Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: OrH/DxOocboRR6C1Tk2cJPOGDrXRAP9Wkoi4brYGrwQ=
Subject key identifier: 09:2C:EB:48:BC:1F:26:09:09:35:40:E5:9B:90:C1:91:D4:27:E5:AD
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 0196CA603E2AEF8547EB61599EF34DBBC4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 14CC
Signing time: Tue 13 May 2025 16:00:27 +0000
Manifest this update: Tue 13 May 2025 16:00:27 +0000
Manifest next update: Wed 14 May 2025 16:00:27 +0000
Files and hashes: 1: JiqQ-b59vNl0MF5eVXzf0TfeO3c.roa (hash: OKAd29RpT9wnjVFO/8cLOZm/b/ev+jNX/rx5kLKiews=)
2: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: K+MC7/C9IDqoLU49Jp8EvZDq0OuPw3DuGBMoRlyNtuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:3e:2a:ef:85:47:eb:61:59:9e:f3:4d:bb:c4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: May 13 16:00:27 2025 GMT
Not After : May 14 16:00:27 2025 GMT
Subject: CN=092ceb48bc1f2609093540e59b90c191d427e5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:fa:c8:03:f0:fa:a4:3f:c7:04:b9:11:4f:
ef:5c:34:f7:42:89:51:99:8d:ac:d3:47:c3:5c:77:
69:d5:76:d4:32:c9:5c:f2:46:e9:38:42:f2:45:aa:
ee:f5:df:10:ce:43:2d:f7:3f:ee:10:23:07:80:f1:
2e:8d:59:55:40:5d:41:59:19:ce:28:8c:7a:d5:b7:
a4:07:49:a2:47:96:ef:b7:3f:e6:47:ce:96:2a:55:
73:fd:05:a1:11:8a:bd:8e:1e:23:91:3f:d4:b3:38:
7c:7b:5c:93:f9:b7:dd:50:46:39:8e:f5:fd:73:db:
09:55:f7:88:25:50:58:81:b2:53:e7:62:88:a4:ae:
3a:60:4c:73:10:fb:4f:ba:9e:12:98:8d:a5:ec:16:
1c:e9:82:11:83:02:fc:97:e9:79:8e:f5:89:3d:7e:
28:da:88:24:6e:fb:ac:3d:f0:be:b6:db:13:34:1b:
24:31:4a:2e:c5:4c:00:60:3e:66:0a:a3:35:4c:43:
ca:0d:8f:58:29:4b:3c:9a:6b:19:e7:d1:8f:a7:50:
66:7d:0a:c2:23:2c:98:14:38:a9:85:94:4d:c8:d0:
36:87:22:30:b6:c5:a7:6a:6e:7d:03:1e:fc:25:39:
9e:e6:aa:a4:21:5a:0f:70:f6:e9:ee:31:3b:a4:55:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2C:EB:48:BC:1F:26:09:09:35:40:E5:9B:90:C1:91:D4:27:E5:AD
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7e:6a:2e:95:02:00:45:dd:20:40:45:59:a8:47:e7:7b:4b:
e7:6d:af:5e:5a:79:76:b2:4c:52:8d:e4:49:15:b1:c8:ef:18:
35:f0:70:25:01:da:55:73:02:4b:c2:cf:6a:6d:33:d7:25:67:
4a:dc:5a:2d:db:2e:61:6b:80:90:65:1d:43:77:32:e6:50:4b:
bd:7b:9b:ed:69:d6:e1:98:cf:7b:cd:54:c6:a5:72:95:d0:e9:
0d:e9:cc:81:b8:0a:7d:8c:a8:93:81:4f:74:9b:c6:cc:50:f5:
22:9a:d7:ee:92:b7:0d:2a:8b:51:56:f6:2b:cd:af:f7:a2:16:
b9:79:00:5e:2c:45:f2:15:7c:cb:25:b7:e3:8b:31:20:ea:cc:
4e:47:38:a5:48:d5:42:eb:ae:3d:b5:be:67:16:52:4e:e2:e7:
80:06:c0:e0:32:84:68:9f:15:24:81:be:34:12:20:2b:95:d0:
c0:cf:59:3f:f5:61:15:f7:f1:19:98:9a:54:d6:49:ec:23:a3:
22:de:ff:1a:01:a2:4e:1c:3e:04:1c:41:7e:06:2c:d1:93:b5:
01:bb:91:c9:b1:c1:c0:82:42:bb:8e:14:e2:05:89:db:0c:68:
a1:69:64:56:11:8f:c1:7e:c8:58:f1:e2:2f:9c:0c:6f:f6:aa:
87:f0:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:37:45 2025 by rpki-client