Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: OzSC9UebpRhK7gz3dGDm1SDkKlHdZYdBKzX4pw0Yhs8=
Subject key identifier: CB:FA:E4:62:23:C2:0D:F0:1A:1C:56:FF:C8:3D:1C:3E:E4:D5:F8:5E
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 0196B7EC255A3D5111642FFC11772452F5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 02:00:28 +0000
Manifest this update: Sat 10 May 2025 02:00:28 +0000
Manifest next update: Sun 11 May 2025 02:00:28 +0000
Files and hashes: 1: 0qa8r-MxNMLt6tCXa-K5V6QBkro.roa (hash: oU+YFw1zeHKoa31/el8AmGzlkf3ldrnYHs0Qc542gzw=)
2: 2s9R-8NKLGYziws7CzdBBuI05qY.roa (hash: 8cPZV8bL1izy9SNqvDNd1+gha6xq2vYnb61KexJW8KE=)
3: 8trwTS6zWWIc2CXU2a9uB3EK1CE.roa (hash: cB6Sm/NTvhdg/vAHTGU6288+fVcpUIfblu8fCuXy72c=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: WRs26Z33ebKeTSfoSLK24WPEcjoFvxWgcc0/yYeOCG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:25:5a:3d:51:11:64:2f:fc:11:77:24:52:f5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: May 10 02:00:28 2025 GMT
Not After : May 11 02:00:28 2025 GMT
Subject: CN=cbfae46223c20df01a1c56ffc83d1c3ee4d5f85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:71:75:c4:5c:96:4e:95:47:be:6b:52:2f:09:
11:c3:1d:77:79:07:2d:38:81:f1:86:2b:d1:6c:1b:
8e:f6:08:7b:e8:50:91:eb:68:0e:fe:b7:76:68:1f:
c2:29:8b:56:b2:d6:0d:18:c5:c2:36:d4:ec:5d:9c:
51:cc:7e:a6:a2:53:d7:30:2c:51:87:62:1e:f5:5c:
98:8b:e7:64:56:f7:38:ef:41:07:49:7d:b1:fc:83:
1f:4e:0d:ed:07:5a:82:53:1a:5d:4f:04:2f:d5:8e:
b3:3c:03:e7:b3:5f:ec:1c:92:7a:d1:1c:61:29:a9:
2e:51:73:6d:06:20:5e:a9:93:40:d9:c6:75:70:e4:
04:ad:aa:af:43:9a:ab:30:25:ba:0f:e0:b4:55:f2:
ac:68:09:53:5c:17:21:8d:02:9d:12:33:a0:00:36:
de:a8:af:08:96:37:1b:52:14:70:5f:0e:b2:b6:6c:
66:28:50:47:83:01:3a:09:28:12:44:62:ac:a0:97:
7d:9b:91:7e:56:ae:07:7f:53:44:04:f8:37:83:05:
d7:81:22:b6:4e:73:19:d4:57:7b:92:e5:96:8c:dd:
2e:44:e7:84:1d:0a:db:d3:a9:58:dd:56:ed:47:93:
25:20:31:e1:23:71:27:a4:aa:d0:96:c7:c7:8d:82:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FA:E4:62:23:C2:0D:F0:1A:1C:56:FF:C8:3D:1C:3E:E4:D5:F8:5E
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f9:bb:d9:ea:b3:ce:08:82:b9:58:e5:c1:c0:bf:72:c5:6c:
a8:90:1f:77:77:e8:d9:aa:4c:e0:cb:af:07:09:1a:87:3e:9e:
b6:83:04:f8:24:2f:42:fc:fc:ab:8b:56:84:64:e7:66:c7:14:
ab:76:c7:cc:6b:2c:a6:83:8d:cc:9b:e6:d3:af:19:42:de:44:
b6:b2:95:f9:bb:62:95:7f:b2:b8:10:11:7b:0b:83:dd:a2:b0:
38:0d:0b:b1:b9:de:9e:82:00:ab:77:ac:4f:29:19:7b:4d:19:
1a:d3:1f:0e:6b:ba:0e:41:7e:86:c8:22:e0:89:4b:28:54:5e:
86:fd:d2:b7:ee:26:d3:a5:63:ea:d7:92:83:0e:6e:ec:b2:86:
84:df:fb:46:f5:c0:df:28:9e:62:c5:67:2e:70:bd:40:e0:8c:
c7:33:30:a8:b4:2e:83:02:19:82:8b:59:64:01:50:fb:d8:3d:
fc:bd:30:5e:21:d3:f8:fe:45:4a:63:c5:b2:0f:50:eb:2f:41:
fa:6f:d0:ed:13:87:a1:5c:06:73:f6:96:c1:e7:1d:61:c4:f8:
f3:7b:84:aa:53:06:0e:16:2d:ad:0e:7b:9b:e2:c7:b1:12:50:
b8:d3:26:4c:8a:aa:03:c2:43:6d:d3:fa:8f:8c:b6:3b:ac:0d:
cb:93:99:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:46:14 2025 by rpki-client