Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: lqvZ9KV4GgyNoZamc+JtWpvdJp9c7SFcZAKijp6USEg=
Subject key identifier: E1:66:BA:B3:17:BD:07:14:27:BB:54:9F:62:4D:EC:3E:BC:7F:E0:CA
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 0196A0F6516B00E831CA836FC2B2C75E8E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 124A
Signing time: Mon 05 May 2025 15:00:19 +0000
Manifest this update: Mon 05 May 2025 15:00:19 +0000
Manifest next update: Tue 06 May 2025 15:00:19 +0000
Files and hashes: 1: DAiAlkKu2uIH3tPrZHXW35UovoY.roa (hash: ii+y3ES147W1gYE6b/JQu7S5U4fp3robU9GiKGcJGDs=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: AWuucoErpCr+572OgedSX34x+Xh02wbdL8LTIix2D4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:51:6b:00:e8:31:ca:83:6f:c2:b2:c7:5e:8e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: May 5 15:00:19 2025 GMT
Not After : May 6 15:00:19 2025 GMT
Subject: CN=e166bab317bd071427bb549f624dec3ebc7fe0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:4b:13:84:28:b2:d5:6e:df:61:6e:04:7e:
a0:4c:a5:62:56:4f:e0:c3:98:1a:10:36:37:2e:83:
ed:96:19:56:67:b5:36:c6:83:ad:45:16:c4:38:d1:
98:64:f2:82:3b:45:61:51:35:e3:87:e4:50:b8:fd:
31:c5:68:2a:70:6b:00:1b:c6:c3:f8:6b:ad:47:98:
5e:72:3f:ec:51:b0:e2:cb:ec:1d:09:70:d1:72:70:
5f:1f:22:c7:70:c5:0a:23:22:10:9b:9e:6a:47:d0:
36:ae:e1:0f:92:85:e3:44:ce:4d:f4:63:c6:09:85:
75:e0:23:ba:97:8d:73:47:27:6b:3e:4c:18:f2:1e:
9e:21:fb:68:d8:43:bd:e2:de:f8:a2:dd:66:57:0a:
d9:03:33:f0:8a:04:1f:ce:11:63:7e:20:57:0f:1e:
62:cd:6c:c1:bb:01:a3:b5:e2:3f:23:48:9e:a8:ac:
88:34:b2:9f:54:f6:c1:39:72:18:5e:47:8f:65:21:
a2:b1:7d:de:16:e3:55:54:f9:31:bb:13:27:f9:5d:
0a:45:b9:56:3c:30:78:aa:be:de:34:12:76:69:ae:
dd:4d:5d:a9:8a:db:c6:6b:56:60:d0:d9:e3:de:dd:
f1:0e:b6:58:18:7d:60:0e:39:3e:22:54:73:d1:e0:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:66:BA:B3:17:BD:07:14:27:BB:54:9F:62:4D:EC:3E:BC:7F:E0:CA
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:87:a8:f9:5b:df:4f:19:85:d2:b4:9c:b4:6c:83:70:e3:05:
8f:d6:7e:05:c5:e0:e2:de:65:14:95:3c:19:4b:2e:ab:79:16:
a0:09:a8:06:0a:d9:85:9e:b0:7b:93:6d:b7:72:6e:6b:df:22:
64:e7:d9:4d:2d:57:42:25:15:7e:b1:bf:63:a1:ba:77:c8:40:
77:69:bd:90:56:6c:89:0c:13:c4:27:60:a2:0d:37:2e:37:3c:
39:53:16:cd:93:d0:f2:17:e8:7c:0d:e0:22:29:a4:b8:80:42:
cf:21:fe:a7:aa:bd:97:40:50:98:ef:4e:d4:93:58:2c:f0:21:
a5:2a:f8:d3:63:87:f4:fd:16:b3:39:b1:4b:8d:95:ac:03:4d:
57:b4:3d:13:91:53:11:8d:2d:86:68:be:b1:19:2d:0d:aa:b4:
df:23:6a:2a:e2:3f:fa:36:3b:17:d6:6c:ab:dd:cc:18:76:c4:
46:fc:02:58:0f:7d:ef:2e:e0:28:77:96:66:ac:8d:55:56:0d:
4d:5c:6e:e3:b5:fc:21:af:86:cf:80:01:c8:5d:3b:42:c0:d0:
60:3b:73:a7:29:df:ec:49:06:f4:4a:87:db:c1:0c:17:b6:84:
a5:5e:39:d1:86:11:fb:45:58:b8:09:7f:35:d4:dc:9e:cd:08:
0f:d2:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:16:14 2025 by rpki-client