Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: wHddlV92aomWhqzgrJHKx5xeMgHILzXbArk68l6h+Lw=
Subject key identifier: C4:95:78:97:64:53:A0:6D:53:4D:C1:AF:AC:87:6B:95:23:B3:5A:43
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 0196BEC9AF0196595EB8ED6D082572E17E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0721
Signing time: Sun 11 May 2025 10:00:10 +0000
Manifest this update: Sun 11 May 2025 10:00:10 +0000
Manifest next update: Mon 12 May 2025 10:00:10 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: TpRTkFAB4MrJ/V6q6IpKm3Xld+d9ysQyqo+yQ8EDb78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:af:01:96:59:5e:b8:ed:6d:08:25:72:e1:7e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: May 11 10:00:10 2025 GMT
Not After : May 12 10:00:10 2025 GMT
Subject: CN=c49578976453a06d534dc1afac876b9523b35a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:79:e6:eb:e9:34:e8:03:05:1b:dd:a9:ff:
75:f8:12:fb:fb:23:e7:81:e5:93:61:95:3d:a4:f8:
18:f4:2c:b9:f4:cf:b2:bf:47:a3:50:8e:9d:e5:70:
38:46:de:3b:09:dd:9a:a0:bb:90:13:65:54:34:90:
56:8d:4e:fb:27:99:c8:a8:b0:5b:1f:ae:eb:db:f5:
c7:53:1e:e6:f2:df:84:0d:14:6e:64:86:8d:cb:bb:
69:c7:76:d3:66:83:97:62:26:1e:97:d5:0f:27:99:
24:38:46:50:4c:cf:68:9f:08:03:af:8a:c8:a7:ab:
0c:92:ee:13:1c:10:55:f6:3e:75:94:e2:71:be:00:
38:80:98:95:6c:20:60:e3:32:1c:c8:05:61:3a:b7:
a4:59:5d:96:8f:0f:5d:75:33:b6:1f:c8:20:9f:f0:
b5:7e:ca:95:38:12:4d:fa:ee:79:d6:ba:a2:09:c6:
9d:b8:e5:38:71:da:f3:2a:11:6b:2c:1a:ca:c3:47:
fb:8f:66:c3:77:b5:f1:58:71:85:12:7d:03:da:cd:
74:be:c3:dc:06:46:34:45:95:17:30:75:f8:d2:7e:
c1:af:41:70:79:03:eb:f5:29:6e:31:67:ec:ee:76:
29:e6:cd:0d:10:1b:22:b4:75:2f:f6:e1:01:f3:74:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:95:78:97:64:53:A0:6D:53:4D:C1:AF:AC:87:6B:95:23:B3:5A:43
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:fd:7e:1e:c6:2e:49:c5:80:c4:02:c1:9d:f4:c6:01:62:
b0:0b:3e:88:38:8d:73:5b:13:a5:fa:f3:9b:ce:e9:7a:2c:b6:
15:02:90:a1:6e:c7:fe:49:c1:c9:9c:9d:a2:74:7a:d9:0c:a3:
b9:86:f5:b4:8d:56:59:de:93:ba:80:0e:6e:0f:07:ee:b7:b8:
ce:c9:1b:17:fc:aa:9c:86:24:e5:13:be:43:8a:65:3b:cf:b6:
2f:59:7f:6e:3f:24:33:92:49:06:d2:f8:1c:db:2f:37:d1:ee:
55:07:3f:ac:63:71:7e:f6:f5:3e:bf:16:ac:b8:2f:a9:4a:ca:
5b:f6:8d:b9:3d:53:96:dc:94:6d:b5:90:23:a0:90:92:e8:91:
93:62:aa:d5:7f:92:f9:4d:b4:4c:cc:91:6f:4b:76:e6:d6:c1:
58:28:7b:e0:92:17:8e:f0:bd:80:68:bb:8f:49:c0:85:81:2a:
eb:4c:1e:b6:07:22:96:a7:3d:fb:5d:f9:86:8e:25:db:4f:f9:
1c:31:22:c0:c5:08:ad:4c:44:62:c9:48:4e:67:31:2b:68:9b:
c0:08:a4:19:f2:fd:17:14:3c:54:12:ba:71:f6:dd:12:a1:f5:
93:92:7d:6d:eb:5a:8c:6d:5e:ae:18:13:a5:9b:a4:c5:bf:0c:
00:6b:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:30:08 2025 by rpki-client