
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
File: TRCb5Q1A4ys9UW_B63LqsyxeC84.mft (raw, json)
Hash identifier: SjAgufte3qU1XuQdHvu6GtcRHT552cWaAKqcVn02otQ=
Subject key identifier: 2F:E9:9B:5C:72:92:38:5F:E9:6D:45:F7:6B:50:18:4E:B1:D1:98:67
Authority key identifier: 4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
Certificate issuer: /CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Certificate serial: 0196C19401DC6C03575702DCB1D26FFF4E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
Manifest number: 2B
Signing time: Sun 11 May 2025 23:00:24 +0000
Manifest this update: Sun 11 May 2025 23:00:24 +0000
Manifest next update: Mon 12 May 2025 23:00:24 +0000
Files and hashes: 1: TRCb5Q1A4ys9UW_B63LqsyxeC84.crl (hash: qTavUrf+Y2NBsk4Ir1jgt1Za6Dwxyk39hxo3gaQfZfo=)
2: _ysqE-Sv0fTgw_gy8qUtBvX43Zw.roa (hash: XDdFm9ijjrDqLsWMBsXWF0Txzhfv7gyIMnkn7RG7zb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:01:dc:6c:03:57:57:02:dc:b1:d2:6f:ff:4e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Validity
Not Before: May 11 23:00:24 2025 GMT
Not After : May 12 23:00:24 2025 GMT
Subject: CN=2fe99b5c7292385fe96d45f76b50184eb1d19867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:71:4e:68:bc:80:45:f3:d3:bf:67:fd:65:
88:df:5c:5b:d1:e5:4f:3e:ce:30:48:a8:b3:89:be:
08:6f:f3:ab:03:13:2d:11:2c:5a:8f:8b:78:64:b0:
dd:3f:60:79:71:50:e6:c3:66:79:16:2c:b0:e7:c8:
e2:93:fd:4b:05:3e:e7:56:47:ca:fa:9e:b9:80:3e:
ff:df:20:4d:ed:70:60:60:cd:e4:46:7f:ee:85:c3:
31:3f:e1:b1:43:bc:0d:2b:99:d0:f1:f3:5b:98:3c:
16:19:da:aa:a4:57:b7:d1:9c:d4:ea:fc:7d:45:20:
3b:18:54:86:35:aa:f4:6e:2d:ac:ee:a3:25:38:ba:
82:54:18:f5:54:39:5d:a6:79:74:b8:c3:f6:28:1f:
e2:4f:fa:19:63:ec:7e:37:3f:c7:c9:df:88:30:ae:
4c:ca:52:50:21:90:bd:bc:e5:48:cb:1c:ca:29:17:
4b:7f:e1:36:4e:b8:23:3e:15:4d:e8:29:b0:1f:42:
c1:a5:87:c7:27:dc:28:61:45:5f:2a:87:f2:ff:eb:
79:34:54:ac:4d:3e:cc:c4:dc:8f:90:a9:22:f8:38:
26:9f:a4:4c:76:46:8d:67:10:bf:f0:d6:bd:f5:30:
0e:0f:2b:df:c9:38:0c:77:64:d9:4a:21:76:48:e7:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:9B:5C:72:92:38:5F:E9:6D:45:F7:6B:50:18:4E:B1:D1:98:67
X509v3 Authority Key Identifier:
keyid:4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:98:6b:af:c3:7c:a5:10:53:23:7b:55:73:98:c4:60:27:a3:
64:56:19:1f:19:5a:a9:be:db:73:2a:f9:a2:dd:66:25:7c:b2:
a7:72:76:e5:6f:b5:03:c7:7b:67:ae:4d:cf:98:47:90:94:55:
ac:22:bf:8d:9e:bd:6b:76:0d:8c:77:5a:21:96:a2:6b:56:a9:
6a:27:d9:61:05:7b:5e:a1:b0:35:34:4d:cc:a8:83:a4:22:f1:
5f:ff:b1:4f:28:72:87:97:79:41:1b:30:d0:e7:76:09:ba:55:
f6:4b:ca:fd:f1:7e:8c:44:b3:c8:e5:71:ee:02:6d:0e:4f:6c:
4a:75:d7:0b:b4:83:85:1c:43:65:bd:62:ab:36:57:85:b0:fa:
9e:56:27:38:f0:fb:13:84:f5:f6:ac:ed:30:c3:c2:f4:f5:e6:
54:b7:07:61:7c:b8:ba:10:80:93:5b:58:e6:c5:e4:77:67:de:
52:36:93:bc:41:28:8e:87:6f:95:f0:7a:b8:f7:4c:aa:92:a7:
ff:46:68:50:33:e2:3d:ce:7c:8a:ee:67:84:eb:49:e2:50:3a:
c9:ca:4a:c2:ba:23:39:0d:5b:50:e1:3f:62:f2:50:11:8c:a9:
53:00:84:92:1d:15:32:ed:5a:f0:51:10:a9:40:4f:a1:50:36:
08:97:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:19:16 2025 by rpki-client