Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
File: tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft (raw, json)
Hash identifier: n1teTAQpZmAwJ5VqwtgFhzDUQ5UcbA3xX0WzaTjLzDM=
Subject key identifier: 16:2F:75:09:B1:A5:8B:8E:12:D3:B9:24:9E:8F:72:6A:12:BB:68:10
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Certificate issuer: /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial: 0196B710851FFD16C75D4CC36A4F6BAA1695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
Manifest number: 107F
Signing time: Fri 09 May 2025 22:00:35 +0000
Manifest this update: Fri 09 May 2025 22:00:35 +0000
Manifest next update: Sat 10 May 2025 22:00:35 +0000
Files and hashes: 1: gOpessaE3KR3BE7y4M-QryrS1Ks.roa (hash: YdF4inQqBoygiKj6DuoyGUjs1/73Ha+wGsnO74e4IH4=)
2: tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl (hash: PTh6uiKjz31QyaKjA5d2c5oJoRPqvFPeTOXSpqheK2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:85:1f:fd:16:c7:5d:4c:c3:6a:4f:6b:aa:16:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Validity
Not Before: May 9 22:00:35 2025 GMT
Not After : May 10 22:00:35 2025 GMT
Subject: CN=162f7509b1a58b8e12d3b9249e8f726a12bb6810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:ae:4c:56:63:08:80:ea:23:5f:c5:c6:ad:
bf:df:00:41:b8:81:87:9a:8c:f5:05:5e:55:b7:15:
a1:97:be:29:fd:ec:d3:f1:f9:77:52:9e:91:0d:20:
af:86:47:50:87:d2:d4:2a:8a:1f:26:4a:ed:d8:a5:
17:a1:5b:14:46:6a:5a:c0:e9:cb:8a:8a:c0:6f:b2:
43:71:2f:57:c3:1b:c7:42:0e:77:db:16:e3:1b:8a:
33:cf:e6:8e:ce:2d:ae:1d:90:f9:70:f2:9d:d9:4d:
c0:41:07:dd:d7:ca:b2:fe:ad:13:d7:90:63:44:c2:
4c:58:d9:ae:c7:b4:c4:59:ce:cb:bd:69:d3:ee:78:
7e:24:38:a3:ab:19:c2:0e:45:9e:2f:8d:b5:e1:57:
5c:9c:98:e2:20:21:5c:aa:b9:23:71:d2:1c:c9:66:
51:86:d0:f0:e3:d1:ec:eb:2d:a9:90:e3:cb:46:f8:
c1:3c:03:31:2a:80:02:f0:43:fa:e9:95:3f:00:c1:
e3:c4:30:a0:16:3a:11:1d:51:20:95:8a:81:49:67:
3f:d5:8a:5a:65:1d:09:b7:07:5f:0e:19:d4:39:fd:
fb:42:41:5e:f2:60:64:b9:33:e6:d0:13:e3:80:21:
8e:2d:9e:35:18:03:35:7f:c5:72:a9:df:17:ae:6d:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:75:09:B1:A5:8B:8E:12:D3:B9:24:9E:8F:72:6A:12:BB:68:10
X509v3 Authority Key Identifier:
keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e9:15:f8:7c:38:ec:76:dd:c3:94:28:13:a6:fd:f7:da:ad:
49:4a:6e:41:3c:d3:62:f2:b5:1e:cf:48:70:a3:d3:f3:3c:46:
aa:e7:83:68:ad:8c:aa:a9:04:79:6b:12:98:08:42:63:07:48:
36:15:92:75:da:57:63:9c:8e:96:bb:eb:17:e6:0e:61:c6:0c:
dc:20:fc:03:db:b0:12:36:08:e2:f1:bb:b7:73:aa:36:75:e1:
75:d1:ce:ef:f4:69:05:83:c4:6a:31:76:16:d4:78:fc:20:ee:
4f:ef:2c:cd:4d:80:b0:5d:9b:b9:a0:eb:dc:52:ec:13:c4:03:
97:c5:85:64:e9:c0:92:fe:34:65:f9:06:c6:42:a7:11:0e:44:
64:16:54:45:5b:89:6a:0f:61:b7:a2:05:b0:0a:82:0b:b3:c4:
ad:58:8a:83:f8:d8:0c:c1:1a:1c:6e:c6:83:da:08:09:bf:b9:
1b:d1:0d:41:9f:75:f3:d4:67:45:2f:d8:ff:1c:6d:98:db:29:
bd:b9:97:ee:5d:cf:03:c8:60:8f:01:be:dc:69:4d:10:8d:ad:
39:87:09:6e:ae:bc:be:49:a4:bc:30:64:d8:93:33:b5:26:20:
50:3b:6a:52:d5:d3:10:88:3f:99:d5:f6:47:cd:9c:0d:ff:4b:
5c:a4:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:27:38 2025 by rpki-client