Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier: Tguq6pjxZOeciPayK9A37X89xSwJkh+5AEGZhUAVxRI=
Subject key identifier: BA:61:E6:9A:BE:AE:7E:A5:2C:9A:A1:F9:F5:19:1F:A0:CB:44:E6:8B
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial: 0196B7B5C2DB921D313079411CA5D0C5B48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 01:01:04 +0000
Manifest this update: Sat 10 May 2025 01:01:04 +0000
Manifest next update: Sun 11 May 2025 01:01:04 +0000
Files and hashes: 1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: wViCEw67XuIZDoAKsF5vorUEjqzHvQyx6L7hNUJpd4A=)
2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:c2:db:92:1d:31:30:79:41:1c:a5:d0:c5:b4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
Validity
Not Before: May 10 01:01:04 2025 GMT
Not After : May 11 01:01:04 2025 GMT
Subject: CN=ba61e69abeae7ea52c9aa1f9f5191fa0cb44e68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:6b:86:0f:65:68:46:6d:66:3a:1b:67:dc:
b1:97:da:7f:7c:34:0f:16:1c:87:8a:d2:8c:80:8b:
27:a0:99:24:43:ff:4f:bd:82:4b:2c:06:75:ae:22:
6c:6e:68:49:6c:96:6c:63:36:36:2e:b6:fd:c2:d0:
23:f1:81:49:07:02:2e:7c:86:16:02:57:39:05:33:
0d:aa:05:bc:68:99:9c:14:06:b8:21:c6:c0:f0:d3:
b6:00:01:87:15:ff:a3:fd:eb:34:a9:fd:9f:ed:24:
ac:c0:0e:d7:93:b3:53:f6:6d:3c:b5:29:de:85:06:
1e:32:01:8f:c2:67:99:76:d9:b3:48:00:24:f0:8e:
34:4b:59:7c:a8:a9:15:dd:60:81:b9:21:4f:06:4b:
de:c9:38:92:27:20:e2:3a:81:d4:ec:25:b8:54:fc:
55:df:2e:3f:4c:4b:01:92:76:23:df:ec:48:72:1e:
e7:18:6c:50:f9:c5:b4:76:3d:d1:72:6f:bc:b5:e5:
f6:a0:a0:97:a1:ba:7b:9c:f8:53:9a:40:c8:f7:b3:
d2:c1:84:35:54:a6:cf:c8:ba:34:79:54:0d:94:5f:
7c:21:78:6e:c0:e5:da:a2:bf:da:d2:0f:0b:96:22:
23:f5:5b:7c:2f:46:29:d4:e9:9c:f4:0f:a4:ab:da:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:E6:9A:BE:AE:7E:A5:2C:9A:A1:F9:F5:19:1F:A0:CB:44:E6:8B
X509v3 Authority Key Identifier:
keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:9b:08:38:64:ce:eb:dc:ce:33:7d:6e:d7:92:89:36:43:
6b:54:51:1c:4f:05:a8:49:9f:b0:2c:dd:ec:e5:9e:ee:bf:0b:
48:69:05:48:b6:78:06:af:48:c8:2a:06:c7:75:be:90:63:fe:
81:ea:84:6d:89:f8:4b:19:0b:fc:d1:be:0b:52:12:1e:16:60:
8b:de:02:b8:41:d6:d0:6e:42:a3:13:15:7f:33:bc:dc:54:f9:
6f:1e:e5:3d:b3:ec:81:5b:66:c6:17:98:3d:a0:18:a6:f0:7f:
2b:59:d8:82:ef:5d:9f:4b:02:ae:26:2f:65:c8:99:33:23:a4:
70:46:96:c1:dc:46:d7:e6:08:7c:19:57:84:7f:09:5d:5d:58:
b8:dd:1b:6b:08:4f:c7:af:10:bb:93:e9:4a:ef:52:a0:af:dd:
a4:76:3c:6f:1c:35:32:e6:08:d2:8a:57:66:a8:04:bf:b4:c0:
97:ef:8c:4d:63:d4:33:65:73:a6:b1:ec:5d:ab:bd:3c:c9:df:
87:97:48:c6:09:e6:cc:1c:fc:1a:7d:36:88:14:44:7c:cd:84:
d9:3a:17:6f:72:a7:d9:0f:d4:69:b6:49:9d:e4:3f:d7:59:f0:
d4:44:77:eb:e4:88:40:89:fb:e1:f8:e4:7a:28:82:3d:05:99:
42:4e:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:51:55 2025 by rpki-client