Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: UCZWxFyU0UUm0Nuw7+VKOZo+Y5OlXcNSI3A1IxrqueI=
Subject key identifier: 3D:F8:BF:2B:99:04:1B:13:D5:96:43:35:4A:4F:57:67:16:2E:02:86
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 0196C8A920D0DACE0D403113E718E4F61F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 08:00:49 +0000
Manifest this update: Tue 13 May 2025 08:00:49 +0000
Manifest next update: Wed 14 May 2025 08:00:49 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: inSwis2shpdOYvwcHNfC+8P5/O4pXw5JiMrsyRWsP1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a9:20:d0:da:ce:0d:40:31:13:e7:18:e4:f6:1f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: May 13 08:00:49 2025 GMT
Not After : May 14 08:00:49 2025 GMT
Subject: CN=3df8bf2b99041b13d59643354a4f5767162e0286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d7:ed:df:78:0b:a6:e6:cc:89:e9:1f:a6:4e:
27:0d:ea:9f:bd:5a:4a:7f:18:9e:e8:b6:3d:b3:ec:
ec:71:e0:b1:8d:c0:24:8e:1b:aa:f2:af:0c:51:fa:
cd:2e:c3:57:02:5e:62:8c:8e:80:18:6b:76:2b:45:
3b:c4:ee:0f:0b:f6:1e:dc:75:f0:7a:34:50:12:36:
75:a9:58:5f:4e:11:5a:e3:dc:34:ae:52:8a:af:a4:
03:b4:c8:f0:fd:01:c8:d3:8f:11:4b:f2:f6:8f:7a:
70:7c:23:91:01:5c:a0:c9:f1:04:3c:19:33:7e:56:
76:14:8a:dc:a0:29:39:7f:86:8b:c0:5a:a9:1f:1e:
37:65:d0:54:34:0c:7b:9e:bc:31:dd:52:16:2f:dd:
6a:5d:67:a6:63:6d:07:8f:11:54:8d:88:eb:ea:c9:
15:78:b6:d3:2e:8b:e5:81:3a:bd:3a:53:fd:93:85:
27:2c:c1:06:1e:75:57:c1:ad:9b:eb:f1:71:8f:f7:
1f:3d:7a:11:c0:db:c3:49:98:20:eb:f1:d1:ed:6f:
c9:b1:f3:0a:e5:28:e9:dc:93:76:a2:e9:56:30:e7:
4f:26:8f:b2:f4:88:f4:2e:81:f3:ed:74:1d:ac:79:
bc:76:ba:85:ee:61:7c:23:05:42:29:f5:84:51:f3:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F8:BF:2B:99:04:1B:13:D5:96:43:35:4A:4F:57:67:16:2E:02:86
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:92:fc:35:e0:a3:05:f1:f8:c2:20:8a:4b:97:40:e5:5e:46:
6f:ce:ed:32:11:cf:8c:7e:f6:9a:ca:a9:03:ac:18:36:ad:89:
b4:5f:90:6a:0f:34:a2:76:4a:68:86:da:c0:aa:f2:5c:60:53:
99:85:ae:ab:4c:b0:b7:52:9f:29:c0:8f:6d:ef:18:96:c9:b7:
77:c5:55:d9:81:fd:c0:dc:50:b1:0c:db:18:e1:fb:a1:a3:0e:
c0:8a:02:83:f2:bf:b8:84:5e:b5:f7:67:45:dc:0b:cb:d0:ca:
9f:64:54:c1:2e:9f:b8:a7:37:51:1b:f1:cb:78:fa:08:52:e8:
01:63:0e:07:39:0f:a1:ac:b4:d1:97:93:04:79:18:2d:0b:2a:
88:0a:2a:f6:63:48:ba:02:0e:a6:04:4c:7c:48:8d:f7:31:79:
e8:36:40:dc:a9:f7:aa:f2:80:ee:97:d7:4c:12:35:7c:27:c9:
03:a9:7e:40:cd:6d:18:2d:30:33:04:66:17:83:02:f1:d6:c9:
97:92:22:7a:a2:1e:03:2c:4d:fe:4b:c4:b8:1c:5c:09:a0:4a:
61:79:6a:f1:57:38:99:c1:3c:eb:b6:e1:a9:d0:34:4c:e4:ff:
2c:0e:d6:68:d1:4d:7c:d3:25:29:ab:10:29:7d:13:a6:11:ff:
4a:f9:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:26:52 2025 by rpki-client