Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: LHXr9ZUpjken/h3GO/Ga7LYxaPzN4PRaQv0I+bPU5lU=
Subject key identifier: 40:54:28:D8:1F:63:EF:48:01:49:BD:E2:D3:D5:76:E1:3B:6B:08:E2
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 0196C12677C40E2EB462961EAB9D085C30B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 21:00:45 +0000
Manifest this update: Sun 11 May 2025 21:00:45 +0000
Manifest next update: Mon 12 May 2025 21:00:45 +0000
Files and hashes: 1: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (hash: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=)
2: MK5kvHBNAAlnKRq0I1CvZhVF9Ng.roa (hash: ku7EY/yVBZoDpf18kdWwR04OCaLbQDYij0LYSvbt0Ho=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: DNnut1eA9apE4wOw01K1vi8bWW0VSWto5esgh/eMnjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:77:c4:0e:2e:b4:62:96:1e:ab:9d:08:5c:30:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: May 11 21:00:45 2025 GMT
Not After : May 12 21:00:45 2025 GMT
Subject: CN=405428d81f63ef480149bde2d3d576e13b6b08e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:66:9f:c1:dc:60:e7:0a:75:96:42:78:18:
9f:84:12:61:13:32:a0:d2:67:47:0c:ab:53:c9:01:
55:34:bf:d9:42:89:0c:e7:2c:93:a2:7b:04:14:2a:
cf:8f:22:26:3e:f1:14:4f:fe:7e:87:26:03:2c:19:
07:84:2b:88:65:cf:87:ae:b2:da:5e:f6:a4:28:ff:
37:e8:7d:10:fa:23:60:77:59:9c:87:d0:93:65:a0:
59:cc:f4:bb:74:29:c9:aa:21:2e:3c:16:7a:10:6a:
3c:94:60:f1:59:08:7a:6f:7b:fa:6a:13:45:fa:6e:
57:05:48:7e:8c:22:be:94:da:2c:e0:cf:e5:ec:b3:
eb:dd:a8:11:58:e3:91:83:65:19:1d:b7:2a:35:93:
49:5c:3c:9a:bb:4f:dc:7b:08:da:99:95:1e:1b:1e:
51:f8:7c:6d:17:31:78:fa:18:e2:11:f6:59:7a:b2:
61:60:43:23:03:68:70:5b:e9:60:7d:35:28:f1:e4:
32:f5:00:5a:12:d7:ca:32:90:51:ba:b7:d2:35:71:
95:01:32:53:9e:8e:63:0c:97:88:f7:ec:49:3f:56:
3e:57:93:51:c7:67:21:76:9d:c9:28:89:bb:ba:a6:
27:46:9f:f9:e1:d0:22:6e:9b:6a:12:cf:08:e2:52:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:54:28:D8:1F:63:EF:48:01:49:BD:E2:D3:D5:76:E1:3B:6B:08:E2
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:41:cf:14:35:a2:81:3d:fd:ab:28:31:7c:cb:7c:20:6b:69:
35:91:df:28:c4:85:27:44:a3:c2:3d:b7:76:1b:0c:52:4e:dd:
30:30:8b:69:be:f9:55:e9:0d:1a:c1:d5:c6:79:c8:26:d4:61:
f2:ae:f8:6e:e2:db:be:52:b9:36:b6:9a:e3:c3:e2:de:5d:00:
42:c3:f2:b8:8a:32:98:e2:6d:2b:ec:69:a7:ce:11:63:89:0b:
fa:97:a2:b6:39:e7:92:70:3c:f4:6d:3d:6c:54:4b:84:d6:4a:
89:5f:7d:4b:a1:14:63:e1:82:eb:58:ee:9d:ca:10:9a:e3:53:
60:b4:0a:0f:0e:8d:53:d9:df:52:ad:67:91:c7:31:34:38:7c:
9c:e2:b5:56:af:cd:56:09:1b:ba:bf:6f:e8:18:77:5c:3f:d6:
d2:7d:ed:45:f6:94:ba:61:b0:9a:7a:3e:d0:90:60:7e:b5:2e:
4a:9a:ce:16:04:a2:21:d5:a1:57:fd:0f:76:ce:27:6b:80:61:
07:08:6b:da:e9:43:49:f6:9e:32:ca:e5:d4:88:83:0f:e0:61:
fa:ef:25:23:a1:d7:de:11:72:2e:9f:3b:04:52:6f:e8:9b:f1:
90:10:e3:7e:c8:1f:d0:70:90:96:ca:a7:02:15:f1:36:0f:2b:
1c:72:2c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:40:27 2025 by rpki-client