Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: nd8tpR7wd8R/gX+6IE345P/XNMZjQAVBQY5x0hAlAxU=
Subject key identifier: 88:60:E8:72:1C:D3:30:AB:D7:8E:1C:00:2A:88:53:08:91:F7:15:7B
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 0196C1CBAAAF0386A8E94AB85DFD75C8B250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 021F
Signing time: Mon 12 May 2025 00:01:12 +0000
Manifest this update: Mon 12 May 2025 00:01:12 +0000
Manifest next update: Tue 13 May 2025 00:01:12 +0000
Files and hashes: 1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=)
2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: GL3b4IXhuvWLnk8tkKgCTS0odvxjBcPG/OG4JDbUVYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:aa:af:03:86:a8:e9:4a:b8:5d:fd:75:c8:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: May 12 00:01:12 2025 GMT
Not After : May 13 00:01:12 2025 GMT
Subject: CN=8860e8721cd330abd78e1c002a88530891f7157b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:d0:0b:61:ce:58:41:64:e1:ce:02:7c:b9:
1b:3b:ec:e7:94:dd:97:65:d7:ac:cd:32:f7:d3:c2:
65:6e:6b:05:6e:14:8c:83:b1:ce:3a:26:dc:ec:1b:
7b:f5:f4:7e:aa:a1:2e:17:a3:97:94:c8:90:82:d5:
93:e9:41:f6:f5:a5:69:2c:47:ad:bf:1e:9c:30:f9:
ea:d7:ac:45:22:21:74:11:3f:02:f1:e6:03:84:32:
45:28:73:60:fe:41:6c:e4:4e:5a:5d:5e:bf:fb:cc:
5d:b4:de:7d:58:6f:c0:1d:7a:3d:d0:f4:cb:22:88:
7f:ec:0c:12:03:36:10:60:d5:e8:ce:64:7a:94:22:
11:7b:ad:8c:48:9b:27:a9:42:c9:40:49:43:5a:19:
31:29:9f:53:34:55:73:26:ff:5b:5b:1d:a7:15:b8:
d6:79:14:7a:2f:c7:97:0a:e0:aa:56:e1:69:8a:50:
67:ca:06:c6:f1:55:fc:e4:8f:48:1e:0d:e5:48:79:
8e:d6:d0:94:d0:6f:7f:9e:f2:76:a0:96:6a:20:5a:
01:e9:1c:29:e7:b0:5b:91:65:51:f2:4d:dc:65:d2:
69:23:f6:95:59:a5:92:56:30:54:09:9d:ed:17:7f:
2f:6f:02:10:b7:22:3b:c6:1b:1a:6f:b4:97:be:2a:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:60:E8:72:1C:D3:30:AB:D7:8E:1C:00:2A:88:53:08:91:F7:15:7B
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:23:92:28:5e:c3:2b:a1:da:96:17:b6:3f:c7:4c:6d:08:93:
31:f5:94:50:28:57:4a:5d:c7:24:c8:dd:0b:26:bd:b4:99:3d:
92:64:71:f2:fb:8b:d7:43:44:cf:3c:33:d5:17:8a:f1:fa:53:
1b:a0:08:27:25:48:f0:26:90:ed:7f:98:6c:c8:7a:ef:08:36:
4b:1d:e3:5f:b4:9e:a8:80:cb:14:c6:45:ed:a6:84:21:1f:8a:
4d:59:bc:39:0f:f1:d4:2d:3f:7b:94:b3:6d:c5:d4:d3:1e:17:
f3:c6:d7:ab:ab:c1:67:00:aa:15:0d:d9:da:68:16:bc:ba:94:
b3:c6:34:4f:a6:27:7f:c3:18:32:72:7e:7c:1f:97:7a:89:22:
7d:c2:05:97:14:af:4c:a1:93:93:4c:75:e3:89:7a:0a:ed:35:
80:9f:aa:1d:54:b5:c9:89:77:6c:79:30:8f:cb:ed:91:d8:71:
22:e7:0d:f1:d6:cb:15:4d:27:7f:4c:a1:a9:57:38:e9:f0:8a:
54:7d:fa:81:f1:c2:94:20:e4:29:f6:a8:03:10:cb:01:ac:25:
46:6a:bd:df:50:46:34:1f:4f:a2:bc:bd:b6:61:29:c6:20:c7:
b0:a2:a2:fb:1b:85:a1:f7:58:d2:56:92:4e:3c:b3:8c:cd:28:
c2:d8:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:14:56 2025 by rpki-client