Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
File: tu1iBVpRkcAuxREulRgaiawGDOs.mft (raw, json)
Hash identifier: PQR/G/BKH6w/2FDQ2+2s+Tybyw199Ma5h/3uUIAZkfc=
Subject key identifier: BA:BD:3E:E1:72:74:76:18:AD:D6:16:18:32:D9:E9:9B:24:E0:0A:2D
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial: 0196CB3BFC13069E9A9E80ED0C29C6C0226C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
Manifest number: 0A95
Signing time: Tue 13 May 2025 20:00:28 +0000
Manifest this update: Tue 13 May 2025 20:00:28 +0000
Manifest next update: Wed 14 May 2025 20:00:28 +0000
Files and hashes: 1: iOo8WZeBs16BOwEjC7IsPMOtPO0.roa (hash: FC5R1Hrtvnbfsyec/XOyQavDbuFW5mY0wSOTHI+QutE=)
2: tu1iBVpRkcAuxREulRgaiawGDOs.crl (hash: HUf9iCOZZSjMeUfV2vf1tToPOzppqKjSSqicuuOcyj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3b:fc:13:06:9e:9a:9e:80:ed:0c:29:c6:c0:22:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Validity
Not Before: May 13 20:00:28 2025 GMT
Not After : May 14 20:00:28 2025 GMT
Subject: CN=babd3ee172747618add6161832d9e99b24e00a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:af:4f:02:82:47:0d:ad:48:ff:ee:2e:78:
14:53:8c:50:d7:9e:45:4e:78:eb:24:ab:a5:a9:62:
2d:eb:5d:72:f3:c7:b0:ae:ac:c9:36:66:b3:d0:39:
65:37:05:18:b2:12:5e:c8:fc:a5:e7:d5:eb:f1:20:
f6:42:5d:e7:db:c4:8f:ec:a4:d7:40:4d:fb:e6:a0:
3b:f6:56:a5:76:51:77:d8:ba:ee:16:37:4f:c6:13:
5a:de:b5:ea:d6:de:45:b7:7d:2f:bd:1b:b6:2c:86:
83:21:28:8f:73:76:6b:78:fc:d9:8a:3c:c6:41:f9:
84:80:43:0e:7a:95:86:32:81:c2:43:fc:72:2d:f5:
c2:b6:9f:96:9a:28:16:41:e0:08:a3:0b:cf:a7:5e:
cb:c2:f8:27:39:2f:40:80:9a:3c:ab:bc:8e:99:29:
1d:81:b8:fd:8d:8d:5c:ef:42:5a:15:cc:1a:c2:0a:
12:90:a0:98:88:77:b3:31:c7:d3:62:07:2b:a5:9e:
41:df:ae:29:1b:87:1e:6f:8d:44:8a:d1:31:2e:28:
d6:01:ae:89:3c:6d:91:8c:3e:a9:c0:3b:87:68:7e:
fb:cc:19:22:8e:81:75:c1:45:32:fe:ee:d8:45:63:
9b:c9:11:e6:97:fe:2c:e7:9a:f6:74:90:f4:94:3d:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BD:3E:E1:72:74:76:18:AD:D6:16:18:32:D9:E9:9B:24:E0:0A:2D
X509v3 Authority Key Identifier:
keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:67:61:82:61:9e:20:90:e3:6a:1a:54:30:91:38:a3:69:ee:
6b:8b:62:09:5b:5f:2e:71:5f:a2:27:e6:d9:be:f3:a5:5f:db:
87:ce:1a:d3:5c:e8:ab:ab:4e:a3:df:cf:04:69:f8:5f:8d:1a:
0e:c5:8f:f8:38:f9:75:d7:b2:1c:35:80:00:9f:7c:17:17:19:
4e:fe:14:ee:e0:eb:a8:3c:7d:bf:8b:cc:6b:fe:d3:94:89:9c:
a5:3e:ee:1c:f1:16:a2:ba:9c:33:40:66:c9:c2:7a:0d:88:d2:
aa:9d:03:5f:42:38:32:7b:6b:99:94:cc:03:fe:3b:e6:f9:be:
9a:e0:f8:4f:62:f8:30:aa:6b:f3:e3:e5:da:b8:0b:04:13:ea:
3c:c2:54:b0:e4:b2:7f:31:47:38:6d:35:2f:16:e0:54:53:f4:
7a:a7:0c:7a:a3:c1:14:e1:a2:9a:b9:0d:2a:c5:12:ce:b1:c0:
c5:87:cf:49:e1:58:5b:91:ac:aa:67:91:77:e9:90:82:a8:13:
8d:8f:4d:a5:87:40:a4:8c:fc:bd:93:d7:95:6e:c3:7f:6a:a4:
f7:5e:fa:99:f2:45:e6:c0:90:3a:ac:5a:1b:7f:fd:de:43:9f:
4d:5f:6c:4c:c4:fb:fc:81:38:70:36:85:30:23:29:0b:e2:70:
24:a3:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:13:34 2025 by rpki-client