Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier: 65MXSGj0x1M1u/pGjDuiIFyaCScC5NRv+J2VVZQ0/kw=
Subject key identifier: 63:32:7A:3B:E7:FC:6A:EC:EB:01:38:6A:C1:02:1E:B3:24:2C:E1:03
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial: 01969FE4474C32AF9B415EADF3751097B9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 10:00:59 +0000
Manifest this update: Mon 05 May 2025 10:00:59 +0000
Manifest next update: Tue 06 May 2025 10:00:59 +0000
Files and hashes: 1: R61HPMD68kIaSjuhapTR2hk_o_k.roa (hash: eWM7uVRHKJ0h/TzbbEISOsoLOvqx2gFtMEnPl7A/Y18=)
2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: U0suyND7BMnHQYe0UAA6iJuJjxXp/FVINWUX35vld3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:47:4c:32:af:9b:41:5e:ad:f3:75:10:97:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Validity
Not Before: May 5 10:00:59 2025 GMT
Not After : May 6 10:00:59 2025 GMT
Subject: CN=63327a3be7fc6aeceb01386ac1021eb3242ce103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:d5:89:4f:c4:ff:19:54:77:b7:f7:a7:c9:
64:26:ff:82:cc:1d:eb:79:b9:fa:c4:9c:56:81:4c:
66:3e:f4:b3:83:cd:a8:a9:ca:e1:f6:87:38:99:1f:
ba:bc:39:62:23:da:5f:ff:8f:9e:31:f5:d0:b7:5b:
8a:c0:cb:29:ec:ff:f0:a0:7a:7b:ad:30:64:ab:09:
9f:5a:77:62:74:3d:07:84:37:3b:1a:4d:8d:d8:cc:
ed:d4:d1:5b:43:f5:ef:7b:8d:64:b9:a4:bc:f6:8c:
3f:e8:3c:8d:77:3f:ef:51:30:c3:99:37:ff:29:48:
71:bc:4c:01:fb:2b:89:20:88:0e:a5:51:77:9c:29:
55:13:84:0a:bb:8e:0c:33:be:d5:6d:31:b2:6a:2a:
50:18:a6:22:0d:14:21:b7:b1:4d:78:91:a6:39:be:
09:47:30:a6:e9:6a:be:87:5b:a7:44:9d:a1:7e:02:
e1:f2:88:c9:7f:c5:5c:23:c1:50:54:f3:9c:98:6f:
fe:3a:10:ea:4e:84:67:23:e5:a6:c7:58:b2:10:6f:
b2:96:5e:9a:b4:99:29:06:3c:66:f0:60:55:13:29:
b7:58:a9:d8:de:08:10:d7:d9:91:41:10:75:db:de:
65:43:9e:2f:cf:1f:00:91:2e:11:36:b4:6e:44:09:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:32:7A:3B:E7:FC:6A:EC:EB:01:38:6A:C1:02:1E:B3:24:2C:E1:03
X509v3 Authority Key Identifier:
keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:21:80:b0:9c:d0:f6:86:fd:48:52:4c:64:fb:20:dd:3e:bc:
b0:be:b7:eb:7f:25:ee:91:fa:ce:e0:bc:3f:a6:9b:9c:6c:c9:
34:43:ca:43:a6:b0:18:ee:91:6a:ee:90:ec:3a:85:c8:68:ed:
6b:9a:21:61:fa:bb:c1:d2:fc:1e:f9:d9:71:5a:8e:aa:9d:03:
e3:65:11:a5:83:9a:04:ab:62:0d:98:f0:70:4a:64:3f:13:9b:
d6:7b:63:4a:ed:73:ad:7b:78:bf:e5:d6:83:e2:59:5e:06:93:
3b:95:26:5d:46:9a:27:14:99:ac:13:dd:62:6b:22:74:a6:06:
49:ae:c5:35:ce:f8:73:b1:9f:de:9a:c8:5a:18:aa:bf:b3:a2:
e4:c3:d6:02:72:c7:6d:d4:09:84:e3:51:98:fa:1e:2a:ee:41:
bb:ca:ff:be:a3:ad:ae:02:5f:56:be:82:29:7d:3e:69:39:f7:
28:ea:e4:1d:aa:f2:ce:01:ae:7e:44:30:71:51:04:75:96:4c:
71:c5:71:20:f9:6c:6d:58:5f:4c:b1:d9:b4:3c:54:67:b2:4f:
f9:c4:d4:0c:82:1b:85:75:5a:16:b9:1f:82:33:bd:db:5a:04:
bb:24:03:13:fd:98:e7:95:8a:a9:91:79:d6:eb:fa:71:37:67:
42:be:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:10:48 2025 by rpki-client