Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: yqAg9okEv46R1hWYBTo9/O7tOv0rjy9fNiRmQzxBvps=
Subject key identifier: 3C:4A:69:BD:D0:9B:A1:C1:AB:F5:52:72:77:21:DA:97:EB:23:7F:A4
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 0196CB05F29845BA1F92558E861C45371C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 19:01:26 +0000
Manifest this update: Tue 13 May 2025 19:01:26 +0000
Manifest next update: Wed 14 May 2025 19:01:26 +0000
Files and hashes: 1: ZZlyR1qePInNwWMshU_T-zKOIRs.roa (hash: 1/uH+W7Kksp46/1+HMCQDG/zqQ+/+VqifvgRn9tMf2U=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: vt0p9tN2IxAAAkc1+kMIZDy9v9mQ+C+jQqqiNMF65zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:f2:98:45:ba:1f:92:55:8e:86:1c:45:37:1c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: May 13 19:01:26 2025 GMT
Not After : May 14 19:01:26 2025 GMT
Subject: CN=3c4a69bdd09ba1c1abf552727721da97eb237fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:49:09:f6:2e:05:d5:fc:16:8b:2a:aa:a1:
5e:88:3c:b4:f1:5e:78:c7:4d:78:4d:d4:4d:43:7a:
49:db:79:f9:1a:62:b0:c2:f1:4a:b3:f5:80:87:5a:
f3:9e:3e:c4:48:7f:10:0d:76:f8:3b:4b:10:bd:7a:
c8:bb:8f:4b:fd:db:2d:60:5f:e7:c9:3f:e7:9f:a1:
cb:b9:1a:4b:8e:f9:54:c1:4d:b9:67:b4:4b:5c:ba:
79:68:c7:78:78:8b:eb:5c:e8:a5:b1:f8:76:8b:fb:
4c:a5:90:d5:fe:cc:d0:3c:bc:18:25:f6:23:77:d1:
3c:47:b2:c8:6d:f8:7c:f2:dd:6f:c4:dd:d8:17:7a:
3d:f5:6d:8f:a6:37:5f:8d:5e:03:ac:9a:58:94:1a:
0f:60:1c:07:3f:bd:7f:70:c0:cd:56:68:99:11:51:
85:ee:e7:a0:73:ed:9c:ba:d0:66:5e:d3:29:cb:33:
e5:18:a6:c7:ed:ba:89:aa:2a:ce:e7:37:38:69:11:
2d:ca:83:78:e7:d5:a5:93:a2:49:6e:bc:0b:e6:d8:
2f:91:63:52:b4:69:7f:a3:b4:19:32:1f:96:8d:3f:
e7:13:0a:23:e9:88:e3:49:df:d4:91:9a:1a:c4:fe:
26:46:3e:2b:56:ef:0f:a9:35:55:10:aa:f1:d5:78:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4A:69:BD:D0:9B:A1:C1:AB:F5:52:72:77:21:DA:97:EB:23:7F:A4
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:36:02:be:5b:b1:db:2a:84:9b:7b:23:58:48:33:cb:ce:d8:
9c:71:1a:62:fb:33:43:a7:93:77:b8:f9:c3:91:5a:3c:4e:3e:
c2:3f:54:40:eb:e8:62:f1:72:90:62:69:08:6e:b5:70:1f:18:
53:22:2e:95:22:9d:8b:8d:15:65:b2:79:99:bb:b1:14:61:c1:
a4:6a:e0:01:10:f6:10:bb:37:af:98:48:e5:d6:3b:2d:11:f0:
33:83:2d:c4:6f:08:71:48:38:85:1a:86:8a:38:25:16:29:98:
9b:a4:68:52:7f:39:d4:99:5d:6d:cb:08:95:a3:db:6c:8c:a3:
6c:83:b1:fd:64:c9:22:01:77:aa:d7:75:fc:68:06:56:69:02:
7b:1a:39:c0:7d:44:3a:7c:51:9a:fc:28:c3:26:83:5e:54:82:
06:4e:67:fb:23:de:b9:c4:6a:af:d7:40:e0:2b:29:b3:15:f7:
66:3f:07:2d:09:d3:00:80:05:53:52:93:d5:d5:91:28:5b:26:
b9:9a:bb:5a:5c:53:01:bd:e1:66:11:e3:61:92:db:90:99:d2:
9e:2c:6d:17:83:d9:fb:80:95:4f:89:6d:78:77:36:d4:97:cf:
32:3e:ab:90:0a:e5:62:59:21:05:c3:db:23:8e:93:d0:bf:e7:
ec:c5:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:48:26 2025 by rpki-client