
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: wsXbbkfrK9GNoL/T7BUGaEnC7Ld24qxH8s6GdA0YHAk=
Subject key identifier: 30:26:20:74:B2:A2:3D:8A:FE:0D:1F:05:A4:D7:A2:C6:00:05:78:31
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 0196C53ACC0AB86FFA62A29B3FAF2717C957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 07D6
Signing time: Mon 12 May 2025 16:01:26 +0000
Manifest this update: Mon 12 May 2025 16:01:26 +0000
Manifest next update: Tue 13 May 2025 16:01:26 +0000
Files and hashes: 1: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (hash: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: mWbY23z8fAIejarOyjeYc0iGIkKnj699ttokkvh3d3A=)
3: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (hash: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:cc:0a:b8:6f:fa:62:a2:9b:3f:af:27:17:c9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: May 12 16:01:26 2025 GMT
Not After : May 13 16:01:26 2025 GMT
Subject: CN=30262074b2a23d8afe0d1f05a4d7a2c600057831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:ba:11:9d:24:66:45:a9:f2:be:5d:48:14:
5a:09:fa:42:81:18:d0:0b:71:2f:72:50:43:59:98:
61:0d:4e:bd:d4:c0:82:b1:54:aa:01:30:43:27:97:
28:e2:fc:9a:72:10:4a:c6:c6:f8:a4:2d:46:a1:d8:
18:f6:c0:fe:19:a8:91:09:28:bb:24:e9:82:38:a2:
27:82:01:02:3c:db:ec:29:0c:3b:af:92:6e:92:76:
35:95:f2:dc:65:bf:cc:6e:29:eb:b0:80:55:27:cf:
92:b4:68:e3:83:28:db:a7:ff:c6:5a:d7:c8:0a:98:
b7:30:49:07:b6:1d:29:bf:ae:d8:0a:9f:fe:bf:39:
1e:2a:74:20:8c:18:3a:6c:71:2d:d1:f8:7b:c0:7b:
b7:c6:0d:90:a5:89:83:f7:e5:dc:c5:2a:98:66:9c:
de:36:66:4c:28:13:1c:45:25:3c:26:7a:de:2e:b7:
5c:10:32:27:2c:23:58:17:7d:5e:f6:aa:16:94:92:
43:78:1b:11:96:22:cd:f3:c5:84:8b:d6:a3:9a:07:
14:f1:fd:1a:18:da:d5:3b:04:8b:d2:d8:b8:3c:e6:
8b:7f:35:08:20:e2:28:12:23:7b:da:1b:0a:8c:9d:
96:be:48:8a:05:e7:5f:4c:8c:9d:22:8c:45:2e:ac:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:20:74:B2:A2:3D:8A:FE:0D:1F:05:A4:D7:A2:C6:00:05:78:31
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:de:38:c9:0d:13:bb:46:f8:64:dc:89:a3:6a:31:c6:ce:6c:
81:63:7c:1d:08:cd:84:03:f4:43:bc:1a:57:39:d3:85:80:c0:
14:b8:3b:b0:bd:4c:e6:6d:72:08:7b:91:3e:8c:10:94:b2:ff:
3c:3f:34:f9:75:2b:1f:0b:7d:62:93:dd:29:e1:2b:da:c6:63:
c4:fc:d5:c9:9a:47:3f:e3:8b:dc:ee:ef:f6:43:3b:d9:0b:76:
85:72:c5:a5:c3:7c:c8:43:41:c7:58:65:c1:8b:86:cb:f8:94:
be:3b:28:6b:26:de:83:f0:8a:e1:a5:ff:e9:28:17:01:cc:0d:
a5:46:92:67:d7:ec:98:30:71:93:c5:37:26:ce:de:29:fa:d1:
6c:71:08:5d:6a:36:48:2d:30:88:04:3c:f4:cc:7f:a9:6b:02:
15:ef:69:42:20:33:66:fd:64:07:39:38:c7:45:fa:71:b4:6f:
73:8f:74:d7:64:50:51:43:0f:d3:3a:e4:3b:96:7a:5e:ee:52:
28:cf:81:84:77:07:03:29:82:0f:0d:73:01:d6:65:78:e6:fa:
72:10:72:ed:8b:e0:42:c6:98:57:78:13:3d:60:bc:18:a5:4b:
14:fa:6d:fe:e9:95:f1:d3:ba:7b:8c:af:5b:92:04:f5:28:a0:
2b:08:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:02:36 2025 by rpki-client