Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: XPVEJQsCmAQboUiTmnAUSPHvCzAGVCjCn8C7DnB4/mI=
Subject key identifier: 65:E2:B9:D5:B1:D1:03:F7:2C:74:08:C1:35:D4:43:EB:2F:DC:65:E3
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 0196C5A7FED862B7F37D13A7330F66457394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 153C
Signing time: Mon 12 May 2025 18:00:43 +0000
Manifest this update: Mon 12 May 2025 18:00:43 +0000
Manifest next update: Tue 13 May 2025 18:00:43 +0000
Files and hashes: 1: A19KF2VhmqgRITxahuDcRts8KJs.roa (hash: YirbVHhxW1CKNUwQAz3dz5QapLv5A3zZT5MHBNEVZ34=)
2: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: KPraydy0cPqhrZgHBYIXTP9O0ncIEZkY7c//lswIcz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:fe:d8:62:b7:f3:7d:13:a7:33:0f:66:45:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: May 12 18:00:43 2025 GMT
Not After : May 13 18:00:43 2025 GMT
Subject: CN=65e2b9d5b1d103f72c7408c135d443eb2fdc65e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:4a:c2:77:39:f0:b5:7c:c1:fb:04:fd:9a:
94:d9:19:98:ea:ba:ff:6c:6b:27:eb:6c:79:83:75:
8c:5a:e5:68:a9:d1:a1:72:db:7d:a7:c3:8e:7f:40:
f0:8d:23:10:92:58:46:07:d5:67:c7:f3:1e:24:e7:
80:12:b5:12:d3:8f:ff:ad:e7:df:00:1c:67:36:43:
95:fe:71:53:bd:02:9f:f4:6a:f1:fa:5e:a1:c8:0f:
b8:3f:d9:bc:17:e3:8d:d0:d2:87:c7:68:c8:42:ae:
d0:81:e8:48:23:d6:2e:7d:6a:ea:8d:c2:39:f5:b7:
c1:f9:fe:f1:b3:3d:7c:29:da:89:b7:03:f7:94:69:
7c:74:01:64:4f:85:62:63:9e:63:64:2c:14:09:32:
23:f8:45:f5:1f:f8:0d:73:81:a4:b2:ed:96:9c:49:
ce:79:d9:53:2d:32:90:31:da:f0:54:b0:67:b6:75:
e0:43:cc:4c:aa:90:25:c6:f0:6d:3d:00:a8:ab:16:
af:c0:41:cd:c2:91:c2:5a:2d:f7:0d:bc:4c:28:4f:
6a:c3:e4:7b:bc:7e:8a:7f:71:34:80:84:70:ef:b5:
bc:bd:ea:aa:cb:26:da:2f:1e:4a:39:92:fc:1c:7b:
b7:eb:6e:78:b7:4d:4b:4d:08:b4:6b:a9:57:91:c8:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:B9:D5:B1:D1:03:F7:2C:74:08:C1:35:D4:43:EB:2F:DC:65:E3
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:91:3e:67:ee:01:7f:00:91:40:b8:14:2f:34:35:7d:87:3d:
71:a7:32:38:f4:39:be:7a:fe:0b:29:d8:f4:17:da:71:8b:f2:
8b:2e:96:fd:2b:0e:d3:df:43:cb:c0:9e:8a:5f:a3:ab:e4:07:
1f:d8:8d:b5:60:75:41:96:39:81:4c:41:a7:c2:ba:01:ed:b8:
fe:7b:6a:77:d5:b5:3f:35:64:74:c2:3b:c8:80:3e:4d:37:87:
81:ad:f7:6f:bf:c3:66:c9:55:a4:cd:ca:f1:78:52:39:e5:e8:
60:19:36:28:88:05:b2:46:5e:91:2a:72:37:30:01:a1:bf:43:
6c:1b:10:b2:e7:7a:17:83:26:d8:19:89:f2:3c:05:14:19:f7:
b4:cc:a0:c6:95:6f:72:fd:c2:fd:fe:22:6e:c6:69:2c:07:0e:
4e:87:6c:ce:98:c5:da:41:26:73:47:95:c9:69:48:07:dd:12:
1d:58:0c:0e:96:4e:4c:12:6c:b2:93:15:5e:3f:58:ac:90:2a:
d8:2d:4d:fd:36:04:9a:99:75:0e:cc:7d:1b:70:10:f2:c4:20:
a4:d0:f7:c2:b7:44:11:90:88:e2:fb:2a:69:de:0f:cd:89:cb:
ab:a9:e6:08:11:97:12:e6:9d:a4:31:db:f8:be:00:42:93:6a:
1d:ba:ef:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:17:05 2025 by rpki-client