Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier: XysuuBdXMUssEmFl2y9rRqj3NJDxtSeJib8GDXv8Sv4=
Subject key identifier: B7:10:0D:80:00:34:51:68:C6:33:6C:DD:7A:5F:78:72:34:7E:C3:38
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial: 01969D512733D1D995BD7FD76583F55D438A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number: 14B4
Signing time: Sun 04 May 2025 22:01:03 +0000
Manifest this update: Sun 04 May 2025 22:01:03 +0000
Manifest next update: Mon 05 May 2025 22:01:03 +0000
Files and hashes: 1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=)
2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: IymT6S3SaU2k7R+Xh9qrcdYy9B4OT5SWaLaZ2dOSSbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:27:33:d1:d9:95:bd:7f:d7:65:83:f5:5d:43:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Validity
Not Before: May 4 22:01:03 2025 GMT
Not After : May 5 22:01:03 2025 GMT
Subject: CN=b7100d8000345168c6336cdd7a5f7872347ec338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:15:ed:46:6e:fb:76:17:de:2c:f0:50:08:
17:ec:6e:0a:f8:f6:96:7e:01:2f:f0:7e:b2:3a:cc:
e4:c1:e0:56:ec:67:62:ce:53:7c:5a:59:01:cb:c2:
46:eb:3b:5a:0e:f6:c1:a2:26:87:42:2f:a0:f2:ce:
41:09:33:46:b3:bf:ed:d9:32:4b:fe:be:4b:d4:7d:
d4:a8:c1:98:2d:ac:90:a8:a8:44:78:ce:48:d7:b4:
84:9f:83:00:ad:d6:6a:70:64:ac:51:d7:2a:c6:33:
78:f6:23:17:f6:f4:b6:cb:a0:b2:16:43:b3:f1:af:
5b:a9:9f:51:b9:28:20:43:d1:18:2b:5e:d3:78:c2:
d6:72:ae:83:81:d5:92:61:03:18:27:3f:59:dc:d4:
07:f5:d8:b3:d0:09:65:97:66:a1:9c:e2:f1:7d:72:
cb:9e:29:2d:63:f1:cb:7b:d2:34:98:8a:a7:a7:a4:
1d:e6:e5:c7:98:d4:01:19:7c:d7:fb:e6:cb:1a:bb:
7c:89:73:2a:4c:e0:ca:31:22:4c:ed:5e:39:81:be:
09:15:a5:68:27:42:de:2a:6b:8e:f2:9e:b4:0c:4b:
d6:0f:cb:0a:06:04:7b:e1:c4:e6:25:8d:f9:d5:3d:
0a:ba:51:b5:df:f5:5e:a1:d3:c5:97:06:85:12:a4:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:0D:80:00:34:51:68:C6:33:6C:DD:7A:5F:78:72:34:7E:C3:38
X509v3 Authority Key Identifier:
keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:66:09:64:c1:78:ff:32:03:41:b9:eb:0e:2a:f7:39:42:6d:
6d:62:9e:5e:ea:dd:e3:f6:be:82:ed:9f:6d:02:f1:f9:77:c3:
08:cf:c3:39:c6:49:3e:e3:86:56:aa:db:8c:70:e5:14:33:15:
c2:49:fa:c0:54:34:01:8b:cb:88:51:15:6a:04:6a:37:11:c3:
90:d7:5a:12:3f:e8:09:b6:28:81:eb:78:4e:9c:5f:ad:bc:82:
e3:e1:da:ff:7f:d0:8a:fa:e2:cc:fc:13:73:25:70:cf:57:90:
e3:36:82:ff:a0:d4:4f:5b:64:d6:27:2c:f4:c8:83:02:46:fa:
0d:1b:49:18:72:cf:6b:36:aa:79:42:ee:77:96:b7:11:ef:d2:
11:2b:08:97:b5:95:6d:0d:9a:12:4a:0a:8f:ea:41:02:2b:dd:
aa:1c:99:e4:5c:e7:1c:3e:f3:37:5a:0f:bd:d6:34:80:36:47:
61:cf:ca:fc:cc:2e:73:89:c7:ab:ca:b5:ff:14:76:3f:f5:73:
4b:57:c0:4b:d2:1d:e3:cf:6a:af:02:be:b1:7c:6f:63:af:b4:
8f:43:3c:79:44:ef:68:44:94:85:bc:88:b8:f7:f9:b2:f5:c9:
b9:eb:6e:d4:b5:ca:ed:7c:0b:0d:5a:15:e6:66:69:a6:7b:c0:
40:ff:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:04:54 2025 by rpki-client