Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: sxs6q5oqgU0owhZ816qGCTn6sTSliMBfOebEGN35avo=
Subject key identifier: 7E:F2:06:63:71:69:6E:B0:05:66:66:A2:1A:00:4F:6B:68:11:FC:CF
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 0196AA9EAA98DB158647C3787A1C24F0905D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 12:00:47 +0000
Manifest this update: Wed 07 May 2025 12:00:47 +0000
Manifest next update: Thu 08 May 2025 12:00:47 +0000
Files and hashes: 1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: 1UkVs8CRTqYRlExRHjGuQ6IAoxxaAJlr0NPEf/jJQ/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:aa:98:db:15:86:47:c3:78:7a:1c:24:f0:90:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: May 7 12:00:47 2025 GMT
Not After : May 8 12:00:47 2025 GMT
Subject: CN=7ef2066371696eb0056666a21a004f6b6811fccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:4e:01:9e:6e:2d:34:9e:2d:75:cf:7f:34:
19:25:65:43:a1:22:9b:5d:47:3b:4c:1a:9f:65:f2:
b7:43:1a:4b:0e:ee:b4:69:20:af:27:bb:96:c2:1e:
c5:0c:0e:b1:ca:e4:5f:89:a4:f0:a3:1b:99:ba:b6:
39:74:ad:ac:47:6e:89:8f:d5:99:c2:df:1a:00:d2:
90:9c:3b:67:a9:48:8f:20:a1:94:45:38:94:22:e3:
6b:40:c2:7f:db:6e:fd:9a:74:b5:b2:b1:cb:ef:b4:
7b:1c:a6:71:ef:db:4b:27:56:01:d1:0c:12:b9:bf:
bf:43:8a:1b:81:24:53:07:20:21:3d:37:40:f4:02:
fe:a1:97:9c:59:3d:06:09:19:9c:21:4b:24:27:3f:
48:49:f7:97:09:03:20:af:d0:fa:30:7b:b8:12:fe:
bf:ec:da:53:26:17:e7:e4:25:43:7b:82:95:a9:d7:
a6:fc:ae:39:32:7c:7d:04:9b:d6:4f:00:ab:56:85:
72:4c:3f:20:a5:a6:5b:67:84:f5:75:5c:6f:d5:62:
3f:6a:28:f1:11:8f:29:7e:e1:51:b0:73:d4:df:1b:
bd:a1:b1:cd:fa:d9:61:7c:fb:1a:45:5b:a1:d3:ee:
d3:af:62:d3:9b:39:5d:24:05:41:b4:df:90:3b:dd:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:06:63:71:69:6E:B0:05:66:66:A2:1A:00:4F:6B:68:11:FC:CF
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d8:e9:e8:70:d9:fc:e2:b6:ec:e8:b6:7c:8f:a1:a2:93:2e:
38:5e:33:77:d6:c3:d2:67:d4:82:41:6b:cd:ee:90:59:1e:e6:
ba:ee:8c:cc:9a:b6:3b:25:40:16:40:dc:1d:50:27:5a:cb:88:
f5:a5:01:93:4f:12:18:d2:63:65:ec:2f:aa:83:2d:11:e9:14:
f1:44:3a:71:8d:e4:d0:c2:5b:bc:64:36:15:22:90:d2:16:ca:
b6:9a:25:1b:79:33:0b:35:f9:e9:10:eb:a9:a1:98:b1:df:8e:
fd:ea:1e:1b:99:1a:14:84:ac:5d:31:61:ae:af:47:3c:53:77:
31:1e:d5:c2:ce:98:51:92:aa:5c:1b:33:ff:14:1d:4c:37:09:
95:66:19:0c:c2:f9:30:6d:80:57:51:7c:71:3a:2b:90:79:73:
da:a7:fb:eb:13:75:f3:ef:af:1d:29:05:27:c8:39:5f:57:40:
aa:e6:66:0c:76:e0:f3:b7:37:e9:b6:9e:42:07:04:7c:79:7f:
e8:01:31:41:24:d4:32:ac:6c:aa:0a:80:32:ee:a4:56:8d:83:
d5:3f:93:f5:c3:83:b8:26:94:95:34:0d:a7:23:31:13:41:0e:
0d:18:e2:32:6e:13:7e:c1:9d:21:33:88:c9:23:6f:6e:cc:8b:
85:63:30:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:01:56 2025 by rpki-client