Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: 0LfGoNgZ6vEILnnp/J92ApGPe0SangHPFZK221er6D0=
Subject key identifier: 01:C1:F5:FE:78:F8:95:06:FE:CB:F6:0B:65:B8:3A:35:B2:FD:D1:24
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 0196C5DEA375E2FA693F38C6B4FE63B71267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 19:00:24 +0000
Manifest this update: Mon 12 May 2025 19:00:24 +0000
Manifest next update: Tue 13 May 2025 19:00:24 +0000
Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: 8tuRLi0ADCSelL2rbeTLP9wc2wWchGjtu6Jb/l4bXvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:a3:75:e2:fa:69:3f:38:c6:b4:fe:63:b7:12:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: May 12 19:00:24 2025 GMT
Not After : May 13 19:00:24 2025 GMT
Subject: CN=01c1f5fe78f89506fecbf60b65b83a35b2fdd124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:98:ac:df:a3:72:bc:45:ec:81:00:b6:d1:
ef:c4:e4:ea:12:78:1b:b0:64:36:2b:96:d8:6e:f0:
aa:b0:1f:bd:62:92:de:df:9a:b3:33:66:7c:e9:63:
9d:9e:15:ad:51:da:df:1f:6b:4e:cc:69:8c:78:92:
65:a4:be:34:12:9e:d0:ed:f2:19:23:8f:34:22:98:
26:58:74:08:73:d2:10:74:01:20:13:dd:e5:ea:fa:
b8:97:a7:f9:01:0e:6b:08:1f:73:97:b5:72:f2:2c:
37:a0:8d:cc:c7:db:53:99:d7:4a:28:b8:fd:c9:40:
d9:d2:1b:5d:55:31:da:38:4d:ae:e6:ff:87:a6:73:
73:13:55:3a:8f:98:53:b1:40:b8:10:97:3c:87:32:
3e:05:42:39:39:62:69:5b:67:f2:11:21:40:3f:35:
02:01:18:b5:c2:8b:4b:bd:80:5d:43:12:41:a1:81:
2a:4b:19:ee:88:3c:e3:56:76:0c:f9:d8:55:85:b6:
13:99:2c:31:28:f3:4a:db:82:64:b3:51:31:19:75:
4a:10:13:a3:99:0e:9b:b0:43:36:59:78:02:2e:46:
78:ea:03:c9:73:51:42:95:34:46:6e:e3:75:1a:85:
c4:81:5f:27:be:fa:c9:4a:9f:e5:47:ce:ba:e8:be:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C1:F5:FE:78:F8:95:06:FE:CB:F6:0B:65:B8:3A:35:B2:FD:D1:24
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cd:43:de:55:c4:91:09:be:c0:8e:c9:65:70:02:29:03:0b:
2b:6c:b6:79:b3:41:fd:73:d9:da:90:28:8c:e7:40:a5:cf:e7:
c7:6e:6f:eb:12:02:d9:8c:47:ca:f4:8d:fc:44:34:a9:20:45:
c0:8e:c2:d9:74:84:27:a2:93:5a:20:30:41:3d:57:b4:52:44:
65:f6:59:f6:d0:c9:3b:f1:1e:43:50:1e:38:fa:de:7a:fb:2a:
e2:f0:36:17:e2:f8:6c:d2:de:f1:39:7f:67:c3:c8:8f:a9:18:
b9:e3:06:e2:eb:e5:57:5e:93:e9:4f:6a:0d:a4:e8:70:1b:5d:
64:60:4f:3b:b2:fd:89:8a:c5:c4:f9:82:36:f5:7e:28:2a:c6:
d4:31:a8:2d:12:97:ec:4d:45:cc:a8:5c:b2:11:de:83:94:a0:
b8:3e:63:f9:b0:ec:de:7a:f1:ca:ca:5a:7c:60:c5:b1:01:40:
6c:64:64:ed:74:26:d1:0d:30:31:8d:ad:8a:e9:6d:50:f8:8a:
0e:93:00:e9:8f:17:94:0d:b6:93:de:18:fb:32:ee:79:1a:b6:
6d:50:db:4b:54:1e:7f:69:0d:ee:91:49:4c:ff:82:99:28:e5:
e6:bf:fb:14:36:bc:3c:c5:32:c2:60:69:25:8a:4d:76:81:03:
ca:b3:c9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:34:43 2025 by rpki-client