Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: MhaojQ6zxauuwtJA3fZeaP8ahSbc1eax2A9V1Fgx2CU=
Subject key identifier: 5B:87:D9:2A:88:E5:84:8E:FB:0E:21:60:4A:C1:32:85:FA:EF:E4:94
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 0196C5A85463927571834C89A3E5072BB895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 0EC3
Signing time: Mon 12 May 2025 18:01:05 +0000
Manifest this update: Mon 12 May 2025 18:01:05 +0000
Manifest next update: Tue 13 May 2025 18:01:05 +0000
Files and hashes: 1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=)
2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: LNRxvNNLnyDVEK2n5Vrbz1K5UTIwPmcUgcFrJT2qgjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:54:63:92:75:71:83:4c:89:a3:e5:07:2b:b8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: May 12 18:01:05 2025 GMT
Not After : May 13 18:01:05 2025 GMT
Subject: CN=5b87d92a88e5848efb0e21604ac13285faefe494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:d3:91:61:c8:4c:7d:67:9a:96:1b:c7:14:
4f:3e:cd:fc:d2:e1:11:b6:10:e5:68:b8:12:d0:ca:
40:00:0c:fd:37:44:60:55:15:41:c5:74:84:43:2f:
91:a7:1e:19:7b:ac:52:a9:7c:39:40:7e:49:54:8c:
56:fa:ad:75:41:90:e7:9c:64:55:cd:00:02:6c:9e:
83:ef:88:fb:38:1d:81:4d:55:6f:f2:13:b8:ff:14:
29:7f:6b:1b:a2:79:5c:4b:84:82:e7:86:db:6a:15:
65:d0:50:31:ab:7a:dd:e9:b0:66:dc:49:64:58:57:
93:09:78:9d:6a:22:cc:f3:2b:9b:7f:10:93:b5:b6:
ea:f2:3c:89:10:02:2e:2d:56:a5:e9:ab:b1:a9:e9:
b4:1d:bc:dc:8e:73:f1:27:6b:34:4a:b7:51:2b:f3:
c7:7a:2c:b2:7f:34:b2:eb:fd:ef:a8:af:85:9b:ee:
29:cb:2c:67:c7:3b:11:ef:d9:3e:09:57:7d:92:6a:
b1:92:6c:78:2d:43:3d:7a:9e:5d:96:3a:aa:4a:d5:
5c:c2:db:8e:f6:f1:ed:c2:24:5f:08:1d:10:cd:21:
14:46:9c:95:b3:9c:bd:a6:89:31:12:50:aa:0b:ea:
a5:57:f5:93:bd:b9:be:b8:60:a6:fd:cb:a9:db:3e:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:D9:2A:88:E5:84:8E:FB:0E:21:60:4A:C1:32:85:FA:EF:E4:94
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:9b:be:08:ad:e6:93:a6:57:e7:23:37:e5:31:22:6e:c6:f6:
fa:f8:d4:fe:62:d8:a0:45:c9:82:2a:ac:c7:37:ff:ef:57:5b:
16:53:bb:fa:1c:34:d6:ea:d4:d2:45:fd:59:7f:d2:dd:ce:8c:
e2:c7:8a:7e:2e:27:b1:68:ca:33:80:50:97:77:47:0c:1c:ec:
52:52:0b:5b:c6:d1:8f:c9:bd:32:1d:23:b6:7d:c9:97:83:02:
ba:1e:18:40:4d:2f:cf:90:79:2a:03:01:f0:30:de:86:aa:9a:
62:07:f8:56:29:d0:b4:de:4d:40:8a:ec:e5:a1:fa:2a:5a:54:
a5:4e:10:1f:3d:6d:a0:ec:4a:62:f7:68:aa:cb:cd:f2:89:2d:
e0:0f:72:d2:c8:b7:ae:5c:15:93:c9:4c:50:32:cf:b6:8d:55:
1d:51:45:a3:0a:7d:fe:00:78:88:ed:4c:30:3c:ed:a2:b3:69:
db:95:f1:c3:51:9b:c8:b1:3a:c0:6c:c7:a1:bf:e6:ee:5e:8d:
22:47:15:d9:e6:76:fe:4d:32:d8:da:34:06:8f:8f:29:79:c6:
40:a9:bd:3b:28:a4:a4:dc:5d:2f:0c:5f:a2:57:f1:6f:c9:98:
d9:31:51:34:59:bf:5e:ff:27:6b:f3:79:ba:bd:06:b7:49:75:
77:32:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:37:38 2025 by rpki-client