Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: as2mH7OXU6WhKURvq7gQ4+5YARCQ2ILKeLdiNpDBZD0=
Subject key identifier: C3:80:BD:E7:E5:EC:17:98:49:4F:42:D3:FA:A1:0D:13:5D:AC:7F:8B
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 0196B145A1B240726B45E057530C1B00C0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 1295
Signing time: Thu 08 May 2025 19:00:52 +0000
Manifest this update: Thu 08 May 2025 19:00:52 +0000
Manifest next update: Fri 09 May 2025 19:00:52 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: hfnguIOI/nDqXZHwVlSf1eZUDQMvDLlS18P+OLP4V9E=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:a1:b2:40:72:6b:45:e0:57:53:0c:1b:00:c0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: May 8 19:00:52 2025 GMT
Not After : May 9 19:00:52 2025 GMT
Subject: CN=c380bde7e5ec1798494f42d3faa10d135dac7f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:9a:cb:49:7b:1c:15:f4:b7:21:b5:72:ab:
7d:ab:cd:18:e9:58:43:f9:c0:29:62:c8:b8:97:e9:
95:0b:c2:a3:89:b1:8c:1c:5d:04:80:78:ea:dc:a3:
71:f0:4d:ce:51:18:e8:70:d0:87:9b:3e:d7:2d:32:
c1:a4:0e:ef:7f:9c:e6:28:23:a9:d1:c8:29:21:aa:
71:8b:e6:10:58:a2:75:c0:f7:bd:d0:9c:08:32:9f:
38:3c:33:7a:69:e1:03:0c:25:88:cf:1c:6d:30:7c:
c2:64:1f:b9:6d:a3:9b:75:05:ba:0b:76:9c:f7:6d:
27:b8:f8:3a:df:28:65:4a:7e:ff:32:59:61:26:68:
79:2c:fe:bd:d0:6c:3a:d4:9b:1a:63:9f:fe:ce:51:
45:ec:7a:34:38:de:61:e8:1d:06:cd:3e:4f:39:62:
54:50:f6:40:50:f7:fc:61:7e:da:8d:79:6b:10:e4:
48:c1:aa:3b:49:7c:ec:f7:8d:e0:37:79:19:4d:fc:
ff:49:94:74:0d:88:2c:90:7e:b1:3a:a9:6e:f8:94:
4d:54:a6:58:c6:12:94:51:14:fd:26:20:f5:7e:5e:
6b:94:3b:28:0e:f8:db:74:a8:fa:85:aa:40:25:da:
7c:a7:4a:c3:12:54:4c:7a:02:ce:05:e7:72:89:0e:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:BD:E7:E5:EC:17:98:49:4F:42:D3:FA:A1:0D:13:5D:AC:7F:8B
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:38:b6:82:61:04:a9:ce:39:25:58:dd:f7:4f:d9:56:86:2a:
b6:6a:26:a0:7c:ae:74:17:2d:99:9c:b4:d5:e5:9e:e8:3c:6e:
5f:04:b6:b2:a7:03:ae:da:50:09:12:4b:c4:3d:b1:6b:d4:d4:
04:dd:4c:6d:05:b9:77:82:71:f1:39:8b:c7:0b:e0:5c:d2:b0:
22:e8:ca:c5:ed:d9:e7:ef:66:05:a9:95:bb:94:5e:b5:13:aa:
27:d6:50:40:1e:3e:f1:9d:b0:8a:d8:79:d7:d5:cd:79:6c:81:
de:7a:c4:a2:3c:2d:d7:02:53:29:74:15:5d:87:a7:c9:4a:91:
f1:5a:c8:85:f5:c3:bf:76:11:c5:60:76:89:12:13:5b:24:12:
40:21:d5:e7:d7:b3:ff:55:4e:df:65:86:ad:66:8a:c6:1c:1b:
47:d9:d6:e0:c3:33:49:9a:38:67:39:64:a3:90:82:b5:62:eb:
ba:70:18:19:23:97:9b:f1:aa:c7:57:09:12:dc:ad:73:c0:fb:
5e:39:dc:b0:50:3c:06:89:46:ac:62:42:8d:79:22:a6:93:2d:
e2:0d:bc:c2:85:68:30:32:9c:f0:22:35:5b:c8:5f:36:ae:00:
92:9f:90:5f:a7:c0:d5:04:8e:26:75:87:64:23:12:07:8b:49:
81:9d:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:53:34 2025 by rpki-client