Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: Ak+LK4xILKH3cP59O/WwQ8BGCj6sh4RI80k1VEeshBI=
Subject key identifier: 6D:F1:B9:FF:63:9A:AD:4B:2C:9C:03:95:94:19:D3:5D:AE:12:00:1E
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 0196C20278A1E44CD17C5E52F0B893847E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 01:01:03 +0000
Manifest this update: Mon 12 May 2025 01:01:03 +0000
Manifest next update: Tue 13 May 2025 01:01:03 +0000
Files and hashes: 1: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: oA5sB+yQFob2TzrvJ22uKgcF3uuDQDET3RDdtV9sl+8=)
2: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (hash: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:78:a1:e4:4c:d1:7c:5e:52:f0:b8:93:84:7e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: May 12 01:01:03 2025 GMT
Not After : May 13 01:01:03 2025 GMT
Subject: CN=6df1b9ff639aad4b2c9c03959419d35dae12001e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:b3:7a:19:26:ad:c8:d0:d2:0b:42:47:b9:
76:f4:36:5d:5b:d2:a8:b1:69:f5:9e:16:70:fe:a5:
3f:6a:87:41:ab:a2:b9:59:21:eb:cc:79:cd:6b:1f:
c9:51:9f:90:55:ed:5e:f2:2b:89:10:1e:9b:d8:1a:
75:7a:e0:a4:c0:5b:f8:f8:79:4f:57:f8:ef:24:2e:
aa:1c:af:a5:ee:36:f7:0c:db:a0:6a:15:81:c4:28:
3a:8c:f4:69:69:fe:68:3a:03:af:9e:ba:75:26:21:
97:2d:49:bb:98:ae:84:52:e6:0c:21:f6:d1:e1:ad:
6f:45:c3:30:f0:f4:75:33:bb:a8:14:69:3e:bc:47:
5e:06:d7:30:cc:4c:64:4e:ce:ab:d0:ca:30:54:31:
ac:d7:95:35:97:3b:da:ff:53:30:47:91:12:a0:d5:
41:92:4f:9a:3e:ba:2b:23:d6:3f:78:cb:9f:5f:81:
9a:33:f0:61:02:a4:ed:26:2e:bc:81:ee:80:c7:c2:
25:46:95:f0:5e:25:28:dd:5b:06:9c:c1:02:30:e9:
ae:dd:7f:32:64:99:5d:dd:63:37:37:65:ba:85:17:
ca:a9:ef:a1:b7:f2:ab:99:6b:c4:d1:7b:97:c6:cf:
51:69:f1:67:7a:70:9a:65:87:e8:1f:0b:c3:a3:ee:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:B9:FF:63:9A:AD:4B:2C:9C:03:95:94:19:D3:5D:AE:12:00:1E
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a7:9b:1c:ab:36:81:6f:fa:46:df:2d:bd:97:e6:04:02:09:
c8:d4:58:ae:c0:93:68:2f:fc:13:b9:4a:e3:75:a6:b8:4f:b6:
b7:40:3f:18:9a:eb:4e:74:89:65:5e:90:be:5e:17:61:55:60:
e2:07:b0:f7:81:c9:08:67:4c:f7:72:84:28:54:a2:4d:84:6a:
54:3f:d9:e9:02:e0:b3:8c:7e:e0:2b:5a:e2:cb:d9:bf:d8:03:
a7:4b:33:dd:14:4f:c9:8c:ff:f5:ce:cf:b1:77:7d:5d:f7:2e:
5c:d7:43:df:6b:90:82:d8:b9:3e:d9:74:ad:a4:b0:b7:fe:dd:
f3:cb:68:81:39:0a:f5:cf:53:a3:53:0b:9f:c4:4a:13:e2:b6:
5d:59:4f:b7:1c:08:60:e6:bb:59:71:0e:a0:aa:d4:e1:8a:60:
a2:39:14:3e:e8:e8:6c:88:5c:c5:91:4a:68:ae:3a:5e:20:56:
3d:a7:40:37:12:99:06:9c:b8:73:00:fd:bb:7e:0b:51:d4:ae:
46:a8:6b:7c:57:86:57:3e:6e:6b:03:eb:51:dc:8f:23:8c:e6:
2f:8d:70:6a:dc:3a:04:55:71:8a:1b:ed:f7:1a:c2:64:87:8d:
7b:5f:45:b3:65:e7:05:81:58:d3:45:7d:9b:70:a2:9a:8f:cf:
ca:b8:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:07:50 2025 by rpki-client