Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: WZEwvS0KUWJY0ZMpatXeJadjf05JzSowmvHUHlTP0MQ=
Subject key identifier: 6D:2B:97:D8:48:EA:F8:E2:0E:66:A0:65:D6:13:50:EE:06:4F:DA:44
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 0196C193FE9E50FDD4896CB11DAAE87BB3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 46
Signing time: Sun 11 May 2025 23:00:23 +0000
Manifest this update: Sun 11 May 2025 23:00:23 +0000
Manifest next update: Mon 12 May 2025 23:00:23 +0000
Files and hashes: 1: gOfoa2pPlaad7aZSKOqxTDZnDnw.roa (hash: zWq54+d7Qdr/RiwPHS0cYGrr+8mtcUBj3tD3UQ2c23s=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: /KOzr3fQ82gYiL8PJzo5tqEfoY62PW/flZEZiT739mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:93:fe:9e:50:fd:d4:89:6c:b1:1d:aa:e8:7b:b3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: May 11 23:00:23 2025 GMT
Not After : May 12 23:00:23 2025 GMT
Subject: CN=6d2b97d848eaf8e20e66a065d61350ee064fda44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:84:43:c7:7b:7c:75:bd:61:08:e4:09:42:
2d:c4:02:9d:50:f8:41:a5:1a:29:70:c9:70:cd:af:
f1:29:5c:a7:38:f6:e1:65:f5:e5:5a:e9:af:98:2e:
24:71:05:33:c3:8f:22:9e:57:cf:b1:f1:45:a7:e0:
f2:83:db:f5:2e:f1:d3:54:30:7f:3e:39:da:ea:c8:
a2:5c:48:1e:6d:6f:d6:73:e4:57:71:0f:1c:94:a5:
bd:6c:16:ce:d1:6d:31:ad:f9:79:db:4c:75:e5:18:
aa:80:94:a3:1f:b3:85:8c:14:d8:98:96:41:96:55:
34:7c:42:68:3b:05:80:d9:1b:ac:74:73:8b:f9:7f:
9c:75:3e:fe:de:68:bb:c3:75:bd:6c:45:39:45:44:
25:4e:e7:e3:f7:10:b6:2d:7e:2a:bb:5a:41:e7:07:
e4:76:45:55:cf:fa:ac:e0:c4:5a:c2:6e:6d:a9:eb:
da:b6:92:b9:29:d1:5c:ea:36:39:12:4a:c9:e9:16:
73:c9:8c:3f:5b:98:13:76:7a:f4:78:89:f5:d5:4c:
c0:c0:f9:82:89:f9:d8:09:80:61:b0:b9:ed:53:2a:
0c:e7:5f:53:d4:09:bb:2b:4b:08:62:51:95:5e:be:
ef:cf:91:b0:40:7c:77:ca:81:1f:00:53:3b:5d:f9:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2B:97:D8:48:EA:F8:E2:0E:66:A0:65:D6:13:50:EE:06:4F:DA:44
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:76:66:c3:67:3a:5b:b4:da:f2:fe:88:cb:99:68:e4:d4:77:
62:37:72:68:45:60:1a:28:52:eb:62:d1:b6:40:a9:2e:ce:b7:
d5:78:9c:5a:6e:97:c0:b8:05:8c:1c:55:8e:ff:45:28:37:27:
9a:d9:c0:5c:05:8e:f2:46:28:e0:3b:bf:df:ce:d8:c1:20:e0:
87:f5:7e:f2:3b:73:50:3f:80:38:9e:90:eb:74:86:49:db:35:
bb:3c:f5:56:11:49:71:db:9e:3b:15:03:10:97:18:ca:4f:3a:
69:9e:f2:0f:5b:d0:69:b1:3f:6c:46:12:46:b5:c5:8e:c3:c2:
29:4e:3d:e8:d1:11:8c:8a:5c:1d:06:72:a7:11:47:b8:c3:44:
88:6c:3c:4a:0e:ad:fd:ae:49:da:ca:e1:ff:18:14:84:9f:54:
4f:45:c3:7c:53:84:f1:51:e6:6b:71:3c:85:07:b2:41:fd:77:
77:ef:09:43:3a:f7:88:5b:54:39:2a:b4:9d:83:c2:42:92:d7:
e3:fc:61:d5:34:ce:00:47:7d:ca:4d:d3:77:34:96:92:10:93:
fe:2e:15:26:fc:c3:e0:83:3d:bb:51:4c:c8:24:e4:6e:9f:64:
da:7b:1a:01:93:d2:6b:70:a0:12:6b:d5:1f:b9:0b:25:86:28:
d9:aa:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:09:42 2025 by rpki-client