
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: eIwwQ7mpn0iSPfEPJUSO0QGkZZH2bH7yRqKmL4C8I3Q=
Subject key identifier: C2:3D:D9:9D:F7:59:DC:B3:CC:48:DE:D2:00:A7:37:4E:18:E1:ED:BA
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 0196B0A0E700229507C5B1A011EE05CB27A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 12B0
Signing time: Thu 08 May 2025 16:00:56 +0000
Manifest this update: Thu 08 May 2025 16:00:56 +0000
Manifest next update: Fri 09 May 2025 16:00:56 +0000
Files and hashes: 1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: OSsORdUXFAIxDagajDMm/6PC2Q2k/A7vzoiFob4QYnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:e7:00:22:95:07:c5:b1:a0:11:ee:05:cb:27:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: May 8 16:00:56 2025 GMT
Not After : May 9 16:00:56 2025 GMT
Subject: CN=c23dd99df759dcb3cc48ded200a7374e18e1edba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:4b:e3:70:ea:73:a3:94:11:e3:07:e9:10:
6e:73:58:7d:3c:d0:52:eb:71:7d:9f:da:92:f6:06:
03:7e:56:74:04:c1:a1:25:1b:8c:4a:88:99:22:e9:
2f:81:4b:ab:62:11:6f:52:03:ca:f3:ce:93:5d:26:
bc:b0:74:e7:86:bf:f7:4b:c9:57:8e:36:b8:a2:5a:
80:ce:c4:c5:28:49:f6:a9:1b:4c:34:90:c1:d6:e9:
d5:e4:4f:b2:29:c5:7f:67:2b:8a:17:7b:6e:ad:2b:
3b:af:23:78:2d:7b:47:92:b7:00:f7:62:79:0f:18:
21:c4:31:40:dc:b2:61:11:47:e3:f6:f5:92:3d:7f:
82:5c:e9:7c:22:8b:9b:f7:9d:42:a3:1b:55:c7:6a:
85:12:8e:e1:4c:cd:1a:be:30:21:39:3f:c0:83:71:
c0:fd:18:ed:9c:ef:e1:26:bf:ef:3d:c6:1c:11:84:
08:d6:ba:96:41:77:f2:d4:57:bf:f8:bc:d5:57:40:
44:55:e2:2e:fc:a4:07:b0:0a:98:33:44:b4:0d:ac:
37:ef:23:0a:95:14:45:b4:7d:79:da:2a:af:0d:d1:
64:58:54:87:26:06:1e:04:94:d3:9d:f7:64:26:d7:
cb:bf:f5:4a:c5:50:97:e9:51:fd:13:0c:bc:a9:7e:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:D9:9D:F7:59:DC:B3:CC:48:DE:D2:00:A7:37:4E:18:E1:ED:BA
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0f:ea:a7:2d:37:75:c0:53:b1:a5:45:96:5e:77:a4:2f:16:
a1:f3:ea:ee:e1:ac:21:c9:25:b0:ff:5b:3e:be:3b:04:26:4e:
4e:2d:6c:ba:2e:89:c8:79:fb:34:01:1c:7a:70:3c:16:92:09:
1b:22:64:44:48:10:67:29:95:f5:e9:5e:38:14:b5:05:3e:d7:
00:5f:6e:de:c8:87:89:4b:56:a6:f6:c5:cc:ed:e9:04:26:c0:
0f:48:1b:2c:01:dc:d3:d7:07:bb:4a:30:33:e2:77:63:32:12:
a4:d7:6b:c8:b2:59:0d:10:88:b5:63:f6:e2:be:42:6c:42:b0:
a3:80:23:78:b8:17:67:64:a1:59:f2:e3:34:f0:2d:4d:08:36:
3c:6e:4e:53:68:03:f4:c1:0d:79:25:d4:31:c3:2d:67:84:25:
69:19:50:9a:4f:3b:d6:9d:89:8c:9b:6a:48:e7:19:fb:a6:e2:
66:2d:09:70:b3:93:41:89:69:af:fc:b2:1a:f7:4e:22:1c:3a:
46:62:02:3a:ac:54:e8:62:42:90:3b:be:13:eb:34:e4:e6:4f:
b2:a9:7f:f4:6d:9c:3f:ae:c9:df:f5:a7:88:a1:2a:79:99:6a:
10:a1:87:a9:51:7b:0c:8f:00:54:d3:2e:9d:b1:94:e7:7e:76:
95:eb:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:30:50 2025 by rpki-client