Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File: tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier: JumMU5scCqtD5paqynTPgnAHdjZHlvudHQmsm0SRbW0=
Subject key identifier: 86:DA:18:99:D0:13:00:89:23:C2:C5:9D:6A:BB:D7:50:76:94:D2:C7
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial: 0196A653E887D0D8750BF2CCFF23F22FE719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number: 05F8
Signing time: Tue 06 May 2025 16:00:38 +0000
Manifest this update: Tue 06 May 2025 16:00:38 +0000
Manifest next update: Wed 07 May 2025 16:00:38 +0000
Files and hashes: 1: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (hash: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=)
2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: LaJTqUxXf954cKoou9+GvdKyNys3PUsP3Ppdm/4v2o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:e8:87:d0:d8:75:0b:f2:cc:ff:23:f2:2f:e7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Validity
Not Before: May 6 16:00:38 2025 GMT
Not After : May 7 16:00:38 2025 GMT
Subject: CN=86da1899d013008923c2c59d6abbd7507694d2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:94:b1:20:21:c1:2f:ed:6c:24:69:26:20:
3c:91:c6:fa:07:e4:07:57:7f:40:ea:55:b3:a1:21:
de:68:62:69:eb:eb:27:ca:43:29:ac:92:6a:87:5f:
06:0b:f9:17:f3:6b:ec:ce:86:58:5c:ff:4e:7c:d2:
a2:0f:06:0a:af:7b:93:b7:e0:4f:ca:4f:4f:e8:a1:
e6:20:c1:fe:ed:f3:97:f5:8b:7c:74:3d:83:b5:b9:
fa:e9:c5:1a:33:7e:bf:57:26:95:fe:62:1b:58:8f:
39:d8:56:18:06:05:8c:21:a8:aa:94:c2:a8:d3:eb:
18:ae:a3:b9:77:83:8c:07:f7:95:8a:b6:a3:47:8e:
26:ef:ae:89:e6:be:6e:9f:49:d2:72:76:5a:9e:d3:
1c:4b:c1:08:24:5a:9c:d0:e2:3e:f3:4d:37:b6:05:
ef:1a:27:2b:d4:b3:5c:5c:d0:4c:57:59:0b:0f:28:
cc:07:69:50:03:57:f4:9e:5a:ce:c5:23:a7:1b:3c:
b9:e0:7c:7d:e0:cd:cd:fa:ee:2e:24:72:c8:c1:5c:
87:cf:f0:b1:9d:e4:95:50:2c:32:e9:1c:41:dc:e6:
67:b7:7c:56:48:df:49:39:a7:63:3d:d7:50:db:53:
df:09:c9:70:c4:4a:72:89:6c:19:99:0f:df:de:9f:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DA:18:99:D0:13:00:89:23:C2:C5:9D:6A:BB:D7:50:76:94:D2:C7
X509v3 Authority Key Identifier:
keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:af:59:59:e2:66:5d:19:1f:4a:76:77:d5:3f:7e:18:85:7c:
be:f4:35:14:c5:8c:30:27:4d:f1:b5:94:7b:e0:0e:37:ab:bc:
53:f3:94:41:19:99:17:59:2f:92:d7:32:8f:ea:1c:ba:22:99:
97:2e:53:b7:54:ca:d9:4f:f6:75:32:b7:db:52:9b:ab:8a:1b:
a5:80:45:9e:6d:5d:b7:15:42:21:60:fb:f5:27:52:27:3c:14:
52:8e:af:ac:e7:e1:e5:66:d2:af:a4:01:cb:b5:37:3b:94:d1:
9f:81:09:c2:54:da:18:09:e5:6d:66:7b:fa:6b:6e:18:28:93:
9f:62:a5:76:68:36:c1:a7:ee:a9:6b:02:1e:6b:b1:a8:76:60:
c2:6e:1f:03:9c:d9:5f:e4:58:6e:61:f4:43:b8:06:0b:d9:8b:
a0:2a:26:e8:60:3f:03:c5:50:f2:03:86:da:ca:c0:64:87:7a:
90:31:67:00:5a:89:2c:d3:1e:d8:d2:fa:a7:aa:fa:d5:e7:e7:
63:98:4b:4d:10:f0:4d:2d:40:5e:61:ca:e6:3c:7f:6e:70:6b:
75:75:8e:77:dd:7e:00:a2:12:53:0c:8f:cf:d2:e8:7c:ce:80:
a2:e8:7e:30:79:03:14:d9:c5:34:86:c6:a2:26:be:eb:79:72:
c7:e9:c8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:07:58 2025 by rpki-client