Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: xI1lT7J1YDzcJXjp58WKPgRUVicrrR8ZKalTpUHbT1I=
Subject key identifier: F5:C6:22:C7:1D:1C:04:E8:B4:32:68:4B:C3:66:6D:F9:67:BF:53:94
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 0196C2A701661C41620455A60BF2E73A2EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 04:00:46 +0000
Manifest this update: Mon 12 May 2025 04:00:46 +0000
Manifest next update: Tue 13 May 2025 04:00:46 +0000
Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: Pli283nszzXylXwkDPy0cG6mjBllwcCizsM9BZlapcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:01:66:1c:41:62:04:55:a6:0b:f2:e7:3a:2e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: May 12 04:00:46 2025 GMT
Not After : May 13 04:00:46 2025 GMT
Subject: CN=f5c622c71d1c04e8b432684bc3666df967bf5394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:ca:14:18:35:61:ac:fe:cc:44:e9:a9:4d:
8f:a1:72:6c:93:fd:88:26:cd:63:b6:3e:ac:46:c2:
bb:2e:e3:5a:5d:92:f7:4f:e6:68:9e:aa:f2:e1:f5:
dd:5f:cc:d9:0e:67:a8:99:ec:b6:1a:58:e2:3c:10:
47:d0:82:ae:c3:ce:2b:48:f0:9e:85:58:e0:8b:a2:
46:07:c8:5c:28:d4:1e:1a:8b:fb:82:cd:36:4f:d5:
44:2e:4f:12:3e:b6:ff:d7:b1:29:19:fc:bd:a1:aa:
b0:c3:5e:92:9e:56:b6:81:6e:34:02:bf:37:7b:bd:
9b:fc:f1:9d:c6:df:b5:d7:e0:f1:49:e8:37:05:6c:
9b:a4:b5:22:c5:51:fc:28:40:3a:76:3d:ac:b1:e4:
dc:26:08:c2:05:0a:bf:fc:e2:29:5b:c2:9a:53:91:
f7:b4:26:6a:e8:3d:26:cb:d7:f1:49:92:48:b9:0a:
81:cf:4d:9f:6b:a5:6d:8a:84:be:dd:0b:24:f9:55:
4a:e0:a2:0e:a9:fa:a7:7f:4b:86:19:b5:80:2e:01:
a9:f3:df:9b:8a:7d:09:7a:a6:5b:3b:d7:c7:61:94:
06:a5:87:b8:ee:4b:63:08:ca:7f:98:33:bd:34:af:
64:44:f2:21:ad:3e:5b:08:f9:f7:9a:80:ac:34:13:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:22:C7:1D:1C:04:E8:B4:32:68:4B:C3:66:6D:F9:67:BF:53:94
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:c8:a5:2d:7d:af:20:36:95:7d:6e:00:49:ee:2b:d3:58:
8c:a5:4c:f2:4b:a3:7b:d8:18:26:3f:fb:a6:21:4b:a9:a6:5a:
df:1b:c5:49:ca:65:d3:cd:6b:09:dd:6a:39:de:be:30:4a:47:
6a:c1:03:8d:bb:20:59:dd:23:c3:3a:98:c2:2e:64:50:81:ec:
93:d0:2f:d5:0e:69:66:84:09:cd:24:84:5a:b0:1d:e7:38:f6:
19:9a:b9:35:b0:ba:00:1c:e2:ec:60:3e:7d:e6:54:f5:4c:3c:
50:23:bb:9b:3c:78:96:37:11:a5:7a:e9:f1:b6:14:b1:3b:bf:
98:f4:83:44:cb:15:ff:86:7d:fd:bb:86:35:ea:4a:a3:11:23:
bc:ff:8f:1d:10:86:a5:a0:d7:dd:bd:80:7c:78:a2:6c:38:14:
09:c5:0f:4f:ec:38:3b:df:6b:9d:50:52:09:ea:b0:26:96:75:
4a:15:35:f0:ce:84:02:56:54:40:5e:01:fd:1a:eb:61:47:00:
69:52:5a:73:92:c3:6c:a7:27:e2:5d:f0:bc:8f:15:79:8f:b6:
aa:55:9e:e0:7f:ef:8f:e2:a7:2f:26:46:0f:42:07:97:66:e9:
43:1e:15:d0:fe:24:c8:79:19:11:46:db:06:3b:9a:ad:8a:d2:
cf:72:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:09:46 2025 by rpki-client