Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: KEKSvaQejBxAcpu0+lpzwNR2tyoMD4/FnJYAejP5338=
Subject key identifier: 89:69:A2:CE:DF:F3:67:E7:3E:52:98:44:0E:86:87:8E:94:07:82:C7
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 0196CFF4B7CB2F8FB15DE2502C8EFE6A0126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 02DF
Signing time: Wed 14 May 2025 18:00:43 +0000
Manifest this update: Wed 14 May 2025 18:00:43 +0000
Manifest next update: Thu 15 May 2025 18:00:43 +0000
Files and hashes: 1: lCtCcNNufTLwFJhkrWabEjjBy0k.roa (hash: mf7pg/6iwjdXTSMTSKNkIUvc6nvXHprTVxoK02WKi+Y=)
2: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: ZVZAIUV7EGHToBW478rbwrqhvTI0OAg6pp40qIyqZgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:f4:b7:cb:2f:8f:b1:5d:e2:50:2c:8e:fe:6a:01:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: May 14 18:00:43 2025 GMT
Not After : May 15 18:00:43 2025 GMT
Subject: CN=8969a2cedff367e73e5298440e86878e940782c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:ff:1f:c1:d9:c5:d7:f1:70:ef:7c:69:0a:
ef:60:18:81:2d:f2:60:d8:83:ed:d1:42:1c:9c:1f:
88:2a:f6:64:67:0c:06:5e:d1:cd:06:20:4f:13:ab:
9e:4e:cb:d4:c3:b8:e6:46:3d:9a:24:c3:78:67:2a:
20:da:bf:f3:0f:b0:ae:e8:16:b8:ee:6a:a6:aa:e4:
9e:d7:68:8c:83:01:1a:a8:03:d9:2f:b2:03:4b:ba:
df:86:fa:d3:75:3e:55:b9:ea:bd:81:62:b8:23:a3:
65:01:5b:49:0b:7e:b4:00:3c:d1:e9:5d:77:72:82:
9d:59:b1:ea:58:ea:bd:35:2f:a9:a5:6f:e4:68:78:
d6:26:de:8a:89:f1:16:a4:57:03:a4:75:1e:2e:6c:
1b:a5:8e:0a:91:a2:ee:35:5c:72:cc:a8:dd:68:0e:
84:1a:bd:cd:c1:08:26:7e:d4:32:61:87:98:6a:ea:
58:3c:64:bb:17:42:55:6a:94:18:11:80:2c:d5:03:
fd:e3:db:e9:e9:78:eb:41:f2:cf:d9:8a:85:cf:dc:
91:65:ca:23:f9:9a:e8:6e:01:83:60:c9:0d:8f:68:
f0:a6:46:67:56:d5:e4:f0:c4:df:26:b3:7e:0f:cd:
c4:5c:dd:88:8c:94:4d:9b:04:0f:0a:19:23:55:39:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:69:A2:CE:DF:F3:67:E7:3E:52:98:44:0E:86:87:8E:94:07:82:C7
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c4:81:5e:24:3f:dd:23:16:40:fc:97:fa:bb:3e:d2:b7:e6:
64:48:14:5e:33:2d:bc:f2:9e:c1:3e:0f:7f:21:41:5f:14:1d:
88:77:a0:9b:2a:cb:94:ab:8f:24:dd:97:0b:a0:e6:80:f2:06:
e7:d7:9a:40:7a:f9:cf:d2:7c:ba:71:42:64:76:bb:06:77:3c:
ad:35:4a:ac:18:4c:6b:3d:66:8e:1f:48:5f:0e:ec:f0:be:23:
6d:4c:83:ac:4d:85:c5:ad:5b:d2:f4:6e:49:46:e9:b7:06:62:
8b:1d:ef:a5:72:15:c2:60:e5:cf:b2:ac:57:72:72:24:df:09:
34:b1:3f:4c:1d:ed:77:ae:20:f8:89:37:a3:ba:49:ed:c7:e8:
89:3d:70:6e:e2:96:a0:7d:04:e3:45:ac:84:d6:fb:81:ea:20:
99:f6:dc:9d:5a:54:92:d2:5d:82:42:bb:9e:51:60:18:75:33:
6d:ae:fc:08:48:40:0c:14:16:4a:e8:4c:8c:71:cf:6b:d9:8a:
57:5c:bb:67:fd:21:c2:e5:41:70:18:98:0b:69:4b:13:d3:2e:
af:d8:7b:27:0d:8d:50:10:14:88:5d:27:aa:96:71:0d:de:c7:
d5:da:9f:3a:a7:8e:1e:ae:a0:ae:d2:40:67:95:d5:a8:b7:00:
a7:e7:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:02:59 2025 by rpki-client