Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File: Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier: O0rz98VOBQZsd4N6MORvf3Dy4z+Dgd7wXr0MvSUouf4=
Subject key identifier: C7:59:1B:72:D1:94:B3:D4:B2:3D:B3:DC:D7:C3:3A:45:15:1E:03:52
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 0196BA4885193CA6E25C66FBF6C1DF31AC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number: 153A
Signing time: Sat 10 May 2025 13:00:36 +0000
Manifest this update: Sat 10 May 2025 13:00:36 +0000
Manifest next update: Sun 11 May 2025 13:00:36 +0000
Files and hashes: 1: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (hash: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=)
2: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: K7vdXwrLwHcZRaWTq3tG+6MH7lxkpCjD+5kckG1z9Ac=)
3: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (hash: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:85:19:3c:a6:e2:5c:66:fb:f6:c1:df:31:ac:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: May 10 13:00:36 2025 GMT
Not After : May 11 13:00:36 2025 GMT
Subject: CN=c7591b72d194b3d4b23db3dcd7c33a45151e0352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:0e:e5:af:11:d1:e9:54:e5:90:77:fa:a8:
1a:eb:d0:69:90:bf:35:8a:b7:bc:40:60:b0:4a:a7:
44:e7:6b:cf:a5:fc:22:77:f1:fd:3c:59:20:53:51:
97:45:41:d5:49:e7:90:ac:45:01:b3:dc:60:03:aa:
f1:c1:23:89:e1:8b:e5:95:38:47:57:29:71:d0:00:
fd:33:80:f1:89:f2:be:25:b3:68:0a:9c:96:d1:a3:
13:38:8f:20:82:16:2e:8d:d2:cd:ea:44:c3:8f:ed:
b4:b2:82:d5:b3:53:f7:1f:b7:b9:1b:2d:40:d0:d5:
d7:16:d3:ab:fe:d3:83:6f:a6:73:66:77:e5:48:d2:
23:dd:ab:d4:19:5d:43:5f:e1:c0:7a:08:f1:44:00:
ee:cd:91:58:aa:51:03:2e:d5:98:eb:1a:0a:14:70:
a6:19:13:91:08:f2:ad:6f:18:54:d9:f5:29:c5:f9:
16:10:93:b1:b6:4e:c0:7a:2f:9b:f6:fe:37:9f:f7:
e1:66:ee:df:9b:b3:87:f6:4e:ca:d2:80:aa:ba:d6:
9b:81:ae:42:3a:f5:bc:22:6d:43:a4:5e:47:72:d2:
25:f6:4d:9b:fa:10:63:c8:2b:53:b5:b1:d4:3d:88:
33:6f:20:e4:ba:45:a5:4b:20:81:77:ba:8c:ad:95:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:59:1B:72:D1:94:B3:D4:B2:3D:B3:DC:D7:C3:3A:45:15:1E:03:52
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a1:0b:67:c0:bd:7c:ec:8d:06:03:dd:57:46:63:02:8e:d7:
e1:18:c0:9f:9a:ea:c5:f3:26:0c:9b:d6:48:ec:0f:ca:cb:86:
e3:21:3e:ac:93:c4:92:1a:94:b0:1e:a6:0c:61:89:0f:73:6c:
04:b6:eb:fe:ea:54:59:df:a9:2b:3d:10:56:75:44:ee:fb:f8:
b7:d7:24:f1:46:e2:59:3b:eb:87:1c:67:e9:73:1e:73:0a:ab:
0e:0b:e4:c5:b9:5d:52:dd:f9:df:88:6a:33:f1:33:e3:ff:51:
df:ea:9b:0d:a0:0d:ff:04:31:59:d3:69:ca:0e:e8:0f:5f:0d:
87:87:9e:e5:19:04:b8:8a:62:d9:d1:c2:ec:d1:4b:02:90:63:
a2:f1:d3:94:9d:15:41:01:58:95:94:40:c3:6b:c4:ba:a7:c0:
a1:b6:f1:cd:f3:16:b2:b2:bb:60:1c:34:df:3e:c5:6a:03:2a:
9e:d7:aa:b1:f3:74:3f:8e:44:f6:e9:9c:0f:0b:45:8b:ee:8b:
5a:bb:59:63:a5:81:70:6b:ff:94:13:33:5f:8c:4c:fa:dd:d6:
8c:3a:87:f3:90:ce:7d:a2:4c:7e:93:87:d5:37:9f:f1:ee:48:
b3:76:6c:35:81:05:49:40:da:8b:5c:c3:2c:03:96:3a:6d:b9:
9f:96:f9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:36:49 2025 by rpki-client