Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: z6aZgWgUC1XaUfVFO+zCp0sZw50WIrWqCmG0Z/D2PWk=
Subject key identifier: C6:2C:8E:0F:33:5A:11:DD:CE:D3:50:1A:44:69:3E:0F:33:8A:9B:E8
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 0196C683759CEBC0CE50C376648BD47AC52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 22:00:26 +0000
Manifest this update: Mon 12 May 2025 22:00:26 +0000
Manifest next update: Tue 13 May 2025 22:00:26 +0000
Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: h14gtm6Kwys5a+S0Llzv2HpU4xhGmKlcQjUPeIKQx14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:75:9c:eb:c0:ce:50:c3:76:64:8b:d4:7a:c5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: May 12 22:00:26 2025 GMT
Not After : May 13 22:00:26 2025 GMT
Subject: CN=c62c8e0f335a11ddced3501a44693e0f338a9be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:8d:e1:4f:81:a8:28:fa:00:c9:b9:fa:03:
86:b3:eb:00:62:d6:b1:05:a4:8e:46:f2:d7:51:ab:
a4:19:df:3c:70:e6:0b:ca:40:75:52:aa:6f:46:e4:
09:db:61:36:81:1b:97:a9:53:fe:2f:a3:3d:51:ca:
01:83:94:99:28:a7:a1:8e:58:9c:2a:0f:6f:1c:44:
84:75:4f:9c:2f:ed:c3:98:21:c5:76:68:b7:cc:bc:
15:f6:d7:81:ec:c8:05:b2:d3:5b:da:c5:7c:71:b5:
d7:af:6b:e1:23:f4:2c:52:3e:62:73:82:64:7b:80:
c5:e3:0c:43:ec:d6:98:70:6c:52:af:f0:18:88:a7:
04:6d:08:06:c3:b9:64:23:9e:6f:9f:77:95:42:ae:
1e:e5:4f:e3:fa:10:fc:09:75:16:01:2d:fe:73:19:
29:49:d4:74:66:d0:9a:01:0f:93:a6:89:69:e0:7f:
f8:0b:1b:28:e7:0f:8f:d6:65:04:da:f0:70:f2:51:
e8:db:d8:5e:89:23:58:1f:58:ac:ea:c7:ad:4a:7d:
58:36:fe:59:47:20:88:d0:7f:27:6e:93:9c:1e:6f:
d0:01:dd:2e:dc:b1:87:21:9c:c8:3f:91:76:eb:0a:
1f:71:93:7b:48:c5:d3:a7:60:9e:40:c4:93:a2:ac:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:8E:0F:33:5A:11:DD:CE:D3:50:1A:44:69:3E:0F:33:8A:9B:E8
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7f:05:60:b8:58:fe:26:eb:c4:fe:d4:6f:86:dd:5b:6c:46:
17:36:34:4f:03:64:cc:f7:49:af:6a:db:99:5a:d3:9e:bf:eb:
85:2e:4c:fd:ca:eb:46:ed:7c:88:38:bc:eb:7e:a0:c4:47:89:
9f:4e:cd:2e:d6:10:c6:e4:0f:f2:9f:5a:2f:32:22:8a:8c:56:
db:19:7e:03:5b:4d:6d:2f:2b:bf:1d:63:41:e1:93:e0:d0:38:
72:a3:94:83:d6:7f:b1:f5:67:b3:70:85:0d:f6:68:98:a9:7b:
ac:81:f5:5f:e8:ed:87:20:23:bb:46:f5:53:39:36:3c:64:b7:
84:07:b3:8f:60:7a:5f:42:dd:c7:a8:d8:1e:76:88:e9:4c:f4:
92:0c:54:09:dd:6b:e5:9b:01:36:41:27:9b:3b:7c:f4:3e:f0:
68:a3:61:ce:cf:04:86:f6:7b:33:22:5c:7a:a5:e7:4a:b7:7e:
3a:97:2b:11:06:80:61:47:d0:c5:29:b3:db:f8:f1:4f:cc:35:
58:ef:ac:b2:e5:e2:c9:8a:36:f2:1a:c7:48:51:75:df:da:4f:
7f:cb:81:c6:11:85:1a:f4:84:23:a8:05:2b:22:4c:bf:94:3e:
29:4a:97:c3:f1:8d:44:1c:e4:4c:1f:bf:9d:ee:8f:e2:7b:a6:
81:8a:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:26:13 2025 by rpki-client