Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier: qnjf7hlGCIBpBL6MKXFGDh0+FORtGHrYinT7Z0dgPvs=
Subject key identifier: 9D:AC:78:BF:0B:F2:12:47:B4:DE:FE:BD:16:21:49:CB:BF:7F:02:C2
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 0196C2A6FAAFEA21F0B8FC4BC5DA36BAD586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number: 05B2
Signing time: Mon 12 May 2025 04:00:45 +0000
Manifest this update: Mon 12 May 2025 04:00:45 +0000
Manifest next update: Tue 13 May 2025 04:00:45 +0000
Files and hashes: 1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=)
2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: JAbmQSCidoiYhkbaoxglaGSfTk7bdFYaQxCWqcpdBcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:fa:af:ea:21:f0:b8:fc:4b:c5:da:36:ba:d5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: May 12 04:00:45 2025 GMT
Not After : May 13 04:00:45 2025 GMT
Subject: CN=9dac78bf0bf21247b4defebd162149cbbf7f02c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:83:97:56:bc:83:49:c3:a6:45:6f:9a:ba:
f9:a3:b0:a5:95:8e:2e:6c:01:dc:47:96:16:51:92:
ef:be:f4:00:55:19:8c:0a:af:da:ab:66:96:75:b5:
b3:9e:66:80:78:3b:34:99:bc:c9:2b:51:03:bd:8e:
a1:35:dc:13:f3:d7:b9:33:e6:bb:d9:74:ab:06:68:
40:26:60:79:30:0b:dd:8f:d5:04:53:3d:54:54:88:
d9:10:16:cf:d1:3a:2a:62:4a:34:16:95:12:58:bd:
4e:61:20:4e:52:a1:84:7f:ed:e0:34:4b:cb:37:72:
4e:86:08:1b:9a:db:47:84:c9:aa:9f:50:be:41:74:
40:57:37:e4:e7:11:93:61:78:f3:71:dd:5f:3b:8f:
f7:38:6c:00:e1:49:fe:91:f2:8d:be:1f:5a:c2:c9:
57:8f:cb:e6:31:96:85:61:c1:cf:b5:58:91:e7:9b:
83:41:05:72:18:49:2e:43:25:23:c8:05:f2:f3:f4:
88:df:e0:f7:41:e6:40:4b:03:e9:2c:77:b8:31:c8:
3a:36:51:ee:72:24:e1:3a:54:7a:d1:68:4a:b8:be:
bd:9e:ed:90:31:54:8d:8e:ab:47:a7:a6:b0:51:54:
3a:72:6e:d2:97:c3:aa:18:11:27:df:39:1a:4c:1a:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AC:78:BF:0B:F2:12:47:B4:DE:FE:BD:16:21:49:CB:BF:7F:02:C2
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:82:bb:2e:5b:7d:05:e0:a5:d0:f6:aa:20:ae:52:89:b1:26:
5e:71:4a:2c:f8:6e:7d:1d:b4:99:e4:16:73:df:0e:97:bb:52:
9a:4f:2a:7b:21:43:78:8c:f6:fe:39:63:91:09:f1:dc:2a:16:
22:9d:c2:0e:01:d7:07:46:75:27:b6:9f:e0:00:9a:4b:22:43:
b3:ed:1d:92:6e:14:0c:d2:c7:0e:05:d7:28:db:3a:8e:1c:ad:
f9:12:b3:a4:3f:7c:a1:60:4d:00:6b:cf:f9:16:14:07:b1:98:
7d:29:41:83:71:3e:b3:3b:8b:1b:14:80:43:88:cc:8f:38:51:
d5:cb:c2:13:67:0b:3e:7f:00:f9:20:82:42:90:f9:a6:97:af:
88:08:3b:ea:fa:b2:d1:1f:c6:f3:69:64:8a:f4:68:f2:f7:8e:
1d:2a:67:15:13:b1:8f:5c:05:7f:22:0d:a1:16:db:54:13:19:
85:a3:95:c7:ad:2a:ea:e3:ad:31:71:d9:b5:3b:49:25:50:e1:
f9:29:82:f5:13:40:87:74:d4:6b:7c:d9:57:0e:e9:94:5d:b5:
58:d0:94:5d:b3:25:94:72:01:4a:5d:a7:e3:16:6a:5f:4f:16:
6c:e6:82:c4:a6:4c:ef:11:9d:cb:11:84:bc:73:bb:22:bd:4b:
8d:37:96:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:17:19 2025 by rpki-client