Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: lHlh9IYd0vBHHJhCsNZUUCEW12ZttL9e0NVmgPT3HGI=
Subject key identifier: 7A:63:E7:E1:EC:37:9F:4B:34:60:58:FE:60:05:EA:CB:00:68:4E:57
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 0196A0BF85C6BD423196ABC6EE7F302820F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 14:00:28 +0000
Manifest this update: Mon 05 May 2025 14:00:28 +0000
Manifest next update: Tue 06 May 2025 14:00:28 +0000
Files and hashes: 1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: svn4gUJ6Gcm+Ee2W++7IhFMOensa8HCG3mnp4bNUYT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:85:c6:bd:42:31:96:ab:c6:ee:7f:30:28:20:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: May 5 14:00:28 2025 GMT
Not After : May 6 14:00:28 2025 GMT
Subject: CN=7a63e7e1ec379f4b346058fe6005eacb00684e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:46:f4:a7:a7:88:20:b5:a7:0c:eb:06:9d:
c2:c2:53:e7:20:85:9b:2f:ba:4f:bd:b6:3e:97:d8:
cc:c2:dc:b2:d5:34:a8:00:9e:79:d9:5b:87:0d:32:
11:44:2a:e0:78:bb:ce:36:78:31:8e:bf:a1:3b:fb:
4b:ae:9f:f1:a0:ea:fd:b3:fc:77:f2:19:95:33:96:
f0:c0:f8:3c:c4:de:d1:6a:6c:a5:bf:c5:7f:9c:06:
52:21:f4:cb:50:23:77:67:86:1d:d7:b1:c9:fc:21:
41:a6:10:e6:84:bb:40:12:7d:c8:21:63:67:38:b6:
c3:b6:ba:fc:47:6b:54:3e:e5:37:ac:5a:3f:10:24:
dd:76:63:32:1f:99:6e:d3:68:9a:fe:15:43:a7:9a:
26:7a:ed:0d:e3:68:d2:81:20:1a:f0:4f:85:91:1e:
69:3b:7e:95:49:58:63:1e:9d:03:32:15:06:f4:27:
f3:67:06:41:0d:ab:4a:cf:e1:f8:22:25:f3:31:20:
d3:4f:26:1a:2e:b6:cb:ef:62:3c:fb:5c:73:62:c7:
4d:2e:ab:94:a3:bd:4f:39:cc:e6:61:10:6b:f8:2b:
72:6f:03:4e:f5:9d:38:ff:dd:d6:8d:60:c4:66:a1:
a8:59:4b:49:93:0a:d6:a8:ea:cb:dd:ba:19:d7:15:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:63:E7:E1:EC:37:9F:4B:34:60:58:FE:60:05:EA:CB:00:68:4E:57
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d4:52:66:38:00:ca:ac:8c:1c:53:81:4e:07:42:8a:6c:34:
f7:ec:f3:5e:6d:16:11:90:7e:9f:a2:18:d9:8d:f9:c9:06:46:
9d:17:1f:d9:25:6f:05:b8:c0:d4:11:44:a3:f7:c0:14:f1:f2:
26:d4:19:cd:10:4a:d0:83:ad:1e:91:1c:ef:9a:5b:bb:e1:29:
dc:62:3e:7a:1c:bd:66:8b:98:3c:52:46:e7:0a:77:7f:cd:25:
92:83:9e:05:af:ee:c1:33:3a:5c:ac:3d:fb:f7:9f:27:3e:a8:
33:5f:9e:14:b1:ae:d5:3c:55:6d:ea:28:82:a4:0c:d2:5b:14:
48:b1:84:ea:4a:93:5e:df:d0:31:86:79:98:80:a8:83:ee:97:
22:30:a6:e1:6f:b4:ce:9b:91:a7:bf:ee:49:94:ca:36:c4:1a:
42:61:d6:57:83:34:b0:0d:b0:69:fd:e3:3d:1b:74:8a:40:6a:
dd:9c:bb:b4:8d:78:6a:d9:58:55:50:22:8e:74:4a:47:7f:42:
27:92:ec:23:1d:01:ce:f7:12:60:eb:78:a9:39:39:8e:e1:56:
4b:40:68:68:0f:24:e1:13:12:36:2c:58:ef:9c:05:df:c8:2a:
3b:8c:0a:dd:78:30:96:75:9c:8b:2e:bb:01:c0:5f:27:87:73:
e6:56:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:26:40 2025 by rpki-client