Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: 2+H9jrihNZr/r1acTfUiA+coI/Bx5GFOHMJK+ha01/8=
Subject key identifier: FC:48:08:4B:81:CA:5C:0F:A4:76:97:62:E0:D8:86:7E:A5:61:E0:05
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 0196BC6E3C4134331AC6F4F27D55AD09A5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 23:01:03 +0000
Manifest this update: Sat 10 May 2025 23:01:03 +0000
Manifest next update: Sun 11 May 2025 23:01:03 +0000
Files and hashes: 1: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (hash: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: WWz4OFW7hdA/sMazSsgMF/rILChZfyAXHVmN3n8YEPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:3c:41:34:33:1a:c6:f4:f2:7d:55:ad:09:a5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: May 10 23:01:03 2025 GMT
Not After : May 11 23:01:03 2025 GMT
Subject: CN=fc48084b81ca5c0fa4769762e0d8867ea561e005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:79:9f:0e:c9:48:89:2a:a0:cf:d0:ba:ae:
54:b3:95:96:71:22:f9:bd:7a:73:5c:c6:57:56:55:
c4:da:fe:34:0e:24:3b:f1:72:60:f0:b9:8e:1a:8b:
ef:c5:b3:eb:8b:6b:40:ac:df:e0:bf:0d:0c:d9:52:
4d:ef:85:da:70:a4:14:0b:2f:6f:27:e0:66:b9:77:
17:be:dd:f1:0b:68:99:c7:da:b3:8d:fb:03:c7:51:
bb:59:90:0e:82:5a:c5:87:93:07:74:69:6a:09:de:
44:f9:f9:01:98:ff:6d:c5:bc:07:54:f0:bf:93:f4:
f0:3d:7a:03:24:15:92:d2:45:30:26:07:b9:5f:3e:
05:79:7f:f0:d9:2b:90:81:72:c1:af:57:42:c4:75:
75:83:db:bc:dd:8f:67:88:84:e4:2d:09:8f:33:6f:
44:7b:df:fb:f7:b4:6f:29:1a:2c:8c:a0:b5:5c:9f:
a1:1b:3c:97:d6:ae:0d:f8:63:f2:03:0c:87:cf:aa:
7e:7b:77:47:f7:26:7e:c2:4b:fb:df:94:9f:75:68:
19:bb:41:ab:4c:3e:15:14:ce:d9:98:da:ca:5c:f8:
4f:42:78:93:2a:4d:0c:46:13:3f:27:a8:17:48:74:
f3:ac:0e:c0:62:95:66:e8:bb:d2:c4:56:3c:44:d6:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:08:4B:81:CA:5C:0F:A4:76:97:62:E0:D8:86:7E:A5:61:E0:05
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e1:63:a1:99:af:d9:4d:b4:2e:16:f0:3b:7b:49:06:78:0d:
b9:59:17:b0:7a:36:7a:59:0b:ff:39:8f:a5:b9:e8:be:23:a5:
1e:c0:b9:f1:ba:4a:20:e6:42:00:e3:bc:43:2b:c7:98:1f:83:
01:8c:cb:8f:ad:a1:b8:49:a7:f3:ff:f6:6d:4d:b9:31:e2:26:
c6:fd:8f:70:99:bf:3b:c3:6e:31:f6:46:37:5d:8e:72:b7:6d:
2b:b1:11:be:32:b8:f5:0f:78:ce:9e:2f:ba:69:3f:8f:68:6e:
d9:0e:58:05:b9:da:3d:e4:72:5c:db:a7:e1:d7:2e:af:9c:6b:
0a:ec:30:f3:48:25:5a:ce:3b:ba:a1:97:a0:82:fa:d3:05:37:
f1:c6:c5:0f:47:ed:9a:2a:05:ce:51:8f:d2:80:96:d2:98:4c:
10:52:94:75:ef:a8:e0:8d:f7:7d:80:2a:6b:2e:c6:50:5f:db:
31:c1:66:c2:c4:d3:d3:51:c5:e6:98:45:ec:0e:a6:f5:9b:27:
fa:cb:17:b3:4f:47:f4:5a:05:3d:7d:10:9d:d0:25:a2:1b:3b:
fb:c5:f9:18:a8:49:11:01:10:67:36:10:17:b0:f3:fe:d0:9b:
5c:48:7e:e0:a1:27:44:b2:c9:64:2b:41:f1:60:bf:c9:50:f9:
7c:da:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:15:16 2025 by rpki-client