Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
File: tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft (raw, json)
Hash identifier: aqYvtnH7F4Il4JE+D/ACm93BPD56zSnfUbX+q2/hGtM=
Subject key identifier: CE:BD:14:07:24:BF:59:5D:FC:BC:14:B9:8F:BD:3D:35:07:36:21:F7
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Certificate issuer: /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial: 0196BDEE3E260F6DF4624F99BFC88515F1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 06:00:29 +0000
Manifest this update: Sun 11 May 2025 06:00:29 +0000
Manifest next update: Mon 12 May 2025 06:00:29 +0000
Files and hashes: 1: tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl (hash: bcGiL/CJIHm8hhCeylv1cA3fdMwZt0xy2mzwrNAU6cw=)
2: y75cXyuDLpcYexdmkwYwYU3Mg-w.roa (hash: x/UMSX0QI4HQrUWQqpp/rIJY0lp7ztidnsmz2QLBnXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:3e:26:0f:6d:f4:62:4f:99:bf:c8:85:15:f1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
Validity
Not Before: May 11 06:00:29 2025 GMT
Not After : May 12 06:00:29 2025 GMT
Subject: CN=cebd140724bf595dfcbc14b98fbd3d35073621f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:22:bf:b9:5d:e6:44:0a:91:3a:16:a7:92:
16:0a:ce:23:8b:ff:0d:21:ff:d6:91:5a:70:36:60:
f8:0b:5f:40:35:f0:26:17:d6:cf:4c:bd:0f:85:67:
8a:4b:43:52:fa:ba:04:c8:e5:20:a1:ee:78:dd:bd:
84:62:63:2d:75:13:ff:b7:21:ca:9a:24:2c:d2:14:
2d:c9:d0:62:36:e0:7d:6d:80:1a:72:ad:2b:ba:2a:
f6:d6:e2:cc:f0:13:df:f8:37:e5:7b:5d:13:10:d7:
77:bc:57:c1:b2:c0:27:3e:bc:06:eb:be:2d:f5:7c:
54:66:c3:cc:ad:18:0f:cb:5b:87:a4:8f:1b:2f:67:
87:0d:59:ad:ab:92:87:76:06:f0:0f:ff:64:70:36:
1e:7a:c1:56:ec:20:ec:2f:85:c6:c0:e5:e3:6c:de:
78:6a:5f:b8:23:c7:4b:21:a8:84:94:aa:99:10:13:
3d:ca:c1:66:53:7a:61:23:1f:a0:dd:8a:73:d1:34:
bb:a0:a4:c3:42:34:db:bf:aa:cc:16:1a:78:21:80:
b5:51:7a:b5:74:f2:d0:6c:54:e5:70:c8:f1:7b:ad:
5e:b7:32:d6:15:b1:28:cd:81:10:b5:99:01:1a:ae:
e2:35:5d:e6:71:f5:ae:39:1e:4a:6c:9d:1f:45:0f:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:14:07:24:BF:59:5D:FC:BC:14:B9:8F:BD:3D:35:07:36:21:F7
X509v3 Authority Key Identifier:
keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f1:1a:c3:47:9f:fc:d2:72:2e:14:ba:82:c4:36:93:db:19:
12:c4:9f:92:5b:1d:53:9a:a0:7c:38:2b:32:8e:c9:ab:6d:68:
9b:5c:02:c8:7b:2f:64:06:2d:32:89:29:c3:ca:5a:37:4c:e0:
0f:3f:2d:bc:f5:db:98:2c:47:d4:c4:b9:9a:df:8f:86:28:70:
c7:c4:ae:81:1b:23:e7:22:76:35:77:bc:fd:39:33:f6:4b:a0:
91:19:90:c4:47:34:5c:ea:9c:3c:72:59:16:ea:11:28:f7:71:
fa:22:b8:bb:e4:b9:ff:45:c6:0e:08:74:97:cf:16:9b:c7:fd:
49:48:c8:1b:d0:52:f3:84:4e:d2:90:fb:b6:81:dc:a1:4d:82:
4d:88:39:32:6d:28:ac:98:19:1a:91:05:44:d1:cd:d7:e3:ed:
9d:8e:20:3c:36:ca:85:96:98:4b:52:61:f5:46:34:67:d3:69:
a9:81:b1:4b:10:29:04:c2:4d:e1:a2:cc:0f:23:7f:74:af:9d:
02:97:ab:8e:0c:fa:cc:7d:6d:10:e1:21:d0:1e:6c:04:36:df:
0d:f7:39:c3:17:64:c6:4f:7f:78:49:ce:0b:37:3d:f6:16:4d:
5c:40:cc:12:cc:81:df:90:bd:a8:ec:02:0b:ce:ae:ab:02:74:
dd:38:cf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:31:21 2025 by rpki-client