Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: gog3/1MdwOdXTKYtJTeHqTCKQj/TJjR2pIHITOfylKE=
Subject key identifier: B4:9B:6F:C0:07:8C:70:79:07:B7:10:3C:CC:B4:29:57:24:98:B1:79
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 0196BCA469E3C73699E486AD16DB9CB0ECEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 00:00:13 +0000
Manifest this update: Sun 11 May 2025 00:00:13 +0000
Manifest next update: Mon 12 May 2025 00:00:13 +0000
Files and hashes: 1: 3wD7YASUrL3NpA7N1DKGwyMvpW8.roa (hash: E3LCGPj2WzMDsMMPMtvTWx8+o6rGMeVTiLG80T025To=)
2: tCxsttlDEYs9pRw5Gm9iTgZyCBc.roa (hash: 0ZbwaGE5XpT8151KuGcEKOSEkVLV60MXa5tXdHShvII=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: jS7eJP0N4BRVGrhuoZEWWXzWcJIqu+S6uond2LZXtp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:69:e3:c7:36:99:e4:86:ad:16:db:9c:b0:ec:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: May 11 00:00:13 2025 GMT
Not After : May 12 00:00:13 2025 GMT
Subject: CN=b49b6fc0078c707907b7103cccb429572498b179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:13:4b:70:24:51:b0:77:23:49:e1:f6:f7:
bc:dc:7a:68:6b:1f:a2:33:87:72:48:21:a7:da:f8:
6a:68:f2:45:84:4b:c0:43:57:bb:2c:70:9e:41:38:
02:7c:fc:42:46:0b:ee:91:da:0a:37:9c:35:58:c3:
09:73:27:5a:8c:f1:e9:23:42:78:75:41:ac:26:62:
2f:01:4e:f1:3e:07:e8:09:36:00:cb:26:83:64:5a:
08:90:45:f2:1b:3f:89:bc:a4:b3:a8:5e:d5:f6:19:
25:99:60:be:3a:a5:5e:79:7e:87:3a:c5:85:fa:e6:
1d:1e:4e:a5:e5:58:ca:57:5a:56:bc:f3:1f:59:d0:
51:69:7b:bc:38:7e:f7:cf:18:e9:a4:42:f6:60:6f:
6d:87:88:51:f2:c7:ab:16:55:ae:f3:9b:e3:93:45:
6c:f5:e1:e8:24:a4:76:3f:89:94:4d:22:bb:e1:97:
30:11:96:da:7e:3a:ed:35:5c:eb:5b:e2:7f:60:09:
72:67:92:c4:12:eb:ff:49:3f:ac:84:f2:fd:86:a2:
ae:c6:ac:2c:31:59:ce:0f:29:61:0b:12:91:24:6c:
c4:0b:e2:15:14:bc:35:7e:c6:df:67:60:85:cf:97:
48:a7:79:2f:8d:6a:0d:84:11:f5:f3:f8:d5:56:0f:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9B:6F:C0:07:8C:70:79:07:B7:10:3C:CC:B4:29:57:24:98:B1:79
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b0:1b:68:82:b9:0e:cb:73:f3:b3:3c:7b:b8:4e:d3:e1:a8:
12:d0:cf:27:dd:af:40:02:43:36:04:c5:4e:c8:43:c2:89:82:
65:f2:43:9b:bf:8f:89:fb:f6:82:32:45:c3:22:c6:e5:b2:8e:
94:42:f2:ef:09:5b:1b:a3:a5:e6:e1:64:ae:b5:30:8a:c8:5b:
5d:69:70:19:f2:7b:38:23:f3:ac:73:0f:1c:06:bb:7f:d0:7b:
c5:a3:a9:49:3a:c7:11:e6:59:02:9a:78:28:1d:89:4f:7d:6b:
c7:0b:26:be:e8:74:80:13:e8:cd:0d:5e:8f:22:a0:90:01:5e:
b2:b1:5f:ae:ec:d3:15:29:e0:b1:41:07:2f:ed:33:e0:9a:14:
74:a2:40:3e:2b:9d:7c:de:b4:23:6e:f4:28:e9:52:de:32:44:
e9:be:b6:6f:c5:6a:03:e5:40:6f:d9:b9:f4:40:5f:bd:ed:9b:
fe:24:e8:69:ac:d7:ea:39:38:58:58:3c:38:ae:cb:05:18:b9:
3c:0d:5f:1a:8d:4d:56:da:e5:b8:6f:d3:6a:95:44:34:38:09:
30:a8:5c:62:d3:91:3d:4d:6e:82:5b:96:ff:24:a4:dc:53:26:
d1:a1:51:10:72:cb:53:94:64:96:eb:43:e7:93:62:41:a4:99:
69:bf:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:02:40 2025 by rpki-client