Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: MrN/Vp2aSNNVXmBDN6EITy+93dN2J0WHUj5rrDgzuxA=
Subject key identifier: 56:E7:19:6E:DE:1F:E7:D8:10:13:FB:DA:26:11:6C:95:52:F1:2F:95
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 0196C8E000B1EF140723C223AAE051314874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 09:00:45 +0000
Manifest this update: Tue 13 May 2025 09:00:45 +0000
Manifest next update: Wed 14 May 2025 09:00:45 +0000
Files and hashes: 1: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (hash: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: JqYxhaJKMh867kLE5/aWnSgxKc48V8G8Np+Th4P4EuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:e0:00:b1:ef:14:07:23:c2:23:aa:e0:51:31:48:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: May 13 09:00:45 2025 GMT
Not After : May 14 09:00:45 2025 GMT
Subject: CN=56e7196ede1fe7d81013fbda26116c9552f12f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:93:44:98:02:92:43:f0:73:91:90:e7:e8:
7e:44:c6:0e:ac:b4:15:ec:89:35:24:fa:c1:72:bd:
05:a2:a6:82:78:56:12:60:c3:ab:70:dd:b2:4f:37:
20:78:e2:d1:7a:ea:01:d1:94:38:c2:8e:18:2b:3c:
85:b0:54:63:f4:38:2a:9c:68:51:6c:a4:11:4d:51:
0b:05:cd:11:ea:4d:c5:d0:4e:45:97:7c:d7:3a:aa:
96:8f:7e:fe:73:46:e4:f1:63:81:6d:39:0e:e6:e9:
8f:b8:bb:4c:13:c9:5b:f2:cf:0e:eb:70:6e:ee:b0:
6a:f7:96:4f:b0:c4:ae:f4:06:fa:dc:dd:32:4c:c4:
99:b8:50:81:b8:04:45:28:08:ef:11:ad:dd:b4:ca:
3e:14:d8:c8:42:04:d5:c8:35:e5:db:e8:63:d8:d4:
c7:81:17:97:e7:67:5d:87:74:e1:16:96:d6:a8:c7:
f1:27:5d:be:22:cd:b4:fd:04:c6:42:41:3d:8a:4f:
ba:fd:12:49:71:73:8c:28:cf:ff:98:6e:32:89:27:
af:a5:6a:b5:9d:f5:43:fe:e0:6d:0c:89:5d:9c:8f:
e0:34:8c:ae:e8:eb:0a:46:9a:1b:ab:a1:97:df:fa:
a6:c6:af:00:2d:27:7d:96:eb:8f:10:3a:06:bc:b1:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:19:6E:DE:1F:E7:D8:10:13:FB:DA:26:11:6C:95:52:F1:2F:95
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9b:6a:b1:19:a2:53:ba:55:2c:63:24:86:3e:de:3e:f5:cc:
f5:ef:a6:b8:17:64:79:c6:29:bf:2d:90:ad:de:48:11:08:35:
e7:8f:bd:15:27:93:83:2f:86:ec:2f:c8:21:52:79:25:5e:85:
70:7c:5c:a8:89:af:2b:1c:a4:74:ed:aa:71:96:b4:53:ae:16:
a0:ef:80:de:d6:92:09:1b:d8:c5:ee:eb:0f:3c:7c:5f:12:d5:
54:42:54:3c:3b:ad:e5:da:c7:3d:b3:c7:0f:ce:e9:4f:5e:23:
96:3a:f9:f3:b0:c8:20:eb:ca:89:47:f7:bf:81:fe:46:e4:a1:
59:9d:bc:ed:c7:63:c2:36:11:03:19:f2:e6:7b:20:c9:fe:ee:
ce:75:75:f8:87:9e:69:12:42:f0:e3:8c:2b:6d:83:8c:b8:04:
4a:d6:65:dd:92:eb:78:db:1f:b5:fd:86:ca:5e:51:c9:20:d9:
9b:a9:92:96:fd:a4:db:48:15:6a:e2:7f:32:fc:87:ae:92:87:
13:a4:75:4c:67:9b:a7:7c:73:65:44:99:35:9a:cc:e9:5a:fb:
d5:8e:c0:ea:a8:dd:89:5c:dd:6d:b1:30:4a:f0:cc:e9:2f:bf:
22:a7:20:f3:dc:a8:17:40:ac:44:7e:43:71:f3:30:60:ab:97:
39:5f:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:22:33 2025 by rpki-client