Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
File: tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft (raw, json)
Hash identifier: 4UfwMZSeUi9YjeFrjr4BBifPoGRkIyqa2ibXbhlgq/s=
Subject key identifier: BE:B5:C9:08:C6:94:AF:92:0A:08:71:FC:51:32:B5:56:63:A2:6F:2F
Authority key identifier: B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
Certificate issuer: /CN=b543ef9bc3c2132361c1240972a180912bf7a859
Certificate serial: 0196AA30EC9B5AA85A9BE370C7BD524917EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
Manifest number: 10D7
Signing time: Wed 07 May 2025 10:00:55 +0000
Manifest this update: Wed 07 May 2025 10:00:55 +0000
Manifest next update: Thu 08 May 2025 10:00:55 +0000
Files and hashes: 1: 3_-c02s70_bWI80EfV5nMZhCjHg.roa (hash: 1ZDiW1elfufjNKaqhAw29FTOI2soWhXtopSXVjj/ruY=)
2: 9XYzuBVHhZfQ-Z8_PdIStP3gEJU.roa (hash: 45mg1wTAOjryTd4LOjOOGQdcDwneEtBdS+C0gsQtj+o=)
3: tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl (hash: AjY/IKeoqc/5K4v7/w7hbJ7udvQqlUArUdqZgzgLE94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:ec:9b:5a:a8:5a:9b:e3:70:c7:bd:52:49:17:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b543ef9bc3c2132361c1240972a180912bf7a859
Validity
Not Before: May 7 10:00:55 2025 GMT
Not After : May 8 10:00:55 2025 GMT
Subject: CN=beb5c908c694af920a0871fc5132b55663a26f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:1f:97:43:b7:c2:0d:1e:06:19:c5:e6:28:
b7:77:38:7d:ec:b5:67:d4:52:a0:2d:78:e7:29:92:
4a:f5:00:1d:f0:49:c1:b4:93:bf:39:19:cb:ee:03:
cf:b2:01:d4:a6:a8:f9:0a:af:b0:8a:05:70:8a:27:
f5:29:15:31:69:6f:85:24:ff:36:0e:11:cf:b7:89:
d0:c2:40:af:6f:74:33:5c:fd:56:78:a3:51:88:30:
1e:77:23:dd:76:21:4c:bc:72:ef:74:1d:6a:40:04:
8d:4d:ec:c6:43:2c:0d:c9:c7:2c:f2:28:d0:d6:e8:
30:c6:2c:18:56:b5:4d:65:80:b1:2c:d0:08:2d:12:
15:7a:9f:52:0e:8b:b0:ae:e7:60:78:e0:02:18:2b:
04:de:6c:88:f3:4b:e0:04:46:8f:95:d0:3f:df:e1:
02:41:f6:e7:e2:61:f4:bf:90:e9:e0:39:88:bd:3c:
33:a2:c3:b4:34:f1:93:ca:e5:98:9b:b9:85:f8:cf:
2d:93:63:04:df:0a:47:18:12:5f:a9:12:3e:bf:fd:
bf:f7:15:31:40:19:ae:3a:02:e6:5a:73:2f:f0:5b:
91:aa:89:f8:81:de:77:5f:0b:b9:6c:a2:1e:2a:92:
f0:31:8e:44:73:4a:9f:50:52:74:73:d1:55:05:42:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B5:C9:08:C6:94:AF:92:0A:08:71:FC:51:32:B5:56:63:A2:6F:2F
X509v3 Authority Key Identifier:
keyid:B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5e:ef:dc:54:58:e1:1f:8b:b0:58:b4:4e:f3:cc:cc:a0:08:
05:03:22:52:4a:14:64:24:36:16:99:5b:a6:b2:69:a9:cc:d4:
53:fc:d2:5d:6b:1b:64:cc:44:00:bd:f9:d0:56:13:aa:92:d2:
af:a7:65:85:22:40:ac:a2:e5:c6:be:48:3a:64:1a:50:4a:ab:
c2:3f:72:ed:76:36:6d:b1:20:3e:d5:cc:87:03:86:a2:d0:e1:
61:7c:88:13:a2:6e:10:e2:fa:8a:d8:13:3a:cb:26:2a:0a:7c:
0b:51:4f:b4:96:63:6b:c6:ca:84:3e:89:af:1c:b7:61:8b:74:
c8:03:aa:14:3f:44:a0:1f:93:c2:51:8b:88:8d:6a:34:e3:5e:
61:f0:28:8d:fa:73:88:ac:f9:12:59:2a:45:73:8c:3b:0f:89:
5a:48:cd:38:36:5f:f8:3f:eb:5e:e1:31:4d:9c:c5:99:9b:fc:
a9:22:67:93:26:74:23:e5:67:50:25:bc:b8:51:27:4a:62:88:
e3:1d:bd:1a:2b:8a:a9:37:51:20:05:73:83:68:df:a9:a9:c4:
25:65:cc:79:69:17:84:19:33:bb:97:f9:6e:62:68:20:02:14:
6c:aa:35:18:e9:ef:87:7f:28:51:36:ae:2a:c4:b2:89:37:50:
f7:8d:7b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:02:15 2025 by rpki-client