:45:4b:50:b9:ff:3e:51:26:94:b9:7e:e0:89:
34:59:7e:55:37:ab:5f:b3:d3:63:e7:b9:37:3c:83:
32:1e:b6:02:1f:1a:e2:f8:44:66:e3:64:b1:85:d1:
c8:ab:d6:00:a9:5d:25:63:f4:60:ac:9e:10:29:67:
6c:fc:1f:d8:1b:62:93:0e:2a:5a:68:b5:a3:94:29:
7f:ce:69:cf:21:8d:6f:7a:f9:4e:06:b5:56:7d:40:
02:fa:24:fd:ab:33:7a:cb:19:82:43:a4:cf:76:47:
7b:97:d6:b9:b0:7e:06:59:40:d9:33:7c:38:65:1e:
bd:3c:bb:ea:7e:3e:dd:5b:77:fc:36:6d:53:6d:22:
03:57:96:8d:fd:a3:be:9a:39:10:86:0a:ab:0c:07:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5D:5D:1D:E3:B8:6E:69:B7:9E:6A:21:9F:DF:9A:AF:09:A8:C2:B1
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ad:6b:6a:ba:31:f1:54:ed:91:86:03:78:a2:e8:37:4b:bd:
3a:73:17:88:80:31:36:e3:39:3e:9e:d5:3e:c7:9d:8e:c2:3a:
8e:b6:c5:36:51:28:79:65:86:9d:03:37:89:f6:e1:4f:97:ef:
5d:67:49:13:2b:18:b3:73:6e:5b:bf:e3:d3:89:bf:34:b0:44:
93:29:18:dc:90:8c:5d:16:c7:99:01:f4:e4:69:03:3f:dc:86:
49:fa:35:3b:8c:67:61:b0:34:9a:93:92:aa:ac:1d:0d:a8:74:
28:d4:7b:ba:af:4f:0e:1d:57:c0:69:2d:97:8b:21:ce:c8:31:
fd:ca:49:a0:eb:ac:02:fb:aa:b1:8d:5e:9b:fb:03:8c:f2:0b:
9e:86:12:00:6e:e3:93:99:c9:7a:b3:ce:c5:04:f4:0c:c8:ca:
85:51:45:e8:cd:bd:49:39:9b:dc:b1:23:9d:61:8f:35:df:58:
20:51:79:f9:06:2b:87:bc:ac:4d:62:5e:f9:77:16:58:c9:11:
f8:15:8c:7e:02:52:d3:bc:48:4f:11:e0:ec:f5:29:02:bd:8b:
86:f5:05:f0:e3:b6:ce:26:ac:b7:6a:d0:1a:e0:25:a6:e0:b8:
64:aa:a8:f6:ac:54:1f:43:d5:7b:0e:58:06:df:6d:ca:16:ae:
3a:d6:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:15:44 2025 by rpki-client