Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
File: ttFBGNvSJymNqoDHrKsR7qbWPiE.mft (raw, json)
Hash identifier: yGLaZoC5/NP/ayLEp0hWeroqmkKLsUqVUpa9eunIjLY=
Subject key identifier: A7:09:7E:82:0B:C5:38:8C:99:93:3E:F9:AB:AD:4F:45:C4:E0:6F:E4
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 0196B935F7C79B0411C48A3176D74FD09B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
Manifest number: 1547
Signing time: Sat 10 May 2025 08:00:43 +0000
Manifest this update: Sat 10 May 2025 08:00:43 +0000
Manifest next update: Sun 11 May 2025 08:00:43 +0000
Files and hashes: 1: 7MBZP4USFz5hPGotD8N5VTxiCh4.roa (hash: xrZIN20uzCUHnquaIR7JyCpdhy6O1fXdg0ZyfCtPx1A=)
2: _-vCy7ICzJgkXfJZ75qxspKlSv8.roa (hash: jMbO+xgYxKlWrIGWglTequYy9eTc9dUkDdUL8kvtI4s=)
3: ttFBGNvSJymNqoDHrKsR7qbWPiE.crl (hash: rR9uVLi2tVeDZvC7uSjySofBeWI04g2leaP1FTnKBKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:f7:c7:9b:04:11:c4:8a:31:76:d7:4f:d0:9b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: May 10 08:00:43 2025 GMT
Not After : May 11 08:00:43 2025 GMT
Subject: CN=a7097e820bc5388c99933ef9abad4f45c4e06fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:eb:80:8e:02:64:b2:e9:f9:87:86:02:29:
4e:ce:39:f8:06:71:14:c8:b7:4a:ac:24:13:62:44:
cf:ad:9a:18:d1:75:39:79:16:e1:fb:00:1d:c0:73:
83:ea:97:ce:ff:c7:2b:f6:7a:d8:e2:e7:ed:1f:3e:
2a:d3:6d:d3:1f:2d:f0:00:86:05:07:67:c3:fd:45:
7d:e9:14:d0:ee:51:ad:e7:94:93:35:14:e4:13:e7:
78:48:82:fa:7e:2f:43:38:29:38:f3:1b:ea:84:dd:
5c:20:79:be:4e:c3:cf:7b:f5:b2:94:54:65:f7:e0:
c0:42:f2:df:f1:91:89:3c:8e:a3:1b:f0:67:a1:57:
f1:eb:bc:da:30:c6:e4:23:f5:f0:6c:8e:96:3d:92:
d6:44:5d:99:37:4c:bb:4c:2a:92:23:c6:7d:7f:23:
78:0b:dc:ec:b5:3f:9d:36:85:4f:63:87:01:90:dd:
4b:11:59:d6:95:2e:a7:3f:18:a5:bc:26:1f:66:3d:
5d:1d:94:e0:04:b5:36:12:df:d1:32:a9:9b:a8:64:
be:db:4e:00:08:78:d4:40:f1:9b:17:d3:d9:98:58:
dd:80:bb:24:2a:7d:26:44:3f:0c:e4:1b:d5:ac:d0:
0b:9a:df:58:70:5e:2c:19:1f:c2:65:31:ef:14:af:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:09:7E:82:0B:C5:38:8C:99:93:3E:F9:AB:AD:4F:45:C4:E0:6F:E4
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:39:a8:3f:80:b2:6c:ce:25:ff:99:ad:30:f8:07:31:40:50:
9d:5d:df:b3:27:78:75:42:9c:ec:91:5d:a0:be:51:c4:dd:c1:
f4:40:7d:e7:d6:8b:5a:6e:65:f1:83:d5:78:99:8f:30:93:1d:
3e:86:21:17:ee:05:a7:42:79:10:eb:22:c3:34:76:bb:c5:42:
28:b5:ae:36:75:bb:80:08:38:6a:c5:31:fd:68:c2:b4:eb:9a:
29:62:f6:59:6c:a8:3c:bc:10:e1:1d:db:df:11:db:06:7f:97:
ff:c0:dc:42:fd:67:07:12:ac:93:80:e3:a0:a7:b5:73:3f:fe:
4d:94:6e:12:23:b3:2e:55:cf:5f:d2:2f:8c:bf:8d:46:8a:aa:
d6:a8:18:74:fc:cf:8e:82:4f:d1:6a:2c:08:ed:a6:da:f9:1a:
3d:71:e5:ce:f3:b1:05:45:bd:73:0a:44:95:6a:1a:3c:57:7c:
4c:19:d4:58:75:83:0f:bc:97:c3:c6:8f:99:a4:5f:c9:68:38:
ea:dc:6a:c8:cb:7c:0e:f3:e2:69:ad:06:03:32:15:5b:b8:bf:
ff:21:f6:8a:88:7d:a7:a4:69:de:dd:9f:31:d6:2f:37:4e:9b:
60:35:5d:be:b0:ad:28:85:f3:35:4c:5d:e9:bd:6a:e3:d5:13:
67:0c:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:57:35 2025 by rpki-client