Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: vs526UUaxd/ny39JZqNNKg+Y29asP1G8+r08o2xeGX8=
Subject key identifier: 5B:19:5C:8C:B9:32:CC:FB:A7:32:57:CC:9E:F8:0B:E2:07:69:EA:07
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 0196CBE15B62CD74CEC4C9741A7BED081444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 0EB9
Signing time: Tue 13 May 2025 23:01:05 +0000
Manifest this update: Tue 13 May 2025 23:01:05 +0000
Manifest next update: Wed 14 May 2025 23:01:05 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: M3CVhJgGzgcyCwE+nxLQDE98n7SO3x+MtvOjT3xe+eA=)
2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:5b:62:cd:74:ce:c4:c9:74:1a:7b:ed:08:14:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: May 13 23:01:05 2025 GMT
Not After : May 14 23:01:05 2025 GMT
Subject: CN=5b195c8cb932ccfba73257cc9ef80be20769ea07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:d2:fa:1f:5c:92:fd:54:e1:8f:00:76:ed:
23:86:fa:e1:84:03:b9:63:94:c5:06:2c:3d:73:9a:
2e:a8:ed:e7:40:43:cf:f2:2e:1d:fd:1b:c5:86:44:
aa:52:6f:01:59:13:d6:95:68:d4:4e:6c:3c:52:3c:
2f:c9:8e:b9:aa:eb:0a:24:58:48:57:8c:93:88:82:
03:50:c7:1a:97:22:14:12:5b:6f:09:99:55:3f:aa:
40:26:7b:ee:c9:40:d4:c7:35:7a:65:ec:e2:61:ff:
fd:fe:7c:cc:67:9d:4d:68:38:dd:d2:fc:8f:3c:a3:
59:46:19:6f:67:8e:3f:e1:ef:6b:24:17:11:31:4a:
ce:5a:ea:ef:ed:ce:34:78:ce:f4:1e:55:d7:d2:46:
35:bd:bf:ba:fb:57:75:e5:e8:2d:38:ba:99:6f:55:
6f:66:15:3c:ba:cc:da:f2:95:4b:b0:9d:e3:41:1a:
66:ce:fb:ad:2b:7d:28:e8:04:6a:88:9d:c5:b7:4f:
0f:de:60:4a:d8:42:f2:e7:5c:76:8f:99:02:66:84:
96:57:ea:55:5f:1b:57:ff:9f:fe:09:c5:04:7f:03:
2d:25:d7:84:4e:67:08:68:83:eb:e0:27:6b:d6:66:
42:6b:d6:ea:c3:53:3e:52:c7:95:af:ae:ba:92:0d:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:19:5C:8C:B9:32:CC:FB:A7:32:57:CC:9E:F8:0B:E2:07:69:EA:07
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e7:fa:04:44:42:67:af:9e:1c:ec:4e:76:9a:7d:93:e4:13:
ab:0a:42:3e:bc:1f:38:41:28:64:cc:fc:42:cd:1e:91:28:60:
ee:28:05:b6:f0:a1:20:47:cc:8c:ae:dc:c2:99:cf:c3:b4:a4:
56:8b:98:22:a2:bf:7e:08:d9:ae:24:1c:6a:80:14:4f:e9:7b:
9b:37:b4:fd:72:25:17:8d:b3:bd:38:05:f7:57:ea:18:59:ed:
5d:aa:fc:20:8f:34:b9:e7:76:be:3c:a9:5a:f3:ff:79:49:06:
97:1c:9f:8a:74:b3:03:35:95:a5:4b:e3:ca:86:4f:07:4f:9a:
e4:1b:88:32:3f:0f:fb:b0:22:20:30:8e:c9:ed:c1:01:6e:43:
6b:c1:e5:21:db:fd:ba:94:54:55:88:35:e4:0b:11:c3:5c:bf:
ca:a6:ee:0d:33:33:34:74:fd:e0:48:b6:fe:75:7f:7e:11:d0:
78:b8:d2:f7:83:6a:65:a9:22:45:ec:a7:14:7d:0a:eb:a7:09:
1a:c4:16:cf:d3:be:7e:89:67:26:8b:dd:07:e6:f4:29:3b:8d:
20:10:0a:0e:1e:f1:41:d6:db:9e:af:90:09:6d:69:43:ca:87:
e3:a3:3f:dc:4b:15:75:7e:ed:9f:01:cd:34:1d:74:3e:46:29:
1f:4b:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:14:06 2025 by rpki-client