Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: u0y0Ds01c4M3+C+/w1Q2oIGAU263gBVqP+pfcCBc0Ok=
Subject key identifier: A9:D1:C4:65:DC:24:66:FA:11:00:B8:36:45:01:EC:01:63:7E:9D:59
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 0196C6F1A76AFD844C3B3FDE271847B37936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 0D2C
Signing time: Tue 13 May 2025 00:00:47 +0000
Manifest this update: Tue 13 May 2025 00:00:47 +0000
Manifest next update: Wed 14 May 2025 00:00:47 +0000
Files and hashes: 1: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: uOF8FhzAkFkYUM0BuffPkl4C6XNiad+74FXcU/Mj4UA=)
2: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (hash: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:a7:6a:fd:84:4c:3b:3f:de:27:18:47:b3:79:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: May 13 00:00:47 2025 GMT
Not After : May 14 00:00:47 2025 GMT
Subject: CN=a9d1c465dc2466fa1100b8364501ec01637e9d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:44:25:cb:10:1f:b4:11:68:68:70:26:dd:43:
03:50:ad:e5:af:bf:b7:ad:9a:6d:51:20:f5:d0:43:
d1:1c:db:83:90:d8:30:bb:86:c0:99:83:cb:bb:c1:
4d:b5:66:cd:7f:46:d2:05:d3:6f:64:d8:5a:88:d9:
2e:47:8e:f6:30:aa:60:74:bd:be:35:04:52:a9:c4:
5c:ed:98:cd:86:78:fb:05:9e:d2:fa:db:bd:a1:ff:
0b:7e:68:5e:d3:67:cc:78:6c:20:99:46:89:b2:30:
47:df:a1:de:d7:dc:b6:d3:f6:e2:79:74:09:25:21:
5e:41:9c:c6:2c:b0:2e:12:8f:19:ae:4c:ca:88:74:
4a:93:e8:1c:a2:0f:a1:af:18:9b:cd:9c:d8:11:d2:
39:21:cc:93:66:05:9a:92:dd:de:df:44:c7:3a:86:
d8:1e:c3:de:4b:66:d1:bf:56:ce:4a:81:88:68:05:
17:39:00:d2:d3:5e:4f:61:fe:6c:03:64:97:56:1b:
79:7e:8a:35:0a:4e:f6:46:5f:02:b1:d5:03:90:dd:
00:c6:53:99:77:eb:b3:30:a5:49:91:98:9a:4c:e5:
ab:9f:d6:d5:1a:cc:4b:16:ee:f3:e8:3f:49:77:d5:
e1:71:03:2d:d9:15:28:92:5f:ed:cc:8c:44:d9:40:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D1:C4:65:DC:24:66:FA:11:00:B8:36:45:01:EC:01:63:7E:9D:59
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f9:a5:b0:8c:a8:52:38:a9:ab:40:a8:fd:7a:49:85:94:5b:
d1:6c:91:09:03:75:12:a1:dc:aa:87:91:5f:c8:41:50:ce:be:
64:46:a3:cd:82:f0:8f:03:ff:fe:6a:b8:1d:09:27:65:16:b4:
6f:19:e1:a8:bd:d9:75:b3:1f:af:b4:f3:09:75:9a:ee:c3:d2:
16:60:01:9b:1e:bc:aa:38:60:75:7e:77:78:07:8d:f4:8a:c5:
0e:26:aa:d3:85:0e:ec:84:b8:72:39:37:1a:ec:a7:a9:c3:5c:
e4:21:d3:a7:f9:f4:19:d4:53:d6:31:89:10:a4:7c:4d:c4:af:
84:ba:89:00:db:bb:b4:26:dc:89:a0:5f:5d:58:49:b3:f1:38:
29:e3:5d:3e:0e:35:e8:0f:26:8b:c0:41:07:36:65:49:f4:e0:
2b:a0:0f:1b:cc:f8:2e:73:f7:17:66:36:d3:f7:42:c7:b3:92:
ea:cf:fc:d8:8b:2d:10:c3:5a:73:40:b9:3c:55:08:13:84:13:
59:95:3c:2b:d3:6b:9c:37:20:3e:d6:be:30:07:92:dc:f9:3a:
84:b2:b1:9d:77:4d:dd:b4:cb:19:3a:ab:7f:39:0c:89:45:25:
6e:d0:23:5e:4e:fe:f0:00:b5:ab:bd:ee:a3:86:28:9e:2e:2d:
42:18:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:49:12 2025 by rpki-client