Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: mydjI+1cKXaTutKabOZ3cGu2Z9dz5GHw2qqnALE9nBc=
Subject key identifier: 77:30:2F:85:85:DC:9A:4A:DE:03:F2:EB:96:09:62:9C:45:D0:FA:AD
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 01969E2C157DCFBBF3DCBF08CEED4F906F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 0B87
Signing time: Mon 05 May 2025 02:00:11 +0000
Manifest this update: Mon 05 May 2025 02:00:11 +0000
Manifest next update: Tue 06 May 2025 02:00:11 +0000
Files and hashes: 1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: r+WBnuxNeXMmYf0rttUXhrZlOKP0Qzbdn99HAHAyWyw=)
4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:15:7d:cf:bb:f3:dc:bf:08:ce:ed:4f:90:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: May 5 02:00:11 2025 GMT
Not After : May 6 02:00:11 2025 GMT
Subject: CN=77302f8585dc9a4ade03f2eb9609629c45d0faad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:f9:1d:2b:90:f5:9d:6b:3f:77:0a:72:7f:
b4:d5:b5:23:b3:f5:86:44:eb:40:df:60:0d:47:45:
91:44:4a:09:b6:89:b1:e4:54:a8:50:04:c7:7e:4f:
7e:dc:f3:2e:ad:25:38:58:ec:d3:a3:65:0e:3d:95:
6c:22:11:54:46:75:e4:b9:fa:9d:28:9a:df:aa:4d:
dc:ba:42:47:9d:5e:aa:cb:43:8a:c5:a4:47:8d:de:
ae:f0:49:42:a0:bd:ce:33:10:a0:f4:52:e8:8b:71:
ec:8d:aa:a3:5e:39:1b:84:bb:a3:a3:46:2f:8d:f0:
63:e5:65:42:ec:cf:9c:41:ad:91:1d:92:1d:70:18:
d2:18:ca:85:6e:35:b1:22:fc:22:f0:67:8c:b3:b3:
d2:cc:1e:96:fc:f6:3a:b7:bb:c3:78:6c:14:82:e2:
7b:75:81:b6:66:74:b5:c2:bd:f0:fc:ee:7b:d9:f0:
0d:10:b1:71:fe:02:f2:17:06:c7:42:a8:9e:cb:00:
d2:0d:0b:31:da:df:7b:fd:31:9a:ea:85:9f:ad:35:
d8:49:33:59:5c:3e:9e:4b:35:95:f6:4d:16:e8:37:
95:d2:29:9b:a3:73:f9:32:de:46:67:34:96:f3:c6:
97:2b:2d:1d:ff:7a:41:14:8e:08:c6:3b:ea:a0:5e:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:2F:85:85:DC:9A:4A:DE:03:F2:EB:96:09:62:9C:45:D0:FA:AD
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:89:83:a5:b0:b8:10:d2:d7:4a:21:e9:d8:dc:7d:8f:41:61:
c8:43:bd:35:52:a0:01:c9:ed:65:11:3f:13:9c:6e:53:00:3a:
39:aa:74:d8:30:4e:ed:b6:43:c0:b5:67:70:80:66:94:1f:c1:
6e:ea:e2:81:38:be:32:2c:32:de:72:17:13:b9:a0:d4:ad:c6:
ff:bc:7c:3a:8a:62:d0:dd:80:30:8e:f3:7d:00:5d:e9:5d:09:
2d:ba:04:a4:38:3f:67:72:95:02:cb:91:97:99:42:9b:73:99:
77:f2:76:9f:3e:8f:6d:3b:11:10:ca:52:00:0a:d4:7f:15:f3:
70:df:9e:b5:64:7f:1f:37:82:a9:cf:cf:65:f2:6d:92:47:10:
e2:64:37:9e:fd:21:d0:fd:ea:de:6e:62:13:cd:c3:5e:fc:82:
d0:34:4b:0a:8b:37:43:1c:bd:e8:49:c6:32:6b:a6:86:15:18:
ab:fd:ab:97:31:f6:e3:06:54:6f:f0:4b:ba:16:66:56:93:fd:
29:87:e5:7a:b9:9c:34:e3:05:6e:ba:4e:7f:14:e6:07:20:a7:
07:1d:8d:f2:53:5b:7a:41:f4:94:b1:69:56:7f:d3:7c:c4:bd:
56:50:23:ed:7e:db:65:a9:4b:d9:be:b4:87:e1:64:11:70:09:
8e:78:f3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:39:54 2025 by rpki-client