Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: kBwjAaGGGD9Xwd1qJuT4r5N6EHrEqw3C06pd3weAPR0=
Subject key identifier: ED:E8:86:5B:39:75:6C:ED:B0:29:5D:AF:3E:5E:0C:45:33:19:8F:48
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 0196C2DDE5F1DE9BBD1F379A94CB42856E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 1210
Signing time: Mon 12 May 2025 05:00:44 +0000
Manifest this update: Mon 12 May 2025 05:00:44 +0000
Manifest next update: Tue 13 May 2025 05:00:44 +0000
Files and hashes: 1: fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa (hash: 70iF+LPpbMiVmu1EBYdz2CkmI0h0sZ5SaRk5YWSmNI0=)
2: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: d8FLiH7KKdu9WnuSMxq+OhYa/beCl+UCmgivhLVFEjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:e5:f1:de:9b:bd:1f:37:9a:94:cb:42:85:6e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: May 12 05:00:44 2025 GMT
Not After : May 13 05:00:44 2025 GMT
Subject: CN=ede8865b39756cedb0295daf3e5e0c4533198f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:62:c4:c0:75:f8:86:29:cd:f1:44:27:55:dc:
ff:13:e6:18:04:ef:a5:81:dc:66:4e:9e:b5:65:5d:
c1:93:97:fb:af:8b:27:1f:3c:9d:49:fd:23:81:e1:
47:63:f7:f5:5b:d2:c6:4c:9c:7a:26:1f:d1:8d:a5:
71:2d:7d:91:4a:22:e3:03:3c:b1:71:01:3e:5b:73:
c5:d3:d7:21:f5:7c:d3:79:20:1b:81:8b:eb:2b:fc:
df:cf:0a:37:4d:b4:94:a1:90:8a:24:8f:44:46:3e:
04:7b:7d:80:c8:b0:0c:dd:37:51:55:d8:c2:45:f5:
24:02:1b:e9:8d:0d:4c:73:c4:b5:fd:7e:59:45:5c:
e3:68:8f:71:8c:d0:6b:b5:59:70:6b:5f:e3:f7:a8:
4d:f6:e7:ef:f6:98:95:03:02:41:bc:d5:47:a8:02:
98:86:50:c1:78:36:25:1a:42:df:19:36:5c:15:5b:
24:91:25:79:f2:9a:e8:32:57:64:11:00:94:79:15:
fc:4e:7f:db:a2:6a:cb:f0:52:cb:76:12:86:21:c9:
6b:b3:c2:22:2e:96:4d:70:63:cc:63:c0:f7:29:29:
73:aa:07:d4:c4:f3:81:3f:3c:ac:58:44:11:de:63:
3a:ac:52:da:01:59:bb:f3:96:2f:09:eb:59:b1:13:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E8:86:5B:39:75:6C:ED:B0:29:5D:AF:3E:5E:0C:45:33:19:8F:48
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:df:1b:7e:37:5d:44:a0:da:db:16:77:8d:71:56:0f:24:
81:93:2e:d3:93:58:dd:f6:90:74:28:9d:5c:c9:eb:2a:4b:3e:
7f:73:9e:34:4d:dd:8a:9d:5c:80:47:87:90:13:a5:ef:cd:dd:
97:ec:b7:b3:1b:11:fe:b5:fb:f0:61:04:83:5d:1c:f2:72:4a:
ed:05:b8:2a:11:c5:10:5c:8b:44:ab:42:73:77:13:53:e9:66:
76:9d:d6:85:e7:80:57:5a:ce:92:6a:30:ea:28:59:70:2e:95:
24:df:29:a1:52:27:98:54:21:88:cb:7b:19:de:0f:3b:2e:b4:
d1:b9:04:6b:81:18:97:92:36:76:18:66:3e:75:76:0a:1c:2e:
ac:25:d5:41:3e:e2:af:ec:ed:82:04:2d:fa:8b:ee:d5:33:9f:
70:a3:72:69:d5:dd:6e:25:a8:ea:0d:49:6b:23:6c:33:0d:20:
31:73:54:a1:dd:40:30:fd:cb:16:15:2b:b8:c0:2a:01:1c:03:
3d:76:89:19:2d:9c:b0:f6:e1:0a:24:33:50:0c:1e:49:9c:c8:
ae:b4:18:2f:cd:6f:94:4b:db:1c:c8:f8:46:8c:a5:d1:32:85:
2c:10:c3:0d:4e:0e:28:af:d6:01:6d:c6:06:d3:2d:59:ca:5d:
14:b5:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:08:34 2025 by rpki-client