Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier: kx8SD4gPHdRqKfCZxmv/j5OGtKt7oSafeaT5PulVO30=
Subject key identifier: 9B:3C:16:2C:CC:8C:72:EA:6E:3A:94:47:48:37:6C:72:F1:3C:D0:CA
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 0196A2E4D98AE37E3CAC556D2A575E49B96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number: 0DF5
Signing time: Tue 06 May 2025 00:00:28 +0000
Manifest this update: Tue 06 May 2025 00:00:28 +0000
Manifest next update: Wed 07 May 2025 00:00:28 +0000
Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=)
2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=)
3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: bJpwHj0Pg9LQpxPKUzOaVbgHDTye8TRi5jorKB7ONx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:d9:8a:e3:7e:3c:ac:55:6d:2a:57:5e:49:b9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: May 6 00:00:28 2025 GMT
Not After : May 7 00:00:28 2025 GMT
Subject: CN=9b3c162ccc8c72ea6e3a944748376c72f13cd0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:a1:62:8e:5b:4c:ea:15:96:e4:49:d7:23:
7a:f8:a9:66:0b:73:e7:b4:61:75:32:48:16:b7:3e:
1b:18:aa:49:95:7f:81:85:14:4c:b2:6f:41:68:fe:
c3:92:3c:f9:47:cf:e7:7c:86:8a:c9:d3:f8:c0:0e:
5e:3e:85:ed:55:1f:0e:db:f7:6c:d2:8c:30:56:42:
da:6e:61:a9:82:87:45:6f:70:2a:6a:c7:a2:c3:e9:
b4:c4:0c:71:e7:b6:93:ed:cc:0a:f8:c2:b4:36:f8:
f9:52:7e:6d:8e:78:4d:2c:5e:1c:4b:4a:ce:26:20:
2e:c2:e4:9a:26:67:89:bc:5f:eb:6e:28:b2:f7:3c:
c0:81:93:fd:1c:8d:88:31:33:e6:02:73:c5:b2:32:
17:68:2a:ec:df:8c:4f:97:1c:06:d5:d8:26:3e:9d:
b9:12:be:08:87:5b:c0:f6:15:c6:28:09:bb:7a:10:
36:44:39:be:40:fe:87:d1:2f:28:d6:e3:c9:17:a9:
f4:f3:1b:00:df:1d:b3:e9:5e:e0:c1:45:c9:7c:90:
15:6a:59:b5:c3:b6:ce:e0:00:39:62:ca:fc:01:1f:
ac:5a:de:54:39:7c:ea:c8:9a:31:d1:1e:be:e4:81:
25:ae:64:cd:37:67:76:e6:e7:85:75:a1:94:70:f8:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3C:16:2C:CC:8C:72:EA:6E:3A:94:47:48:37:6C:72:F1:3C:D0:CA
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9c:93:c0:c1:9d:73:99:f3:f2:68:a4:fc:3d:95:74:10:88:
24:f7:dd:a0:df:53:8f:75:27:ac:e6:f6:6b:a7:09:a3:04:e5:
ee:cc:c3:46:ad:28:e9:c5:e9:49:aa:eb:c6:37:da:30:97:1a:
1b:cc:35:d1:d9:68:40:0c:73:12:a3:cb:a6:83:52:73:0a:0d:
18:45:c6:57:6f:1a:d0:cd:5d:4d:d7:6c:ba:9b:61:71:33:ec:
2a:ba:a4:96:33:3e:90:30:52:0b:b4:fb:73:de:70:51:ad:64:
63:0f:e5:bb:ed:16:55:a1:29:94:3f:d0:b2:24:c7:36:a4:e8:
95:fd:a9:80:3e:17:09:b7:1a:6f:9b:d2:20:b3:1e:35:fc:58:
06:c8:5f:9f:43:be:69:2b:db:90:54:91:09:77:fb:ce:2b:2c:
6d:58:9c:96:fd:3f:10:16:f6:f2:96:6a:f7:fd:d0:6d:de:42:
1d:cb:f9:9e:30:f8:3e:dc:5b:96:2d:9d:b1:83:94:89:bb:f1:
29:56:3c:1e:98:e2:9b:58:f6:7f:59:1e:00:49:a9:5c:2e:e3:
b6:71:4e:fd:09:22:00:ea:47:54:ce:a7:41:00:92:96:33:f6:
fe:4f:88:82:2f:d0:86:37:5f:01:b0:3e:06:13:06:8f:06:2d:
d5:fa:89:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:54:49 2025 by rpki-client