Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: xK3cyVKF9IWaOyDNpGJhx1oc7She8VEuuPOXZqiUBrk=
Subject key identifier: 3C:FE:01:CF:E7:46:E9:81:84:3D:51:9B:5E:09:BA:EF:4C:5F:84:18
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 0196B85A16FDB86D1D91587B70064BE230D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 05C7
Signing time: Sat 10 May 2025 04:00:33 +0000
Manifest this update: Sat 10 May 2025 04:00:33 +0000
Manifest next update: Sun 11 May 2025 04:00:33 +0000
Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: ykR3k2S/6PIK9KymeLQKRkJHKxgD8Hnr13siHZyxu1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:16:fd:b8:6d:1d:91:58:7b:70:06:4b:e2:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: May 10 04:00:33 2025 GMT
Not After : May 11 04:00:33 2025 GMT
Subject: CN=3cfe01cfe746e981843d519b5e09baef4c5f8418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:1f:08:59:4d:29:6b:ee:fc:01:80:c9:06:
3d:53:9f:6d:42:d6:c3:63:00:40:67:7a:5c:ba:d9:
8d:ad:ee:c9:2a:17:af:a8:a0:29:b2:ca:6d:81:ff:
82:e8:f7:a9:90:3d:dc:ca:6d:fb:f9:c2:0a:4a:9d:
11:72:de:f5:dd:27:1e:9f:72:cf:79:f2:08:f2:1f:
4b:cf:fc:4b:d6:68:dd:04:dc:cf:96:0c:fa:d7:a8:
10:4c:4e:c5:b5:d0:96:a1:20:bd:bc:ea:14:52:62:
fe:02:d2:06:ff:29:6b:65:bf:98:85:64:7b:87:9e:
2d:44:24:8a:9e:e2:54:a0:57:5b:5a:54:5a:ec:1f:
2b:59:25:28:f5:ed:b2:84:09:cd:c7:7b:c8:d0:40:
fe:83:c2:24:f8:c6:1e:cc:e9:6e:45:1d:ca:79:33:
fb:fc:08:25:d8:7d:18:ad:8e:b6:8a:d8:09:fe:3c:
2e:43:a2:64:59:0d:b9:82:af:cf:dd:ae:29:47:d2:
8f:33:6a:6a:69:48:4a:66:1f:5e:ef:89:13:a5:2d:
8e:ce:0b:4a:eb:0c:4e:4f:b2:46:41:77:70:62:0e:
b1:0d:4f:6f:0f:77:d8:6c:21:78:e3:30:13:82:8d:
f8:df:cf:ee:fa:66:5d:62:78:f7:46:de:15:63:84:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FE:01:CF:E7:46:E9:81:84:3D:51:9B:5E:09:BA:EF:4C:5F:84:18
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:68:87:2a:2e:0e:23:7f:d8:13:e7:f9:1b:a6:1c:f3:99:d0:
08:43:72:bc:e7:a8:b7:a0:eb:13:1a:de:f7:fb:a3:41:f6:69:
bc:47:90:6f:d2:76:42:71:94:f8:d5:81:f4:9a:5c:2e:fe:e6:
1c:dc:43:ee:0e:f6:2d:e1:2a:e1:66:d9:3e:0c:b4:d6:db:ec:
92:b1:7c:f8:88:b1:5f:77:d6:d6:8e:07:55:94:c1:a6:a3:62:
9d:1d:41:fa:d8:4b:8a:16:2c:e5:0b:7a:ae:6e:36:46:e0:37:
63:16:e9:01:a9:0d:72:6e:4b:f0:c4:ec:69:43:d5:a5:ac:9b:
52:48:de:84:b9:cf:0b:20:55:ec:ec:53:f4:9c:9b:7f:ac:50:
69:be:32:c1:38:1e:4c:16:a8:74:6e:f8:35:97:ac:e6:16:02:
64:f8:6b:7c:59:ae:31:f3:71:25:4f:25:9d:3b:ab:b5:fc:3e:
c5:6b:77:40:18:2e:46:e0:e1:13:d7:d0:e8:ed:03:16:2c:59:
f0:b5:1d:a0:9f:01:29:ac:40:d7:08:5b:b5:3a:5e:f3:ea:15:
4a:d2:7f:aa:04:39:9b:7b:52:45:11:ee:63:97:34:79:54:29:
28:c7:a2:b0:c5:07:e5:b3:8d:b2:c1:22:e4:6c:10:47:d5:4f:
60:95:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:59:14 2025 by rpki-client