Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
File: tW-ivPsboZnQpll_uIlUwKbFEtU.mft (raw, json)
Hash identifier: 4IQA4xKlL3sMZvHzjtKeR9IdPhlkJ8zsTXmS7TH25J4=
Subject key identifier: 95:A7:B3:A7:E5:6E:B0:E5:8A:F0:5C:58:00:CC:14:FA:9A:54:72:62
Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
Certificate issuer: /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Certificate serial: 0196C1267331A79BC524BEF6F8450D666DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
Manifest number: 0A28
Signing time: Sun 11 May 2025 21:00:44 +0000
Manifest this update: Sun 11 May 2025 21:00:44 +0000
Manifest next update: Mon 12 May 2025 21:00:44 +0000
Files and hashes: 1: iJgFNTZ7IhnRGcD9bd_FqPtqDEU.roa (hash: IcZI5thj3Qr91vjQiVj5vIexM3iUd5S8V76AbgBrsvg=)
2: tW-ivPsboZnQpll_uIlUwKbFEtU.crl (hash: Z9WADlF3KfEBHhlKcnO1DuBU4em2g3yGMfXdGsFVGW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:73:31:a7:9b:c5:24:be:f6:f8:45:0d:66:6d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Validity
Not Before: May 11 21:00:44 2025 GMT
Not After : May 12 21:00:44 2025 GMT
Subject: CN=95a7b3a7e56eb0e58af05c5800cc14fa9a547262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:10:2d:b7:f0:c6:15:3b:28:2d:72:a9:c5:
9b:6d:66:07:5a:6d:fe:a3:12:9c:b3:b2:3b:d5:94:
5e:be:df:e5:d7:6c:9a:69:27:a7:4a:de:e5:86:18:
0e:fe:85:47:d5:ef:b1:ae:88:4f:ec:56:be:f0:a1:
7b:39:3f:dd:e5:e7:43:9b:aa:ad:5e:27:26:71:7a:
e5:66:5f:51:74:de:49:cf:d0:37:6a:15:db:9e:46:
7c:ff:46:e1:03:ee:17:47:0e:f1:28:95:3e:8f:c8:
29:d8:cd:2b:6e:89:0f:56:54:cb:10:b9:3e:c9:6e:
db:b0:f8:0f:b2:5f:de:08:f5:b0:9c:e7:58:1d:b2:
1d:c7:20:2b:d8:f6:66:f5:d3:59:7f:47:9c:ec:f8:
19:12:00:78:02:95:c1:45:7c:c5:0d:38:3d:dd:1e:
2d:b3:3f:10:af:46:3d:41:73:67:86:0b:ba:5d:e8:
d7:ed:5f:0d:34:1c:8b:08:8f:04:05:92:70:46:f3:
e4:ae:6c:3a:d1:d2:4d:3a:8a:22:4c:0b:0b:15:44:
c9:27:47:d3:09:69:7a:df:32:13:64:0c:b0:f2:1d:
f2:90:44:ec:c9:3e:e2:51:d3:63:e3:83:41:ab:e1:
36:b8:2a:f5:33:ce:37:36:58:4d:29:ab:de:ad:66:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:B3:A7:E5:6E:B0:E5:8A:F0:5C:58:00:CC:14:FA:9A:54:72:62
X509v3 Authority Key Identifier:
keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:a7:57:e8:d2:9e:3c:dd:a0:8a:7f:ec:8a:98:67:9c:ab:
87:c5:65:3f:2c:52:42:bd:75:66:b3:71:a5:3b:30:e4:84:d6:
a7:e8:05:85:f4:5e:51:67:78:bd:81:f0:09:2d:50:dd:b6:b9:
44:7f:d8:5e:23:0c:b6:a9:c9:ac:18:b7:5f:2d:e0:93:e3:65:
35:cf:7f:99:37:bb:5f:49:f3:e1:85:37:9b:34:02:71:7b:39:
17:92:12:e4:0b:81:78:03:e6:3b:c0:29:da:8b:0f:b5:1e:84:
39:fd:98:b5:97:b7:fd:0a:52:2d:fe:96:70:d6:a3:d8:6e:18:
56:97:13:ec:76:f8:b3:9a:fe:91:a0:8d:d2:55:80:09:64:d7:
50:fb:3d:b7:74:b0:24:cc:db:d2:14:d2:86:c6:0d:b1:fe:a9:
bd:95:98:0e:c2:9f:13:f3:f0:29:2f:2d:16:ed:13:a6:c7:00:
44:37:c6:11:db:83:a3:f1:4e:07:81:62:0a:c7:e0:3f:19:b0:
e8:eb:4d:7b:61:4a:71:3b:c0:a4:f1:02:37:1b:e1:b9:d4:6b:
df:11:08:fb:66:b7:bd:52:95:11:4a:36:13:77:98:6f:e6:30:
36:8d:72:83:5a:70:5f:e0:92:71:6c:bd:ed:3c:6e:87:78:8e:
a4:d1:38:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:31:49 2025 by rpki-client