Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: eeEiSjY8znq8R1gLMzrAcH2YKRDwqhTP2+rtnQ0c69o=
Subject key identifier: 6E:E3:1C:0C:62:CC:01:2D:11:32:27:E2:22:88:07:93:1D:8C:D8:77
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 0196B9A4012C0A9A36E9C7E41B3AB3DBF2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 10:00:55 +0000
Manifest this update: Sat 10 May 2025 10:00:55 +0000
Manifest next update: Sun 11 May 2025 10:00:55 +0000
Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: YndWJX2Seq32GczfWC5sDDLN8YXTFMqKoXixxwZbvU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:01:2c:0a:9a:36:e9:c7:e4:1b:3a:b3:db:f2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: May 10 10:00:55 2025 GMT
Not After : May 11 10:00:55 2025 GMT
Subject: CN=6ee31c0c62cc012d113227e2228807931d8cd877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:ba:90:75:7d:ee:b8:35:fc:71:7a:69:a4:
e9:02:19:c7:8d:82:16:04:86:9a:ac:63:89:85:2f:
7f:0f:46:71:c1:3b:4c:40:49:e8:e4:6f:c9:c1:f9:
79:b7:a7:37:c4:84:30:44:3d:93:d7:0f:64:70:7c:
cc:5c:5f:c3:82:8f:8c:f0:5a:8c:7e:01:75:16:47:
97:46:21:3e:1d:57:6b:f7:8d:c9:ee:95:fb:b4:c0:
fe:f2:82:7b:26:b2:76:26:89:f4:5f:4e:9f:f4:dc:
46:5c:d3:09:e2:bd:d4:94:3c:3e:53:e6:4f:55:db:
88:c6:90:46:08:05:70:98:fa:6e:c9:8b:0a:14:d2:
7b:d6:31:65:17:65:69:76:ab:0f:9e:a2:66:d4:0b:
a0:7f:b1:87:d0:74:e1:04:e3:e2:30:95:0a:a3:0b:
57:2a:1f:55:3a:9d:46:c7:1b:89:26:85:bf:dd:0b:
77:4c:07:4c:87:65:14:ba:93:b7:c4:69:66:6f:7b:
0a:16:20:b0:aa:6b:fd:1b:2c:60:3a:0c:c0:11:e4:
77:f7:1f:17:61:61:b8:6a:84:bb:25:03:1a:8b:65:
b2:e7:ea:3d:3d:17:8e:4b:18:5a:96:f2:e7:01:a0:
1b:a5:5d:d4:09:53:17:56:87:b2:79:9c:b3:08:1a:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E3:1C:0C:62:CC:01:2D:11:32:27:E2:22:88:07:93:1D:8C:D8:77
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4c:25:bf:b4:91:e6:39:8b:f1:c8:64:f2:5a:3d:52:14:7f:
37:23:d1:66:23:22:d5:ac:e1:5f:3c:3f:97:9f:20:14:a4:9d:
23:b5:ba:4c:dc:88:d6:74:78:51:22:f6:56:cb:1c:d0:34:76:
df:18:07:62:c7:95:39:08:59:a4:0b:1e:96:b5:61:cb:c5:1c:
22:b9:b8:ae:91:2f:6f:5d:e4:5f:f8:ce:db:af:8a:52:28:dc:
86:a7:e1:b8:1e:e7:94:ee:10:88:13:ca:a3:92:90:51:f3:4b:
9a:91:cb:92:7c:2f:ac:0a:3c:6a:0c:b5:1e:6b:3f:5d:53:d6:
3a:3a:0b:7d:ff:91:d7:61:76:5f:7c:7e:16:3b:10:28:5a:89:
f4:83:4c:2c:6f:66:87:11:c2:0d:2a:f5:89:b5:a2:6a:f4:d0:
28:15:5f:92:be:13:94:48:be:61:16:26:f6:9b:35:db:58:46:
68:00:56:20:b9:61:96:74:8a:07:f3:74:22:48:f5:85:b3:09:
38:f3:4f:1e:f4:20:20:09:49:96:33:49:51:d8:85:27:72:6a:
a5:7d:1b:46:ea:ca:4f:b3:1a:9a:24:44:f0:c9:78:c6:87:69:
76:d1:7f:12:b7:34:d2:c6:18:86:a3:57:b8:8b:ac:99:6e:0b:
16:ea:bf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:24:31 2025 by rpki-client