Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: jiHjES/0fH4YcI7n0T8PN/dGK1vPbi+CkhTlHSr/btw=
Subject key identifier: 75:BD:56:39:D5:51:81:2F:5D:09:5B:42:97:61:6B:A7:64:93:E8:E4
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 0196C683AC5A029FCCA284670325D8A6507F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 0DA9
Signing time: Mon 12 May 2025 22:00:40 +0000
Manifest this update: Mon 12 May 2025 22:00:40 +0000
Manifest next update: Tue 13 May 2025 22:00:40 +0000
Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=)
2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: hSkfgoL6Xwp6/uFeR6ROTVS2xK9dngRkJfyrcocaUEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:ac:5a:02:9f:cc:a2:84:67:03:25:d8:a6:50:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: May 12 22:00:40 2025 GMT
Not After : May 13 22:00:40 2025 GMT
Subject: CN=75bd5639d551812f5d095b4297616ba76493e8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:4f:73:1c:54:cc:b1:83:d8:40:5e:ca:b1:
c3:aa:53:d9:7c:a4:f2:df:f9:c6:c7:1f:6e:28:df:
c0:80:8f:d1:b4:ed:33:eb:3f:fe:bc:dd:c9:87:4d:
9a:9c:56:e8:10:c3:d3:e6:9b:0c:06:88:e3:b3:cd:
bb:a1:7b:a7:37:7f:33:84:b1:af:2e:04:c6:a0:ce:
4e:81:b7:df:0e:8c:85:ab:ae:da:1a:67:a1:6d:3c:
17:9f:6b:5b:ff:7c:4a:96:69:e0:b5:d1:7d:76:67:
f3:81:3c:6c:54:e4:4a:0b:08:ea:e7:ea:e0:f0:e3:
d3:6a:2b:7d:fb:3c:2d:28:0d:dd:1f:64:26:75:ce:
44:4a:9d:32:d0:5f:8a:2c:d9:b1:81:c4:ee:3b:d8:
01:19:f9:da:d0:a8:b4:9d:f6:b1:b6:61:b0:a2:88:
c8:2a:09:c5:ed:d5:dd:d8:a5:c4:3f:2f:37:8c:51:
74:dd:f2:88:e6:64:2f:11:03:db:a2:de:c6:54:86:
7f:c0:bf:18:de:0e:b3:9e:24:9f:ee:d3:d0:b0:e4:
8d:70:5a:99:fa:57:72:23:55:38:ae:99:aa:70:9a:
5e:d9:a6:d9:bf:40:b2:58:b5:99:1f:37:b0:15:b3:
a7:23:ec:89:ab:6d:0c:48:df:92:1b:9e:c2:ae:83:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BD:56:39:D5:51:81:2F:5D:09:5B:42:97:61:6B:A7:64:93:E8:E4
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:de:c9:5f:d8:d4:76:75:1d:38:a1:bd:07:8a:2f:c5:db:37:
74:84:ba:48:52:c7:61:cd:fc:7d:fc:ac:28:e8:33:ca:7f:2a:
45:24:a8:34:9d:67:5c:7e:9a:ff:30:ce:81:ad:45:6e:38:bd:
8c:36:8d:b3:d1:6c:36:b8:66:1f:48:c9:09:c3:30:b7:39:33:
93:2f:87:e0:4a:13:fc:6f:6c:60:59:cc:34:8a:b7:b0:1b:f6:
f6:50:ae:33:bc:50:86:92:f0:87:63:e5:e6:20:45:05:3b:3d:
3b:0f:f3:e7:c4:2a:a9:e5:91:68:ac:03:b8:cc:bd:be:2c:6b:
1f:a8:c0:e3:07:df:52:aa:45:20:5d:68:73:4a:f4:e7:16:a6:
27:4d:5b:eb:51:e3:bf:fa:d8:55:77:a5:a0:ed:1a:cb:59:52:
fb:8a:95:36:87:00:60:63:96:8e:33:2c:82:0d:06:6b:66:52:
fb:3b:89:3f:c9:ac:e0:57:c3:28:f0:a3:c7:da:e0:21:5e:46:
76:ab:f0:9d:6d:21:2f:19:03:97:e8:90:e9:38:2f:51:4f:77:
96:c9:40:ce:b9:90:ad:2b:5c:b7:b2:2e:45:f8:b9:77:d0:5d:
47:ff:25:1c:61:8c:df:02:f6:0e:fd:71:3d:15:df:0c:5f:91:
63:8f:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:57:59 2025 by rpki-client