Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: BgJ+Ow0vVcBYzeSq/cabkJxIqjAH3IpvzKqMnUFIndw=
Subject key identifier: 37:55:C6:85:C9:03:DB:4D:F7:BD:C7:BE:10:05:AC:15:F2:49:69:8C
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 0196B6A302A42CCABA4123D605D5C5EAA9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 1533
Signing time: Fri 09 May 2025 20:00:58 +0000
Manifest this update: Fri 09 May 2025 20:00:58 +0000
Manifest next update: Sat 10 May 2025 20:00:58 +0000
Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=)
2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: vJOk8sh+XMlyTYFsj+WrxcNk+O7AeRcACp6WqsOvjP4=)
4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a3:02:a4:2c:ca:ba:41:23:d6:05:d5:c5:ea:a9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: May 9 20:00:58 2025 GMT
Not After : May 10 20:00:58 2025 GMT
Subject: CN=3755c685c903db4df7bdc7be1005ac15f249698c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:67:7d:68:2e:1c:2b:c7:57:10:05:05:5b:
3a:93:22:d0:d4:d4:01:bd:5d:7b:5f:75:b7:df:64:
5d:84:ec:22:c4:e8:66:18:51:0f:49:62:e6:a7:fe:
5b:d5:6a:df:8f:58:dd:d4:2a:a8:93:75:bd:ef:dd:
c2:87:ce:94:e1:48:9a:0b:b4:9e:f7:a4:6f:3a:ad:
8f:39:d6:d7:6d:57:ce:f8:c3:9e:07:64:bb:48:48:
2a:a5:02:ad:bf:d4:18:c5:d3:9c:25:ed:0c:e6:3c:
95:72:a9:9a:02:63:36:dd:f2:a5:fd:d8:1b:b6:f6:
40:09:a4:00:e9:de:ab:12:b9:c9:06:6f:25:80:2a:
44:a9:ff:51:c7:f5:12:16:92:4a:f4:05:b4:47:bd:
ab:6a:7e:c7:3d:6f:81:f3:41:bd:10:2b:79:39:7a:
25:34:27:4e:1e:21:5b:4f:1f:3d:68:f8:60:7e:cf:
a3:34:a6:d5:ee:c0:43:24:55:e5:0f:37:4f:2a:9e:
0f:ff:e3:af:de:90:20:9c:5c:97:e8:d1:31:11:b0:
2e:59:8f:14:04:fc:ae:78:a0:17:3f:ff:cb:0f:14:
5c:39:b5:77:ea:10:f2:98:5c:ab:48:c0:ee:b6:63:
03:0f:e4:35:7b:31:f9:94:f1:6f:df:0d:6b:99:a5:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:C6:85:C9:03:DB:4D:F7:BD:C7:BE:10:05:AC:15:F2:49:69:8C
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8c:50:e2:d7:b3:d4:59:31:37:28:72:02:0c:4c:38:68:93:
83:e4:1c:c3:48:25:9a:ee:bd:fe:0a:a2:98:09:98:92:80:c4:
f6:7b:a0:c4:57:23:90:25:1f:71:6d:49:a1:76:e5:b6:8e:8b:
56:4a:b5:18:2f:a0:90:8c:86:bf:b4:75:61:f9:c3:18:be:55:
5e:0e:a9:e9:82:ea:02:a1:fe:d8:5b:82:97:44:ed:0d:d9:21:
08:b0:fd:94:e4:fe:e7:54:cd:b1:b8:c7:6a:c7:7d:f9:1e:7d:
de:7d:2d:cd:86:50:00:d7:af:a8:09:c8:97:80:b5:0c:cd:90:
12:0b:a7:f2:56:6e:24:89:d5:43:c6:31:ec:ec:63:3c:85:1c:
3f:08:af:3f:79:ac:c4:13:d9:3d:aa:30:58:8a:b6:3a:ca:b0:
47:23:fc:e1:44:18:1c:c5:be:4d:c9:47:fe:65:d1:47:d0:d0:
1f:88:bc:a5:ca:ad:44:5a:3f:79:50:72:81:5f:e1:ac:fb:2a:
d3:46:a5:af:46:44:1c:17:b6:dc:12:dd:d8:f4:99:9e:3b:66:
9b:f3:88:19:e9:7a:8b:72:49:1c:15:b8:ee:26:e2:44:1c:48:
fe:4e:5e:38:6d:25:2f:16:c2:30:ee:d6:0e:c7:d6:48:75:b9:
f5:30:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:08:28 2025 by rpki-client