Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File: T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier: BmaJ2I+VhsHI2YxDTbUG3um/31n6SmcKN6wZwPCKgeA=
Subject key identifier: 09:DD:2A:15:58:A1:41:73:70:4B:7E:1A:D8:15:C7:32:34:4C:36:39
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 0196BF6F8F1160B3D28E7089D38573EF5309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 13:01:21 +0000
Manifest this update: Sun 11 May 2025 13:01:21 +0000
Manifest next update: Mon 12 May 2025 13:01:21 +0000
Files and hashes: 1: 1rrQNZWItDgfdECFOf22Jh7vi4k.roa (hash: oHl9vepG9gEfJ6vCHFkAvnbQr+mxDKJlGHdGdAeE9CA=)
2: 3RF21_ECpL5M_wnxKo1LaLxJwIk.roa (hash: DwVXHnFiU49l5hw1O5O7YFwPLdE2x6EWi17vCjDfMV4=)
3: OfliSFK47yOA2Tkix0wrkAH4x2c.roa (hash: B0Voqn9uU+7JqaJFZrNcBBKpjX2nZFFKEZ39gYCt+es=)
4: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: NagUGZYWmlmBkFTPDkifl/SK08Htcs8TowmuOmjMbyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:8f:11:60:b3:d2:8e:70:89:d3:85:73:ef:53:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: May 11 13:01:21 2025 GMT
Not After : May 12 13:01:21 2025 GMT
Subject: CN=09dd2a1558a14173704b7e1ad815c732344c3639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:ea:a8:56:5c:2b:06:fa:54:c8:81:c9:d6:
5d:0f:35:e2:fd:bf:a0:37:a7:36:29:9d:d8:87:b4:
75:98:60:cd:9c:23:3d:ff:4b:4f:f8:3a:36:c0:aa:
46:03:bf:02:d7:29:ad:a7:23:06:6e:97:23:fc:5d:
02:2b:48:06:95:99:2b:a4:b0:9a:33:e2:55:3d:2f:
b3:8e:7e:d1:4c:a2:ba:0a:54:49:8c:1c:23:f2:c0:
59:17:74:cb:11:8d:ad:c1:57:84:8f:90:19:15:1d:
7d:54:7e:68:66:03:4c:ff:e5:18:9b:95:f9:1a:ef:
67:d2:b9:eb:e6:60:ab:d3:2c:51:32:0f:cc:e0:5d:
c5:76:a0:17:dd:29:e9:04:a7:0a:49:b6:59:56:a6:
da:87:8a:98:96:04:73:a6:45:c4:79:e8:ff:44:1f:
ce:5d:6e:b8:28:de:35:fc:3d:76:66:70:bd:e3:a3:
7f:19:c1:7f:62:c0:d2:69:34:87:6b:37:83:05:d1:
e2:f0:59:2b:08:74:c2:0a:6f:44:c8:a6:74:7e:8c:
7a:2d:c8:ca:66:da:eb:0f:5c:8e:9c:15:a1:0e:e7:
5a:07:bf:0b:2b:83:cf:a7:42:62:3b:1a:4f:93:19:
fe:22:10:cb:26:37:44:af:40:73:0a:70:92:c8:da:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DD:2A:15:58:A1:41:73:70:4B:7E:1A:D8:15:C7:32:34:4C:36:39
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:4d:cd:ed:e9:8a:b9:10:11:b9:31:07:14:23:e5:06:ab:
b8:68:f2:63:cc:7f:28:71:b7:63:6a:a9:db:3c:05:d8:fa:5d:
ba:9a:fc:e2:3c:96:45:f4:4c:12:a3:7b:80:ba:0a:c1:ed:16:
24:5d:28:54:52:16:49:89:23:4a:55:2e:38:ea:a4:01:a7:34:
cc:3d:d7:db:19:dc:82:66:5e:79:ba:05:83:b1:33:dd:cb:7f:
42:eb:32:a6:c4:98:43:1a:b7:99:75:62:cd:dd:ba:30:05:d2:
7c:cb:ae:91:c0:d2:d7:19:37:87:be:be:9b:06:34:7e:c8:81:
67:81:30:24:9a:f0:06:41:ef:8a:32:ca:fd:82:00:02:29:44:
a7:01:00:4a:93:88:6e:bd:84:7e:4a:d9:4f:84:0f:77:55:74:
07:b8:e8:92:5e:f2:7e:13:8b:57:3b:49:cb:08:10:5a:4c:bc:
43:e5:17:b1:a3:18:40:c3:01:db:f6:06:98:85:e0:74:c0:4e:
0e:7a:c9:3d:b8:60:cf:8a:63:35:20:b9:f0:f3:4f:e2:ae:73:
84:a3:c6:fa:e8:6f:d9:a8:d1:01:a0:8c:86:63:8e:7e:7e:58:
82:a7:a6:c5:d5:70:4e:5c:79:10:f9:31:cd:09:75:67:7a:20:
50:6b:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:31:56 2025 by rpki-client