Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json)
Hash identifier: 35VVs9e4QbLT1bDjUdQt1n/kGoLiaARXSOab9Z5dz8Q=
Subject key identifier: 25:CF:BC:0E:A5:82:BC:4B:29:11:B5:0E:4E:3C:54:C1:14:7D:B7:77
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 0196B9A3A6FC78D4A70CDA61C405EA80A98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 10:00:32 +0000
Manifest this update: Sat 10 May 2025 10:00:32 +0000
Manifest next update: Sun 11 May 2025 10:00:32 +0000
Files and hashes: 1: NEbsKu77gYfpibY3_TC8dQH80XA.roa (hash: aeVQJbng3C7RHWncwne+AehQ3FDANQdssqp/Bjc9vag=)
2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: y4gD+ePRbanQJDJ22/BXDSlVTKqsdVrbQVPyK0Unqog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:a6:fc:78:d4:a7:0c:da:61:c4:05:ea:80:a9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: May 10 10:00:32 2025 GMT
Not After : May 11 10:00:32 2025 GMT
Subject: CN=25cfbc0ea582bc4b2911b50e4e3c54c1147db777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:f2:fe:06:7d:27:be:09:f5:89:21:3b:14:
61:42:d4:aa:31:fe:9c:70:ec:68:46:63:a8:fa:4e:
03:31:f1:d7:8b:bb:b1:d3:39:d6:f8:5a:8c:e9:6e:
8c:d8:8b:99:24:17:1a:21:66:41:b7:21:50:7f:9d:
74:59:3f:68:7a:c8:d1:7d:3d:19:31:7a:12:c7:4d:
92:1f:17:94:4c:7a:af:f9:5d:31:71:d8:4b:b9:ca:
48:52:c8:f3:5a:2d:95:cd:89:0d:af:c9:30:78:6a:
3c:19:dc:b4:31:1f:57:49:7f:67:50:5f:39:a7:ec:
08:3d:f4:5d:95:cb:6f:e2:0f:f7:39:d9:4d:45:c3:
86:c5:f0:9a:be:8f:96:8a:a2:fc:c8:d6:41:b4:e3:
b8:e4:75:7f:ce:c5:9c:c2:51:84:88:74:7e:23:6c:
1a:9b:81:aa:dd:1c:42:14:95:af:11:4e:d0:02:71:
1c:1a:bc:37:87:b9:df:db:5b:56:07:66:84:c1:3a:
3d:ec:16:7c:1e:b4:32:48:d8:d2:c2:96:d9:f5:aa:
e4:d8:bb:0c:9e:cf:06:00:04:17:7e:40:73:16:49:
b7:8e:00:5b:c0:b3:da:c9:94:1b:5e:90:26:04:55:
2c:3c:67:29:37:9d:ac:36:2e:39:06:f1:0c:24:fb:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:BC:0E:A5:82:BC:4B:29:11:B5:0E:4E:3C:54:C1:14:7D:B7:77
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:cb:50:17:d1:bb:52:39:db:d0:61:4b:e6:29:73:d7:8f:31:
b0:14:37:f7:da:ae:a7:db:98:2f:b8:72:4f:e5:0f:2d:79:be:
17:43:86:1e:6a:45:f7:9c:d6:3a:36:33:30:42:25:da:81:9e:
a9:5d:d2:16:75:8d:75:1e:c2:a0:59:ed:73:c8:0b:46:a7:8a:
b8:df:8a:6e:99:68:ba:71:f5:b9:2b:63:c7:41:aa:76:8f:5b:
4b:83:00:d4:29:f3:90:ac:07:e1:b2:dd:f2:8a:58:ed:07:ff:
ef:cc:dd:55:81:52:ee:3a:fe:54:0b:56:0d:f4:87:35:75:23:
65:e4:39:86:db:6a:01:a6:d2:e8:15:fb:a2:2d:bf:cd:44:54:
5f:56:02:b6:7e:07:ab:83:cb:af:4a:4d:b4:20:6a:f2:a4:f7:
c6:b3:49:d4:43:97:d2:ce:0a:ea:54:b7:da:ce:74:13:85:86:
06:85:fd:4a:5a:db:1f:65:52:e8:5c:52:94:a6:65:bf:be:91:
25:d8:72:d5:50:b6:40:6e:95:3b:a8:e0:d1:f5:c5:dd:61:69:
f5:0c:78:c8:80:ef:cb:d3:44:26:38:43:06:ac:47:65:cc:8d:
6c:c4:ac:36:0b:d3:42:f1:3c:97:a1:34:d5:53:26:e8:08:6d:
fd:20:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:51:42 2025 by rpki-client