Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: 3K1Ct1iCLOFJ+b5TctEWxOlz0oSsAb3Pn9MavpxGchc=
Subject key identifier: C3:37:7D:7B:18:01:04:15:99:0D:33:6E:8B:5B:48:0E:B3:56:BB:15
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 0196C6F17EB305BB92D6DD6304EAA39719F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 058E
Signing time: Tue 13 May 2025 00:00:37 +0000
Manifest this update: Tue 13 May 2025 00:00:37 +0000
Manifest next update: Wed 14 May 2025 00:00:37 +0000
Files and hashes: 1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: MUu3TpEv1j79U98l7T1vy5SImvP8+rLkd8dXN0Gjg2o=)
3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:7e:b3:05:bb:92:d6:dd:63:04:ea:a3:97:19:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: May 13 00:00:37 2025 GMT
Not After : May 14 00:00:37 2025 GMT
Subject: CN=c3377d7b18010415990d336e8b5b480eb356bb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:16:14:52:71:48:72:99:63:25:14:77:cd:
7b:61:07:ee:e2:a2:7f:9d:ff:3c:e5:59:bd:fa:84:
f7:37:fe:77:87:9c:e4:19:9b:e5:1e:63:e4:e5:eb:
3d:8e:0e:a9:66:34:2e:b8:08:b1:01:1d:80:23:9f:
77:0c:4d:c2:7c:2b:ba:e3:86:05:66:d4:13:bc:7a:
0c:f1:b9:48:87:5f:9d:e5:63:1b:03:91:fa:61:86:
93:7f:8c:f4:12:e8:b6:d6:cd:52:6e:b2:d1:a6:ac:
fc:f7:b3:af:d2:ac:01:80:34:2d:96:f8:34:09:df:
14:39:f3:e3:a3:c8:df:2b:9c:69:98:5a:f6:90:e4:
ac:cf:77:dc:73:c2:e0:2e:96:23:3a:57:77:4a:48:
c1:c9:0d:3c:29:fe:10:54:5a:6c:2d:1a:1c:60:05:
12:83:17:b6:8a:c1:8c:35:c7:4d:86:c9:61:0b:82:
c7:50:67:2d:13:c0:8a:ee:0e:bf:b9:b2:e6:11:11:
2e:c3:96:64:63:91:d8:78:de:97:3a:60:df:1e:20:
33:d2:b6:0b:c7:e6:54:af:16:92:88:71:7b:29:32:
6e:14:58:06:9a:b1:94:9b:64:30:3c:2a:91:32:b3:
ce:af:bf:6c:0e:e3:0b:e5:5c:e1:c5:a6:55:5e:16:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:37:7D:7B:18:01:04:15:99:0D:33:6E:8B:5B:48:0E:B3:56:BB:15
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ef:9e:12:8c:64:a7:0c:85:8b:4e:19:08:a6:d7:dc:9a:d5:
15:e1:89:b4:34:d6:32:6b:01:63:43:8a:85:8e:1a:0f:91:ce:
4d:7f:87:0b:53:59:13:fe:82:3e:65:67:7c:b8:1b:fa:b8:50:
eb:05:e7:37:ab:24:77:65:b1:bb:8b:97:70:c3:f8:c5:a1:bd:
c1:ec:4d:af:99:9e:ed:33:7c:03:68:c0:ed:7c:ad:24:85:25:
a2:a2:db:17:fd:cd:ab:de:3d:e4:94:ec:cd:d8:82:a7:32:ae:
50:7d:b0:41:bf:ec:19:c7:03:72:64:32:ee:30:99:e6:7f:87:
fe:91:a1:14:c8:37:74:90:d5:3f:30:1d:9e:82:27:e1:e7:66:
ac:42:7e:6e:05:14:47:ff:77:4f:f2:1b:25:c6:a3:6d:95:0e:
92:11:0f:1b:de:18:71:47:11:22:2b:fc:c1:35:e1:02:c8:fb:
38:bc:dc:de:1f:3d:cf:9c:68:92:d0:c0:50:bb:f6:56:66:c0:
d4:e6:dd:32:64:77:da:fc:db:ae:dd:d8:e3:eb:2c:83:35:8e:
b6:41:0b:46:2a:ac:d8:66:de:60:05:b7:fc:a1:ad:48:6b:f8:
7d:77:5e:c4:79:be:62:1c:dd:ec:4a:0f:e7:eb:91:7b:8b:fd:
8b:c6:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:15:11 2025 by rpki-client