Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier: ycAb7d4FkLYNeWjLijEB6MMJ4tK5mI3DaHE5BchE6io=
Subject key identifier: 2F:A1:54:DA:BD:B9:96:EA:A9:D2:85:DD:05:00:F9:D3:0A:7D:9C:7A
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 01969DBED5A4313406926C8874B2325A3E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number: 0AD6
Signing time: Mon 05 May 2025 00:00:51 +0000
Manifest this update: Mon 05 May 2025 00:00:51 +0000
Manifest next update: Tue 06 May 2025 00:00:51 +0000
Files and hashes: 1: H_s46FVu3VtqmBdzQOsgFtOpwm4.roa (hash: xXfRZ05adaRJT3b+JBMiwuYhoS+v9eiqRiPqJaWYY3s=)
2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: cpisO33Zl3zX0Ut7I7wl/V0vFvZ0FugpHilG9g14i0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:d5:a4:31:34:06:92:6c:88:74:b2:32:5a:3e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: May 5 00:00:51 2025 GMT
Not After : May 6 00:00:51 2025 GMT
Subject: CN=2fa154dabdb996eaa9d285dd0500f9d30a7d9c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:62:9b:a5:52:3a:be:97:03:e3:d8:fb:54:
f4:d7:78:00:7f:ea:31:5d:a8:87:ea:d6:3b:56:81:
f3:a9:f5:de:1f:03:2f:69:ab:e7:33:3a:af:58:da:
f4:b5:98:08:c6:9a:a3:88:4e:ca:3a:6c:5c:93:2f:
6f:6d:f0:fe:e2:14:69:14:a0:b9:6d:8c:53:27:e6:
b6:8e:0c:81:b4:3f:86:55:2d:ad:ee:ba:69:a6:94:
b8:17:34:3c:ea:90:09:5a:f6:d2:6f:fb:f5:27:dd:
c7:54:41:30:9a:09:11:9c:49:0c:89:45:77:54:ac:
bd:00:4e:6f:3d:2c:5e:43:2f:5a:48:16:1b:7e:c0:
05:73:bb:5d:81:fe:c0:8b:46:5b:fe:6e:be:50:ed:
12:9c:4e:b7:d0:a1:73:fd:28:cf:03:a8:5e:0d:a0:
d9:49:6b:5b:27:55:bf:f2:e4:00:9e:c4:e7:f6:de:
f6:d7:72:73:4d:84:ad:cf:d1:81:7f:d9:36:43:56:
59:fc:a0:d0:cd:a3:d3:d5:64:2f:26:f9:5b:a9:9b:
62:e0:68:61:35:01:75:01:d1:25:30:6f:ec:89:e4:
a4:58:d5:2a:35:36:3b:d9:bf:4a:8b:06:a8:a8:f1:
28:fc:52:76:a2:a4:31:52:2d:29:c5:d1:db:9e:fd:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:54:DA:BD:B9:96:EA:A9:D2:85:DD:05:00:F9:D3:0A:7D:9C:7A
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:18:1b:f1:08:e7:d8:20:29:ad:cf:8e:c0:a3:e0:cd:80:91:
9c:7f:25:85:47:7e:f9:60:f1:0e:ea:23:e0:47:7b:0a:23:bd:
9c:6a:fe:90:16:7c:bf:aa:a6:ed:e6:a1:30:e4:64:9e:f0:a9:
f0:36:ee:7f:d8:2d:13:75:af:b0:b9:cc:aa:76:71:2e:34:9d:
df:f7:94:46:87:20:54:f9:45:8b:97:64:f1:99:86:c0:ae:3a:
da:37:42:6d:98:66:e8:e6:37:dd:fc:30:72:14:87:f8:03:45:
f3:14:9b:05:af:24:aa:a3:82:a5:5d:99:d2:43:c4:f7:0e:a4:
f6:15:d9:f3:3d:7b:88:f8:6e:15:80:2d:ef:ec:4c:3f:39:c3:
41:b3:c3:f5:99:bc:61:4b:49:f2:44:6b:3d:50:16:41:38:06:
8d:45:b1:e5:8e:8f:df:59:02:90:30:1c:eb:7c:54:54:bd:c3:
cc:24:58:80:cb:72:57:e5:5b:a2:97:98:64:3d:a3:7d:cb:b4:
ce:c9:b0:eb:86:41:83:68:cf:1d:3c:54:a8:aa:0f:43:37:4f:
d9:4c:85:02:58:20:a8:08:a0:11:fa:ae:8a:23:40:13:63:5f:
f0:b1:a7:d7:aa:32:96:63:34:62:5e:1f:fb:73:58:10:d9:de:
ba:74:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:22:58 2025 by rpki-client