Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: 5h/Upg+WeXeeuMQqJk2KkZXc5yhdLoFA9ZArEky4PaM=
Subject key identifier: DF:D3:48:73:BC:44:5A:65:9A:6C:20:07:75:5C:56:16:59:07:43:D2
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 0196B74762CE4909EABA4E630B1B1EA92375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 23:00:30 +0000
Manifest this update: Fri 09 May 2025 23:00:30 +0000
Manifest next update: Sat 10 May 2025 23:00:30 +0000
Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: 9Rshh19Ev65IR1v10cpumY2ph17PsjZxF6PHldNOHDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:62:ce:49:09:ea:ba:4e:63:0b:1b:1e:a9:23:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: May 9 23:00:30 2025 GMT
Not After : May 10 23:00:30 2025 GMT
Subject: CN=dfd34873bc445a659a6c2007755c5616590743d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:27:53:2b:79:fc:43:50:78:b8:5e:f8:16:db:
b7:56:d9:79:78:fb:08:1b:4e:32:5b:a3:33:f8:89:
5d:7b:64:11:f0:6e:28:8a:c5:b7:b8:9f:7f:4c:8f:
35:88:35:c3:35:65:8f:60:a6:01:e9:e5:9b:cf:72:
f3:8f:37:b3:f4:14:40:fa:4f:cb:0a:23:db:2f:20:
a8:51:f7:2b:3d:eb:b7:ce:33:38:c6:e3:68:c7:94:
5e:87:7a:1b:6d:ec:2c:ac:74:51:05:bb:65:37:5e:
5d:1b:ab:3c:d9:fd:f9:55:4c:a2:f3:82:b1:61:c9:
d2:42:9d:eb:f1:a2:a4:bd:02:02:6e:cb:db:f4:26:
97:a4:17:4e:2a:30:59:52:15:69:7c:36:53:af:47:
a3:7e:21:17:83:31:f3:c4:18:09:14:ed:a8:4a:d2:
a8:b6:40:86:25:2b:34:b5:be:ca:d2:a9:c3:22:d4:
60:61:52:57:98:f3:21:ba:69:09:c3:5c:45:57:36:
f9:6a:b8:2c:d4:9a:f5:19:12:92:c4:d6:52:94:9e:
3d:a2:55:9b:1c:ed:1b:b6:ef:ae:5f:17:5f:60:47:
95:77:9d:cf:3f:fa:14:e4:de:98:c3:99:53:d7:c7:
77:56:ab:da:c9:bd:e9:b1:52:45:31:42:8a:e3:5d:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D3:48:73:BC:44:5A:65:9A:6C:20:07:75:5C:56:16:59:07:43:D2
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4a:3e:96:6d:e8:a3:b1:19:1d:d6:6c:f3:c2:ab:1f:d7:ae:
80:ea:5a:dc:21:83:9b:a1:8e:3f:52:5e:34:7e:dc:ed:8c:32:
fa:93:f0:31:9c:25:65:23:21:5e:a7:2c:96:dd:f9:cb:dc:e4:
bc:b5:40:b1:df:2b:f4:24:73:24:8c:68:da:bb:c0:34:ab:30:
8f:14:cf:d7:ef:eb:52:76:04:85:1a:df:ab:43:90:6e:75:4c:
c1:93:ca:33:0f:ac:4a:ef:77:bc:bb:10:55:a0:0d:af:2c:15:
a7:5c:14:b1:c6:4d:5a:f7:0a:24:db:b9:d2:13:f3:33:16:d4:
66:fd:5d:c2:da:bb:b1:cd:d9:da:d8:57:9e:27:7e:0e:e4:b2:
ee:78:2e:27:a8:8e:36:79:d8:35:e1:9a:ab:9d:b1:d2:9d:67:
fa:c1:0d:47:c9:f3:a5:88:74:ed:fc:12:4f:b0:28:23:bd:00:
1c:76:ba:d5:0a:b6:4a:8c:08:fb:6a:f8:34:a0:49:8a:d1:85:
74:d3:2e:8d:f8:27:76:35:4e:f9:75:d7:b8:41:a9:20:ca:88:
74:e7:11:01:43:10:cd:d6:5f:cc:3e:82:cb:53:8c:8b:13:e0:
f3:c6:c0:88:c0:99:cd:bc:69:c8:fa:e2:88:e5:fc:4f:19:33:
2b:fd:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:32:51 2025 by rpki-client