Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: namYTXa3D6cFau709Jgsl0c+d9DTAPAmGB5xnM1sbE0=
Subject key identifier: 08:DE:44:EA:EC:1B:EE:F4:FB:0E:B0:51:E2:3C:B5:B3:A7:C6:1C:D6
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 01969F3F89CB464D1582659E2A82155290C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 054D
Signing time: Mon 05 May 2025 07:01:03 +0000
Manifest this update: Mon 05 May 2025 07:01:03 +0000
Manifest next update: Tue 06 May 2025 07:01:03 +0000
Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=)
2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: vr2Ql1O2LLajMcoEFwmWVIM3AZjpp4ohakQo8+genPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:89:cb:46:4d:15:82:65:9e:2a:82:15:52:90:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: May 5 07:01:03 2025 GMT
Not After : May 6 07:01:03 2025 GMT
Subject: CN=08de44eaec1beef4fb0eb051e23cb5b3a7c61cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:3a:a1:f5:16:49:6d:d6:62:b4:6c:0b:93:
b8:ff:47:1b:2d:bc:b5:ce:00:5e:d5:fa:0a:6a:34:
23:55:4d:2c:ae:1a:55:e7:cd:d5:46:86:30:60:d4:
e4:da:9a:49:b5:33:f9:0e:8f:23:ea:99:5d:7a:2d:
3a:06:4e:22:79:75:ab:e7:50:99:c4:1a:69:c2:e9:
24:63:eb:7b:0f:34:03:9a:16:76:b0:6d:1f:9b:98:
d4:da:59:48:53:6a:37:18:b5:3a:3c:98:4b:a5:3c:
2b:d5:a7:bb:3e:7b:5c:10:d7:08:07:a1:2b:60:6e:
3a:78:cd:44:91:ae:3d:07:84:42:a6:56:71:68:da:
ce:30:f1:10:ce:62:8b:5a:07:29:d7:27:e9:b0:e8:
64:61:72:4e:ec:0e:ad:95:53:a6:da:46:c8:28:23:
72:24:19:e6:0d:56:9b:b3:29:54:2c:2a:ef:ef:1a:
96:11:7c:63:d8:ad:20:2d:e2:ae:58:8d:a9:07:95:
58:49:d8:26:70:8b:13:f5:be:43:de:3b:e7:d3:e4:
4d:38:49:fe:ac:1f:88:a4:6d:cf:7c:3c:d8:2f:a0:
29:06:69:43:ad:30:d2:6f:81:d2:12:cd:57:44:1e:
47:56:21:ec:66:99:4c:ba:df:ee:9e:ef:24:c9:56:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DE:44:EA:EC:1B:EE:F4:FB:0E:B0:51:E2:3C:B5:B3:A7:C6:1C:D6
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ca:93:2c:bd:7c:9e:f8:cb:7d:89:8b:5e:dc:c6:18:83:30:
bb:1f:4e:cb:03:2e:8a:32:7c:52:00:b8:da:0c:e6:f8:c7:39:
91:22:e3:fc:86:c7:aa:1c:39:cc:86:44:8a:0b:cc:74:30:12:
79:80:1e:91:94:ff:56:4e:d7:f3:a0:29:07:d6:b1:88:9e:0d:
3e:03:3e:b4:0d:f2:f3:a4:4f:8e:b2:c9:6b:b3:72:f6:bd:3d:
53:bb:30:8c:98:1d:b0:4f:24:0b:5a:0e:e6:88:c1:4d:56:b6:
1f:dd:6e:48:1f:db:1f:66:74:92:03:d8:cd:fd:a0:11:f3:46:
37:e5:33:41:4d:2d:fa:4c:ec:a3:82:1f:37:87:2f:8a:ed:e1:
da:dd:ee:47:d5:97:32:a4:66:e4:68:b0:ce:a3:05:43:b0:1e:
76:d8:4e:28:d1:b3:aa:bd:fa:05:9b:f0:2c:71:3e:5c:e5:77:
ed:c2:30:71:ae:e3:89:09:b4:21:1f:c9:9e:6e:0f:b1:70:11:
18:f3:b9:3b:29:8a:d1:f4:08:a0:e5:e5:e6:61:9f:45:ec:e9:
ea:f7:e1:12:df:99:44:01:6c:fb:f4:ad:80:6a:26:70:d0:3e:
27:c8:3c:f8:27:f7:6a:99:1d:9f:2e:ed:4b:3a:ba:4e:16:2e:
2f:4b:a6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:26:26 2025 by rpki-client