Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: hT3jl1des9Racb0fylT6JX+D22Mn2tTrRA9CzgsW3QY=
Subject key identifier: AF:2F:7A:EA:F5:80:B6:CD:8E:92:8E:B5:99:CC:BE:C0:49:E0:52:EC
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 0196B2213CAC4E0C73E84E58DB967DDCDFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 1532
Signing time: Thu 08 May 2025 23:00:44 +0000
Manifest this update: Thu 08 May 2025 23:00:44 +0000
Manifest next update: Fri 09 May 2025 23:00:44 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: wnd+89yLvR1NIXEPkJyxLm26iZzJxCUrfZFfPRFLJ9w=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:21:3c:ac:4e:0c:73:e8:4e:58:db:96:7d:dc:df:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: May 8 23:00:44 2025 GMT
Not After : May 9 23:00:44 2025 GMT
Subject: CN=af2f7aeaf580b6cd8e928eb599ccbec049e052ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8a:16:f3:ca:87:6f:54:ef:ee:8a:53:71:8b:
a2:a0:12:70:bf:5c:99:ba:43:0c:34:be:76:18:26:
e9:6a:89:4f:4d:b4:c9:fb:0f:97:5f:a5:14:af:51:
bd:19:86:8a:82:66:7b:f5:06:19:71:ad:b1:b3:75:
03:18:be:3c:1a:a1:dd:0d:1c:6d:21:52:eb:a2:15:
79:03:83:c8:63:e9:41:3c:18:a7:af:2b:7b:04:a7:
fa:39:ee:84:03:43:07:d9:95:45:02:d5:30:f8:4b:
ec:0d:ae:0d:db:85:1a:d5:49:bd:f4:af:1c:8f:c6:
02:c6:69:1c:f0:b0:96:58:cf:c5:22:19:fc:2e:e4:
87:81:8c:38:8a:ed:2d:ed:3c:32:e3:03:ac:af:dc:
9a:6e:11:22:18:c1:2f:44:af:03:6d:a1:2c:f2:f3:
ab:e9:18:85:bf:f9:d7:30:7b:4b:55:59:eb:c9:2c:
26:c7:b5:d8:ef:3b:e4:19:b7:af:ec:5f:46:92:d4:
81:72:8b:65:b6:c7:b9:b6:87:9a:b1:59:8d:ef:db:
8f:ef:a9:f2:7a:1b:ee:a8:fa:39:df:9b:d4:e3:a0:
b6:0c:31:7a:da:90:cd:e3:ea:57:f0:b1:b2:bf:56:
7a:47:f7:80:b4:ce:73:cd:1e:76:e1:d6:82:82:f3:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:7A:EA:F5:80:B6:CD:8E:92:8E:B5:99:CC:BE:C0:49:E0:52:EC
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:24:67:0a:8c:7a:9b:6e:17:d7:6f:90:1f:fb:cf:67:cf:93:
97:57:1c:0c:9b:3d:ae:87:fb:5b:c7:04:d1:50:22:fc:47:56:
46:bf:1b:96:d5:0e:4f:17:22:73:31:93:d5:1a:a7:cf:03:d9:
26:15:03:8d:f6:29:53:2e:36:78:05:33:6b:e1:0e:ad:0a:33:
79:d2:58:02:81:2c:8e:cf:0e:f3:79:e5:bc:e7:60:6a:98:52:
77:09:01:9a:6b:c1:e3:40:1a:44:bf:0e:c8:e6:69:1b:1e:48:
e4:8a:f9:5f:47:d4:5e:b5:21:0b:8a:07:26:66:84:23:0f:f2:
c4:b4:da:81:ab:d7:f4:2e:25:20:db:e2:c0:9c:3b:f2:7b:93:
41:92:a2:08:9d:30:f4:5f:22:c3:08:3a:36:da:2e:20:14:3c:
9b:e6:bb:9f:14:f8:79:8a:7f:40:bd:81:d3:38:06:49:b2:18:
f0:fc:e5:fc:8b:be:2b:33:fd:34:5c:0d:a3:b2:30:66:fd:13:
ca:d5:c1:54:48:a1:a6:7b:8a:62:cc:a3:3e:5d:e6:06:2a:38:
3f:1f:a4:d4:98:29:2b:4a:e6:08:4c:47:81:2d:1e:20:27:ed:
7a:96:60:63:8c:62:b8:9e:17:6f:a2:b8:10:5d:7f:89:eb:35:
d8:65:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:41:38 2025 by rpki-client