Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: zkYULS6ybcQDAlhIV7FmNJohzBI6RQ82iJxbK076gz8=
Subject key identifier: 51:10:56:46:EF:DB:DA:9B:18:9B:05:9A:DB:FD:BA:EC:91:76:06:EB
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 0196A2405A4C6011F508A8A0DB4EED9BF6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 21:00:48 +0000
Manifest this update: Mon 05 May 2025 21:00:48 +0000
Manifest next update: Tue 06 May 2025 21:00:48 +0000
Files and hashes: 1: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
2: p6rvh-AV0bmaoiN047zHywpJoqY.roa (hash: tR6pKJ08cGe9+fwUehgymwBvOx1rePcqoTH0w7NDkm8=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: DhSjLQeVpbCpKnVgzNd4WEyITdO2NN6TT5Naw6Mg5vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:5a:4c:60:11:f5:08:a8:a0:db:4e:ed:9b:f6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: May 5 21:00:48 2025 GMT
Not After : May 6 21:00:48 2025 GMT
Subject: CN=51105646efdbda9b189b059adbfdbaec917606eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:19:ee:ba:a9:ac:47:43:9e:2c:ca:15:9f:a9:
9c:10:0c:e9:39:c9:89:c7:26:7e:ee:29:cb:8e:9f:
b9:95:28:0a:0f:ea:e8:21:66:fc:32:55:0d:bb:f8:
9f:e7:f7:48:ae:03:ac:f5:b1:73:79:5b:03:9e:bb:
ad:88:6e:a3:a3:70:a8:76:80:9c:8d:fe:b9:3e:c9:
45:f8:dd:9e:18:0a:32:85:e2:32:a7:cf:da:dd:9e:
66:a8:1b:f6:06:03:87:f8:b7:49:04:7b:cb:b2:cb:
a3:2f:0b:1c:99:be:ac:c5:af:ea:eb:75:df:20:75:
d0:44:bb:13:fb:3e:1c:15:48:45:3a:8b:79:9c:04:
04:e9:77:2e:b8:c7:5d:ca:81:a4:71:c6:c1:f9:07:
ad:83:2f:3f:55:a8:64:ef:d4:ba:01:de:e2:6e:45:
4e:77:1d:f9:c8:7a:24:47:52:5c:90:03:dd:60:c6:
ad:58:d7:d9:6f:50:66:54:28:5a:ca:34:d6:b6:95:
89:ca:28:32:87:02:d8:be:6a:50:bc:ee:64:8f:c1:
03:43:5e:aa:2b:ec:81:62:2d:6a:66:a9:b5:72:7d:
b7:db:67:d9:5e:65:d7:51:b4:b7:63:b8:d2:60:c0:
b3:8e:c0:19:f6:de:b1:21:45:e1:42:02:1e:9d:64:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:10:56:46:EF:DB:DA:9B:18:9B:05:9A:DB:FD:BA:EC:91:76:06:EB
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4c:0c:f4:e7:50:6f:3f:dc:8c:49:8d:75:01:1f:99:11:a3:
8f:5d:21:7c:b1:86:98:11:9e:7c:26:c1:20:62:08:3d:85:9b:
1b:0f:3f:44:0a:28:43:d3:45:38:77:b8:1d:d8:f7:9a:8e:21:
01:2a:44:e8:d8:e1:58:88:b8:3f:ed:e3:56:5d:2c:ff:5b:df:
21:40:7c:33:5a:76:6b:1a:5f:8d:ca:d7:3d:ec:6b:02:20:7a:
e3:60:74:10:b8:23:15:c3:89:08:5b:2c:a9:02:8f:1e:4c:11:
2b:6c:ad:bc:87:b4:be:2e:c8:57:aa:49:0f:73:87:f9:0e:cc:
e8:19:6b:ef:64:dd:24:ac:53:c3:e6:d9:d3:23:55:34:d3:4c:
6b:2b:9b:e6:6d:fa:3a:3e:7f:c2:51:25:e7:b7:7b:ba:24:a4:
2a:80:de:fc:dd:24:fb:7a:ca:22:0a:a0:ed:68:88:7a:b0:a9:
32:55:85:44:95:c4:c9:30:a5:ed:71:0b:68:3e:bc:15:d2:a7:
c8:9b:0c:65:76:06:23:ad:8a:ed:18:f8:2b:9d:02:92:9c:5d:
5e:c5:35:61:a1:40:99:a5:69:1d:d8:ce:a7:ab:35:fc:dd:05:
bc:2b:db:d4:a7:e3:bd:d3:a3:24:90:68:1f:d7:ef:b4:1e:d8:
dd:40:b6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:07:30 2025 by rpki-client