Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: c4GfuvbNyP/pxoYA5CSqBfEDl5ROJ/W2SiN28gZTszY=
Subject key identifier: 79:DD:66:07:C2:07:15:1C:00:C1:A8:59:30:17:73:FB:B1:CD:CA:AB
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 0196C04AA2C92484120E288E50BAC3EBF852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 17:00:38 +0000
Manifest this update: Sun 11 May 2025 17:00:38 +0000
Manifest next update: Mon 12 May 2025 17:00:38 +0000
Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: vHtjfyJ67fIvutYmYkp+OxhUSznz8r/g8hqCaOxveRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:a2:c9:24:84:12:0e:28:8e:50:ba:c3:eb:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: May 11 17:00:38 2025 GMT
Not After : May 12 17:00:38 2025 GMT
Subject: CN=79dd6607c207151c00c1a859301773fbb1cdcaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:ef:1e:6e:84:87:9f:66:cc:a6:58:fb:a0:
0d:de:0d:75:5a:5d:5e:cc:b0:18:21:ef:95:2d:d0:
2d:85:b4:4c:e8:80:4c:e2:61:3a:75:b9:5a:f2:cd:
c7:2d:ec:de:67:c3:d0:cf:e4:45:72:84:9b:b3:54:
5a:6d:61:61:dc:25:af:7b:88:e5:ce:73:45:8d:91:
b0:4f:db:6e:99:5a:a3:d3:ef:4d:35:63:a1:4b:48:
1f:40:dc:0a:3e:e0:91:64:5f:a8:a9:0c:4c:66:c1:
46:95:64:ca:e8:18:a8:d3:81:64:31:51:16:37:5f:
65:30:38:81:1e:98:71:ce:f1:cb:d4:0d:3d:8b:61:
42:56:8e:65:4e:61:77:d0:22:ae:fa:f2:bb:77:20:
76:b3:1a:d9:c2:e0:81:a2:d6:42:bb:20:75:4f:43:
27:5e:43:f5:20:c1:47:42:aa:63:5f:46:d8:aa:49:
81:fc:9e:d2:5c:9a:9e:d0:fb:e9:aa:3b:55:80:70:
11:93:72:34:83:d2:97:2b:4e:fc:a2:73:a1:77:c9:
ec:55:a3:74:51:3c:b1:56:4a:82:6e:1f:50:46:ed:
ed:d9:df:b8:ed:0a:65:0d:3c:3d:a7:0c:05:68:81:
90:d3:0a:70:08:fa:e7:81:26:31:fa:48:6a:95:5c:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DD:66:07:C2:07:15:1C:00:C1:A8:59:30:17:73:FB:B1:CD:CA:AB
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b7:4f:82:44:ca:f3:55:68:40:ab:e4:df:c0:07:64:b9:3e:
1c:c0:7c:ed:34:2a:3b:58:12:36:3a:79:fc:3c:03:ac:72:f2:
ea:a2:c7:77:d3:45:5f:71:a5:94:cd:20:31:17:e5:6e:31:54:
c0:4c:e4:06:e5:83:c6:ca:76:c4:c9:c1:7c:1f:a8:ce:74:41:
d8:56:f7:1e:9b:98:34:19:81:25:d7:c8:dc:51:28:6e:e9:21:
3f:0f:52:06:51:bc:42:c7:46:93:8b:53:ab:34:bb:85:bb:5d:
92:07:a7:0c:62:74:56:08:be:62:ad:7b:b2:b5:d6:5b:40:01:
10:50:bf:2e:75:73:7e:d2:13:72:44:43:cd:d3:f9:ee:a2:b8:
a2:d5:33:1e:d1:03:ad:9a:3b:1c:a9:d5:69:24:95:4a:18:28:
c4:b8:a8:11:d3:da:f6:05:53:a6:40:e5:f7:91:a7:77:f4:c8:
a3:df:31:95:9e:18:a4:c0:94:7a:38:20:2a:5f:bd:10:36:1b:
73:f9:4c:d6:a7:4c:b1:ac:0a:17:00:8a:8b:2c:a0:67:3c:06:
26:f5:10:16:02:c4:ab:52:eb:02:aa:7f:66:c2:25:f2:96:60:
ff:b3:2a:24:56:c8:67:db:64:ef:22:ea:da:94:45:b3:87:0e:
ae:1d:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:31:14 2025 by rpki-client