Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File: tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier: wBwYo8QXs/9z2kUomUzMje1AFaAov6PreO/w+jgkuyU=
Subject key identifier: 6B:B6:9B:00:10:EB:A4:90:70:66:76:83:0D:BD:E8:6D:B9:A5:E1:10
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 0196A23FE04C03E9EC040D9EFE84D3AE02BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number: 0C88
Signing time: Mon 05 May 2025 21:00:17 +0000
Manifest this update: Mon 05 May 2025 21:00:17 +0000
Manifest next update: Tue 06 May 2025 21:00:17 +0000
Files and hashes: 1: bBRmM9C9XmUSSJtHhjHUjRNm8UY.roa (hash: fyEjl4MYjoY4DVmXCRYYRphdD98I9nv/Kzt95pfzDko=)
2: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: W3/8eQWBewkatp+NOCQqAlBBe8mGZSgTI+YQWvIo3u4=)
3: tVfNb6vANMjkCnwkn_zqjQ9R46g.roa (hash: sIFbcv+pjLFEVXCoeuZdGPtO8JDvf+xPKrDKXkHq+5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:3f:e0:4c:03:e9:ec:04:0d:9e:fe:84:d3:ae:02:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: May 5 21:00:17 2025 GMT
Not After : May 6 21:00:17 2025 GMT
Subject: CN=6bb69b0010eba490706676830dbde86db9a5e110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:aa:5e:09:e7:07:b7:e4:0c:f5:88:5d:2f:cd:
3d:c8:11:bb:3e:46:db:16:5d:5c:15:11:84:3a:95:
1b:cf:0c:95:85:eb:b3:36:22:67:4d:4d:ed:58:72:
db:50:75:4d:2b:84:61:d4:4e:e9:58:21:43:23:db:
3f:c4:bf:1e:3f:51:92:e2:c3:01:e4:5c:95:eb:8f:
10:af:e4:6a:04:61:c7:c3:4d:2a:c5:4f:04:3d:72:
33:63:a8:0e:af:46:fa:1a:4c:6c:1c:74:4f:76:e6:
f0:5f:4a:02:4d:75:3b:be:9f:ff:cd:ae:9d:90:65:
8c:b0:a7:1c:73:8f:b6:69:5d:e4:21:9d:7c:7f:fd:
7d:e0:b8:fd:38:29:de:38:e3:3e:dc:17:58:1a:7e:
83:93:e3:f8:14:9e:19:a4:8b:5c:08:34:63:55:0c:
07:58:2e:df:35:ab:be:95:57:84:74:0e:9d:75:24:
d5:e4:07:9b:fd:8d:71:a8:1a:20:89:dd:52:37:51:
24:9d:9f:f1:cc:d0:6b:d3:a7:aa:2e:a5:0b:37:65:
47:77:d7:6b:17:14:2e:4b:81:d5:98:55:43:23:7c:
72:f6:3e:41:81:cf:85:66:33:71:c4:3a:d3:02:a0:
e2:a1:65:e7:ed:3c:21:34:f9:4e:80:f7:2a:f1:0a:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B6:9B:00:10:EB:A4:90:70:66:76:83:0D:BD:E8:6D:B9:A5:E1:10
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d4:fe:9b:91:b8:8b:96:f7:1c:71:20:58:24:c0:5b:2c:91:
8c:8a:60:4d:8d:37:98:ad:02:a0:54:b1:dd:13:28:b8:48:f7:
8b:e3:5c:21:25:8f:f0:f9:36:2d:3b:48:a1:12:7d:23:0c:18:
22:3e:c0:6b:a3:ba:36:a9:39:ca:88:82:86:4a:8c:78:fa:a1:
dc:2c:6f:bd:e1:ec:d4:7c:cc:13:8e:91:94:68:49:25:ff:c4:
e2:1d:a2:5d:2e:ca:a7:30:21:fb:9e:a6:4e:a8:12:c7:9e:84:
99:a1:88:b2:33:da:33:8f:a6:85:cf:29:d4:98:2d:14:0c:0d:
a5:e8:01:9e:93:9a:36:f9:e2:05:22:47:93:78:63:fc:49:51:
48:1c:36:60:a6:6c:ab:88:00:d4:d5:03:53:91:dd:e3:07:9d:
65:3c:5f:e5:52:2d:04:a9:27:30:ac:c8:d7:01:d0:29:8a:89:
a7:72:ba:d0:2b:00:12:3b:cf:e0:74:19:52:45:8d:51:69:b4:
67:0f:44:2b:e8:4c:2d:fc:9c:15:e2:ff:19:54:d3:59:0b:e9:
22:83:87:79:5f:46:86:cd:89:a7:61:5a:35:75:2a:0f:b7:e6:
d9:a1:23:18:89:c9:e8:03:59:d0:2d:f2:10:6a:87:d0:19:67:
da:2d:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:18:11 2025 by rpki-client