Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier: 5WywE9npCAKbWrLz9kRpynt9LLmV4/80cM9y67N30lI=
Subject key identifier: 1B:B6:E0:ED:AB:F8:EA:8E:17:38:EF:0D:E8:F2:C2:B9:AD:B2:9D:C9
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial: 0196BBFFA5CC6FF1F872009EC76866F4B6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 21:00:15 +0000
Manifest this update: Sat 10 May 2025 21:00:15 +0000
Manifest next update: Sun 11 May 2025 21:00:15 +0000
Files and hashes: 1: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: /qcMzTt51QkstM5ilp/XWclC0cJaYXfgydJ94q6YYKA=)
2: yUpCnFh46Tqx7sCXg4QHc_cNe3o.roa (hash: cp+PmQthE9hblxpquCO9Uz9at9P5Zu4kvGvMw6tU+Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:a5:cc:6f:f1:f8:72:00:9e:c7:68:66:f4:b6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Validity
Not Before: May 10 21:00:15 2025 GMT
Not After : May 11 21:00:15 2025 GMT
Subject: CN=1bb6e0edabf8ea8e1738ef0de8f2c2b9adb29dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:8a:33:95:fb:46:9d:56:a0:9a:97:78:e2:
77:30:b5:8d:a6:87:17:5d:ca:e4:f7:d2:3b:8f:bf:
31:30:9f:29:89:35:34:5d:b8:2e:7c:a0:2f:1f:25:
cb:8b:f1:7f:f9:71:ce:2a:3f:e1:e4:de:b2:95:20:
40:3a:e4:17:2d:46:f3:36:be:ea:3a:3e:da:ea:8a:
65:89:1e:a0:2f:2f:f3:be:31:94:f9:42:c4:a6:da:
80:35:14:fa:fd:bf:d9:5e:a8:64:f8:4d:3e:62:83:
35:49:ef:af:22:3e:df:0f:d0:1a:00:ac:96:07:11:
68:f0:95:eb:0d:8e:0e:c3:91:3d:e2:bd:2b:31:44:
0f:fc:38:f5:20:83:e6:a4:96:99:98:62:49:f2:db:
b3:2d:78:d9:ec:4f:c5:63:c6:53:fc:5c:ec:27:93:
33:86:0b:75:75:93:98:6a:98:1b:b6:be:81:1c:80:
d1:c6:0f:64:b4:fe:77:61:c5:b0:63:2e:a1:86:98:
ff:84:f0:37:01:72:63:eb:47:b8:37:df:99:c5:e1:
67:cf:ff:a9:95:b5:37:7e:cd:a6:6d:de:63:f6:64:
7e:65:92:e4:d8:61:15:0d:c4:b0:5f:46:1e:16:db:
17:92:4d:be:c1:65:54:73:aa:79:0c:8a:2e:4c:17:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:E0:ED:AB:F8:EA:8E:17:38:EF:0D:E8:F2:C2:B9:AD:B2:9D:C9
X509v3 Authority Key Identifier:
keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:33:30:bc:18:82:a8:3c:c3:5c:1e:30:41:8c:0c:fc:c0:6e:
ea:eb:27:fb:5f:86:7d:f5:5c:96:e3:79:82:7b:8b:7a:ab:42:
80:5d:0c:13:5e:69:e3:de:3c:a8:48:66:54:c6:39:0a:1e:c1:
7a:0b:b0:af:d3:a7:d6:ab:e9:f7:a2:94:0e:83:4b:80:2a:91:
5a:6f:96:30:01:1a:e3:81:67:cc:37:d3:65:c9:48:9a:9d:39:
31:36:0e:2e:e9:3f:95:6a:c7:f0:0d:4b:58:6b:bf:37:ba:bf:
f6:a6:79:62:10:a9:18:9d:f4:b7:64:5a:74:37:f8:5c:41:be:
31:cd:af:c5:15:2c:88:8a:31:e4:8a:0c:1a:d0:54:ab:1e:06:
6b:97:e2:35:f2:a4:c1:84:51:39:7c:9d:1e:de:9e:85:f5:9d:
9f:59:af:b5:84:20:b7:58:9d:5a:f2:8a:16:62:ea:f4:93:57:
c9:dd:27:a4:37:25:aa:9a:aa:31:12:bd:b7:15:8c:f6:d6:62:
ea:34:ba:6e:0e:a4:3a:e3:48:5d:4c:08:0a:20:4c:32:6f:02:
26:0b:c0:90:78:d7:34:ef:6d:5b:ff:a0:96:0c:73:fa:fc:86:
f5:9b:17:31:16:1d:5d:2f:35:42:c5:cd:5a:63:4b:05:c1:e9:
71:19:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:09:58 2025 by rpki-client