Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: JH39tsjJE3rAqGYw1pgRsSEdgjWTi9JYp17nZ/TPksQ=
Subject key identifier: 17:ED:29:B5:E3:A1:56:45:60:80:29:41:F7:34:8B:F3:2C:3A:D6:06
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 0196BD494021EBFB8BDA3F935035FD90D4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 088D
Signing time: Sun 11 May 2025 03:00:16 +0000
Manifest this update: Sun 11 May 2025 03:00:16 +0000
Manifest next update: Mon 12 May 2025 03:00:16 +0000
Files and hashes: 1: Dnpb75XdwM7LxtjkYlloNVMA6rs.roa (hash: EzyV/txDtZvmkY6vt32XISbysVcisfy2gnGp9jREhPs=)
2: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
3: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: c24GMEiMUt1XJPp73fspOKkg/636xx4X5aPTmQ2syJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:40:21:eb:fb:8b:da:3f:93:50:35:fd:90:d4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: May 11 03:00:16 2025 GMT
Not After : May 12 03:00:16 2025 GMT
Subject: CN=17ed29b5e3a1564560802941f7348bf32c3ad606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e2:66:d5:52:d2:76:d2:3a:7c:5d:06:da:04:
15:b2:ee:a4:f7:1b:d7:1d:d5:ee:0b:af:a0:f3:fb:
d8:c9:da:3b:4a:d1:99:1c:02:54:11:ab:e4:15:1c:
b8:67:c2:5c:c3:5d:8e:f1:85:7e:17:8f:59:b9:0a:
58:e1:1e:7e:34:c1:1b:72:19:25:ac:df:e4:82:e2:
e6:21:8f:5a:06:eb:61:b9:7e:27:03:b7:bf:9f:5b:
04:c3:ea:0d:04:8f:5a:a2:b7:03:e2:92:39:2d:59:
89:ef:89:03:6c:79:ca:fb:c3:37:e7:a8:86:cb:52:
90:90:87:bf:00:81:d6:a4:80:7e:85:34:3b:68:c8:
9a:9d:64:60:5b:5d:cb:ca:2b:dd:ea:83:c4:08:b4:
ad:89:37:38:7c:30:23:a1:1c:13:7d:02:77:83:ea:
60:aa:61:5b:d5:f9:89:70:44:71:39:05:4b:79:af:
a8:e5:2e:48:ba:8a:71:e3:06:84:58:fb:25:c1:f9:
03:2b:d0:0d:33:9a:de:6f:50:80:bc:05:65:2a:1c:
26:ac:57:97:8c:a4:45:a9:b2:d5:a2:c8:41:83:e2:
1f:07:6b:33:14:cf:18:f4:17:69:44:15:cd:8f:46:
fe:6b:7f:58:c0:d9:e7:62:19:5b:25:73:75:98:ee:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:ED:29:B5:E3:A1:56:45:60:80:29:41:F7:34:8B:F3:2C:3A:D6:06
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6d:c5:08:68:8b:a1:b0:9e:84:16:ac:8e:f4:14:f7:4b:b0:
f4:e6:c9:33:6c:ef:8d:71:69:c7:4f:42:db:0a:03:cd:f0:c3:
b0:4a:9f:01:e9:96:9f:b1:d2:96:35:3e:51:45:a9:b0:50:27:
ac:e0:09:ba:f3:84:5e:47:d6:8d:ee:94:07:ed:fa:c0:d4:2a:
f5:05:60:ba:ab:ee:cb:6f:84:fb:d4:63:19:b4:39:18:01:a5:
96:ca:02:30:6a:9a:7f:74:ee:d0:d5:b9:88:87:ac:85:04:5f:
1f:79:73:5c:ac:7e:8c:1c:85:11:8b:40:f3:44:14:6e:fc:f1:
03:33:d2:1c:69:0b:9a:2c:b7:3b:97:86:11:40:e6:fa:0f:14:
8a:16:80:70:e4:55:cf:f4:c1:c4:a5:ac:a3:5b:39:ca:d3:3f:
b6:89:b5:8e:d4:65:34:f1:f0:3e:9e:57:a5:69:9f:03:ac:da:
17:71:6d:da:10:c0:b8:53:66:89:cf:4d:c7:24:77:64:73:66:
a0:58:b7:b7:2f:89:a9:5e:ba:e0:79:4b:fd:a3:d2:bd:d1:5a:
f6:de:4d:35:83:1b:70:18:07:1f:db:54:fc:e7:03:37:78:11:
25:15:58:c8:26:a4:1f:67:80:fe:6f:87:ec:d4:e8:f3:8a:d8:
3a:c7:70:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:29:33 2025 by rpki-client