Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: MbVe3t0jcghfiID9hePpw3IXcjug6d180DJyvSmdlNE=
Subject key identifier: 4A:7B:B9:0E:5F:D2:BD:89:D5:E2:13:45:DA:89:F3:34:E4:7D:6A:53
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 0196B85A9B2EB7A81672A87B7D8C226ED28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 04:01:07 +0000
Manifest this update: Sat 10 May 2025 04:01:07 +0000
Manifest next update: Sun 11 May 2025 04:01:07 +0000
Files and hashes: 1: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: 7sgZwLsxn0SxaRYl5SsVsI/rVJlehpV2FTnh/KMIh90=)
2: uhCkTjed1Otbl84zKJAXa3t70aA.roa (hash: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:9b:2e:b7:a8:16:72:a8:7b:7d:8c:22:6e:d2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: May 10 04:01:07 2025 GMT
Not After : May 11 04:01:07 2025 GMT
Subject: CN=4a7bb90e5fd2bd89d5e21345da89f334e47d6a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:cd:93:f9:96:84:73:2b:15:99:0d:7e:db:
c7:a6:bf:48:b5:18:74:ac:5e:9d:5c:33:97:dd:4f:
50:96:64:0f:a5:38:3a:37:6e:dd:c5:5e:f8:55:08:
38:d0:8a:44:db:5a:b1:4e:60:b5:d3:a6:81:94:39:
40:f8:20:71:21:26:62:ee:3f:47:1d:23:20:4a:ad:
b0:bd:ce:81:1d:ec:68:a9:b9:80:74:38:36:ac:e7:
7b:65:e0:63:22:2d:0e:fd:7b:91:6e:83:9f:7f:cb:
46:63:3b:e7:3e:a5:e0:4b:1d:ec:97:86:50:6a:ca:
61:f9:73:79:e2:4b:a2:99:88:10:62:4d:75:80:23:
0d:77:27:9f:70:6e:b6:51:af:18:ee:f1:0a:2f:aa:
18:1c:7f:7b:b7:22:7e:03:41:ab:c8:1b:14:d7:59:
3a:d4:cb:a5:46:94:82:71:bf:e5:d9:b5:8e:bc:49:
92:3c:d2:d3:53:5a:0f:29:35:38:91:88:75:e7:54:
0f:cc:d0:06:48:d3:99:da:3c:3c:ac:91:94:c1:bb:
f2:5b:45:fa:14:e2:d0:8d:2f:7f:85:fe:34:67:79:
73:e4:36:23:ac:c2:7c:50:44:27:ec:5e:de:8c:02:
7f:81:0a:70:f8:ac:93:a4:d5:0f:4b:4c:0e:d0:7e:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:B9:0E:5F:D2:BD:89:D5:E2:13:45:DA:89:F3:34:E4:7D:6A:53
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:39:81:46:fc:bf:5c:9c:da:64:53:4c:ae:48:8b:ec:6d:2d:
16:48:e5:4c:4c:5a:0f:a7:2d:b1:50:18:a5:c7:c9:16:3b:59:
3a:f5:76:fc:d8:8b:c5:6d:5a:ad:2f:f7:7a:47:d1:84:30:a0:
09:d7:78:38:d3:98:ad:40:cf:08:5f:ff:12:ca:97:39:f9:a4:
78:5d:f7:47:c9:4d:94:66:02:83:63:41:ff:a0:e4:67:04:0d:
1d:d5:ff:31:a2:b3:91:4b:04:23:81:10:3c:f7:c3:e8:e2:3b:
77:c4:c1:af:dc:5d:c0:e2:c8:9c:eb:2b:19:d8:6e:68:16:4b:
95:4a:fd:5c:f1:5b:8d:64:61:b1:24:3f:b2:82:10:8c:6a:7d:
4a:16:8b:d9:99:d8:e3:fd:8a:c4:bf:aa:d8:9f:c9:f2:16:60:
91:bd:bf:2e:b0:a1:0b:79:18:0c:20:7a:97:cb:e8:a4:0f:23:
d0:cc:6e:5a:84:86:99:11:c2:54:3e:2b:6a:ad:ba:14:47:48:
b4:69:7e:76:93:21:1a:5a:45:76:ac:01:6e:f9:e3:c8:31:01:
ae:cd:3e:5c:29:93:52:c3:d8:de:40:41:4a:b4:0f:47:09:59:
95:57:c3:80:78:ab:e7:2e:cb:7e:55:0e:7b:08:87:7f:4a:ad:
b4:17:ff:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:04:56 2025 by rpki-client