Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: Q3OHi2ogqERbAHqgDzjwW+F+xR6gztSEq7JD9UDLUOA=
Subject key identifier: 23:E6:30:8C:5E:34:7F:BF:A0:5C:CE:3B:13:3D:5D:5D:36:04:EE:56
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 0196D62D80B8AA12D81FE60A3586A6D5BEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 0CC8
Signing time: Thu 15 May 2025 23:00:28 +0000
Manifest this update: Thu 15 May 2025 23:00:28 +0000
Manifest next update: Fri 16 May 2025 23:00:28 +0000
Files and hashes: 1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: jBiDmm9U2luo3NxBdhqNuK8wICa6Wo7OsSHg5+yKEU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:2d:80:b8:aa:12:d8:1f:e6:0a:35:86:a6:d5:be:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: May 15 23:00:28 2025 GMT
Not After : May 16 23:00:28 2025 GMT
Subject: CN=23e6308c5e347fbfa05cce3b133d5d5d3604ee56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:7b:3f:f1:2b:2d:02:24:fd:1f:d8:75:26:
65:48:95:f8:a8:90:97:00:ae:2b:77:7e:e7:50:51:
b2:f4:98:a2:31:39:10:ac:74:0b:87:d9:b7:99:bf:
e3:fa:7f:a1:c6:84:09:86:3a:20:17:d3:8c:82:64:
19:da:5a:06:ec:2b:f4:3e:b1:1f:cf:0a:c4:60:c1:
4c:ee:80:fe:a9:ff:3d:a6:cb:24:3b:12:80:e6:97:
7a:86:b3:2e:8c:8f:de:cc:fb:86:91:5b:cc:72:03:
1b:9e:00:8f:b0:29:cc:04:e9:3f:3e:ae:b7:ae:cd:
8f:6b:59:9f:50:67:9c:ec:77:cb:a8:47:7f:16:1d:
7b:e7:09:42:e3:02:38:12:95:05:56:97:b8:95:fd:
1e:ed:87:3e:c1:c6:b6:f9:57:cb:5a:2b:3b:7a:89:
f7:6d:4e:1f:92:36:53:7f:bb:b2:d6:cc:f4:9c:36:
38:03:d4:b0:68:78:6b:78:2d:91:21:b5:b8:e5:ef:
66:b1:73:d9:84:90:fa:45:d1:9f:dd:fd:7e:6a:6e:
8a:98:26:6c:e5:12:3f:4b:00:c5:cf:99:d6:82:c8:
3f:74:16:1c:db:6b:78:b5:a7:d3:d3:96:3c:7f:b1:
72:fd:a2:af:a8:7d:19:5f:65:06:6d:16:cc:d7:b5:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:30:8C:5E:34:7F:BF:A0:5C:CE:3B:13:3D:5D:5D:36:04:EE:56
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:98:63:90:90:a4:5b:ef:64:5b:d2:f2:99:61:67:34:a0:69:
e5:e4:75:42:88:7b:03:03:f1:11:6f:62:2f:cd:47:b3:96:a0:
4a:5c:b9:02:03:e2:a8:46:d6:78:bc:67:67:ee:cc:e5:ff:51:
e5:aa:b8:3e:17:94:50:7e:0a:54:04:9b:77:ca:90:25:19:7f:
c0:7a:ac:a2:66:8e:2c:d9:c1:66:51:c2:bb:87:52:0c:83:bc:
46:34:ae:a9:8b:88:f8:b0:10:bd:e0:f9:39:73:94:c6:5f:c0:
e1:a2:8f:bf:38:7f:18:d0:2d:cd:95:67:2a:0d:78:56:0c:ed:
0f:69:79:e3:f8:44:42:d8:39:01:20:0f:7f:1d:c5:e0:61:a4:
54:83:06:58:f2:8c:23:b4:47:4a:7f:54:79:cf:da:68:a8:c8:
00:7f:f0:5c:cc:48:10:76:c7:30:d3:f7:bf:26:4b:bb:d1:b0:
f0:17:5b:84:ce:d4:40:d3:dd:db:00:27:a9:f6:fd:be:1a:82:
aa:23:a7:0b:55:fe:b0:c3:e5:3a:11:b5:b0:08:bb:1b:1a:e8:
f2:78:f4:22:29:da:37:d0:f1:0a:b0:0c:bc:43:93:26:e3:f7:
1a:29:8a:e8:0b:21:12:e6:6f:5f:83:9e:6f:64:63:fa:91:a8:
2c:2c:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:50:49 2025 by rpki-client