Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File: tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier: V9jMvvnqvWgiaSErmiHKyMv6dWJQPlMrHi6nxYr7VFg=
Subject key identifier: 60:1D:28:7E:B6:F9:A5:A2:84:64:FB:89:2D:3D:2F:1D:D9:4A:B8:0B
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial: 0196BF381C5A34F51CE1170CD7AF12CF9FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 12:00:47 +0000
Manifest this update: Sun 11 May 2025 12:00:47 +0000
Manifest next update: Mon 12 May 2025 12:00:47 +0000
Files and hashes: 1: 8c1jWLNSWx4cTuK9ZEnAPJAmwwU.roa (hash: zNldb7jsDCF4ycQz0X2hLLJLeALZnhbBqN35ToOj1oI=)
2: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: g8jrVI3Qg9oHoHUBYkg9nFtf3yvcJkOESvlBASaTnjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:38:1c:5a:34:f5:1c:e1:17:0c:d7:af:12:cf:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
Validity
Not Before: May 11 12:00:47 2025 GMT
Not After : May 12 12:00:47 2025 GMT
Subject: CN=601d287eb6f9a5a28464fb892d3d2f1dd94ab80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:92:e6:8d:81:1e:02:cd:54:02:d0:b2:23:
3d:1d:f4:2f:2c:ce:33:3d:40:cc:98:df:34:42:d0:
39:d0:c6:2e:79:49:9f:ee:c2:27:74:55:c0:6d:d8:
cf:ac:20:e3:18:b5:8b:97:22:fa:b3:b3:60:09:a6:
ad:75:3d:f9:0f:28:59:2c:75:93:d2:4e:29:35:a2:
0e:fc:40:c2:10:87:75:ea:c3:ab:24:d6:32:2e:86:
1b:7c:1b:70:c3:ba:a0:08:7d:b1:43:93:42:59:d0:
ce:7b:ec:ad:5d:36:f3:9c:21:7a:e7:1a:1f:80:8d:
83:51:0c:14:c0:d1:dc:77:ac:4f:4e:45:d9:4d:62:
2a:4f:b1:b1:cb:f1:cc:14:d0:d3:dd:4d:2c:3b:6d:
bf:b8:a7:d8:21:fe:24:e3:c7:3a:9b:d0:ae:c9:10:
64:72:ef:4b:1d:6b:4f:80:30:d4:f7:80:e2:54:df:
15:96:ab:e8:73:61:1b:78:32:a1:c6:e4:fb:42:6f:
97:fb:ae:de:02:a9:97:50:93:b6:1b:75:16:05:86:
a7:9b:85:cf:34:de:e6:70:4b:b4:00:de:4d:a0:7a:
a3:d7:ae:d8:3e:cb:2b:04:95:c2:a3:9a:1d:61:8f:
a2:46:7c:73:1d:95:f0:3d:80:60:d2:0f:99:74:c8:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:28:7E:B6:F9:A5:A2:84:64:FB:89:2D:3D:2F:1D:D9:4A:B8:0B
X509v3 Authority Key Identifier:
keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4e:8c:db:d5:03:d1:24:4f:ef:53:95:8b:24:2f:94:4b:e0:
68:17:36:fc:f5:9f:0b:be:d5:ec:9c:68:b5:e4:a1:0d:7c:46:
9b:03:63:a1:64:dc:3d:2f:30:78:b8:e4:2e:e0:21:54:5d:b6:
fe:27:f0:88:c7:4c:76:42:1b:f6:e8:99:02:09:9b:b3:25:88:
87:e8:08:df:e6:17:2f:a5:ac:aa:93:a3:89:ef:ed:b2:8e:ca:
24:52:ed:12:a8:4c:38:16:79:e0:a2:6d:52:09:42:c6:39:c4:
c4:0b:de:df:76:ca:d7:1a:66:a0:dc:61:3c:af:ba:a3:b0:d1:
01:5c:89:db:d9:2f:46:fd:a2:06:dd:8a:62:ee:a6:70:fd:ab:
a1:e3:d0:94:43:bd:9e:49:77:e6:23:1e:57:b7:dd:d1:fd:83:
94:48:7f:e0:6c:68:f5:eb:89:e8:0d:4b:96:64:15:95:3d:1a:
8d:2d:2e:d4:e8:41:38:da:8c:92:22:7b:09:73:fe:d9:eb:c0:
29:fc:3e:06:a5:e8:60:3b:c7:4d:ca:cb:4b:bf:50:9c:3b:7c:
e4:2d:b1:ff:76:db:19:1b:b4:ae:06:7b:64:68:26:92:13:92:
f8:27:97:b1:9b:16:0e:62:ee:70:16:ae:16:1f:36:da:f8:47:
52:3b:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:01:09 2025 by rpki-client