Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File: tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier: HFvelrt/2rpcwUarBAuEZkNNdrO/e0LB1UMzUHECub0=
Subject key identifier: 20:F3:3B:87:B7:7C:F7:D3:D6:3D:BE:14:B6:2F:7C:9E:6E:F8:F3:A1
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial: 0196C8046091336E002B869032E9C0C3FDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 05:00:52 +0000
Manifest this update: Tue 13 May 2025 05:00:52 +0000
Manifest next update: Wed 14 May 2025 05:00:52 +0000
Files and hashes: 1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: bEn2Z3P3AGiA9JkRtG6mDKhSSbrZ1n633+BqaOYGcw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:60:91:33:6e:00:2b:86:90:32:e9:c0:c3:fd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Validity
Not Before: May 13 05:00:52 2025 GMT
Not After : May 14 05:00:52 2025 GMT
Subject: CN=20f33b87b77cf7d3d63dbe14b62f7c9e6ef8f3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:10:9d:75:f2:11:88:58:df:36:a4:83:95:
a9:e4:ad:ac:59:22:e4:9b:e7:16:c2:f6:69:3f:17:
ed:c2:42:ea:95:4b:6f:88:35:bb:ef:ca:73:b5:59:
5c:f2:cf:58:d4:fa:09:06:a6:cf:41:62:64:fc:94:
01:27:1c:75:d4:8e:df:4e:c3:5e:7f:48:89:7a:75:
1a:f9:72:73:ec:d7:7a:64:79:d8:fe:b0:44:6b:65:
eb:dc:6b:87:c1:56:2b:d8:2a:6f:45:7e:7d:f5:8f:
0b:4d:34:ca:db:f7:89:ed:63:91:ae:a8:8e:ac:42:
45:91:ac:e3:df:e8:b4:1b:41:c0:e0:0d:73:38:86:
80:3f:11:16:d1:d5:af:68:f7:19:d7:7d:b9:e8:d7:
89:31:9d:24:64:35:aa:18:ad:89:b1:af:df:75:6a:
db:7e:1f:21:ba:18:2e:46:da:0f:4c:b5:4f:77:e7:
2e:30:50:f3:37:9d:10:1c:52:b5:63:35:11:52:d4:
dc:94:b3:30:9b:76:39:6f:57:c7:a6:fe:d4:82:ee:
69:16:4f:dc:96:6c:be:d0:c8:c1:02:cf:76:f5:d5:
b6:d0:4c:d0:0c:d6:6e:39:c8:81:1e:46:9b:e7:eb:
8b:31:05:51:db:c6:ee:dd:4c:46:79:d2:47:89:b6:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:3B:87:B7:7C:F7:D3:D6:3D:BE:14:B6:2F:7C:9E:6E:F8:F3:A1
X509v3 Authority Key Identifier:
keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c2:6e:d9:12:3d:55:7a:75:51:b1:bf:c6:b3:39:ce:b9:0b:
17:80:c2:ce:9f:e1:b3:c2:66:fb:f9:53:47:7d:ca:30:75:90:
10:c3:eb:ce:23:56:02:6d:71:f6:e5:82:84:46:7e:4d:12:6e:
b9:99:83:2a:5f:85:04:28:4e:cd:e2:54:6c:34:76:0b:4b:73:
b8:34:19:e9:65:c6:cb:9d:08:6d:c2:08:af:39:5c:31:86:6f:
59:40:82:ec:6d:63:ce:40:68:4c:0f:35:1a:2f:9d:ec:49:3d:
b0:1f:81:36:cb:32:8f:47:50:13:ac:4c:30:f8:de:c4:f3:4f:
11:00:f2:46:c3:a5:4d:a4:02:4b:b6:25:ce:62:9b:a2:dc:7b:
09:99:07:0f:49:ed:18:98:34:c9:0a:ad:9a:48:88:b7:e9:68:
6b:61:5e:32:57:9d:49:a2:49:d5:eb:e2:5b:39:4e:fe:01:de:
96:33:bb:da:31:be:79:22:17:df:3a:de:07:8e:c5:a6:6c:bc:
3f:5a:f8:43:7f:b9:52:18:90:fd:83:36:84:ec:3b:a2:f3:42:
ab:ec:a8:0b:3f:61:e1:eb:05:24:02:3a:27:37:0d:28:01:23:
c8:5d:e1:1e:d4:1a:18:35:89:fa:39:d9:50:81:08:46:0d:03:
22:6e:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:28:11 2025 by rpki-client