Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: IcMJ67NWBMjdXG0teZJVcMg6qs9XsvtlzHoMWpQoidY=
Subject key identifier: FE:AD:4F:01:3A:8D:D6:6A:3C:76:51:9A:31:60:7C:33:E1:87:22:41
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 0196D1E2EA7BBD744A6A2443B3D7F0C26AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 11D1
Signing time: Thu 15 May 2025 03:00:31 +0000
Manifest this update: Thu 15 May 2025 03:00:31 +0000
Manifest next update: Fri 16 May 2025 03:00:31 +0000
Files and hashes: 1: Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa (hash: 1/urxUwqVm4ILEtV4SR7woJSlB4+PTBY3yo3Lt2enUw=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: 5+jTHvhEmAjfEYBGNCrEe/c6gfDmDgbaI+oLKSG7ubU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:e2:ea:7b:bd:74:4a:6a:24:43:b3:d7:f0:c2:6a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: May 15 03:00:31 2025 GMT
Not After : May 16 03:00:31 2025 GMT
Subject: CN=fead4f013a8dd66a3c76519a31607c33e1872241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:0c:5f:4e:c9:ce:ca:d5:99:14:dc:3f:45:
09:c7:21:72:e2:c4:84:b0:bc:90:f0:d2:dc:0a:c0:
6b:40:e7:66:e0:d4:5f:f4:34:fb:7f:e8:2e:a5:3b:
66:00:ac:81:e3:ff:33:2b:0c:d4:ac:1f:d0:c5:b9:
28:de:d4:e6:32:84:c8:17:93:db:ab:01:c8:fd:01:
a5:ba:fd:34:43:3d:e1:de:de:77:d3:c3:37:7b:3b:
a3:9b:25:eb:57:d3:2e:fe:2d:f6:45:f6:38:63:04:
2a:89:f5:07:8d:29:34:98:cf:38:3a:1f:91:3b:5e:
34:7c:c2:ea:e6:16:1d:b9:08:bd:68:00:57:9f:b8:
11:6f:29:df:f0:a0:98:bf:85:70:2b:26:94:32:d4:
cf:15:d4:74:b0:18:db:af:61:f7:4c:c5:7b:46:60:
75:db:43:69:44:97:b1:2f:74:f2:7d:3f:26:35:82:
24:c2:d7:2d:0a:cb:01:e6:f0:8c:5d:de:61:8e:87:
58:84:33:40:b2:0d:f2:3c:45:80:40:77:a4:dd:77:
e5:a6:a2:b4:89:10:43:3c:37:e1:c6:ba:10:9d:71:
42:0b:56:63:81:3b:f3:fe:ee:8f:1c:36:98:f6:9c:
ad:98:b0:bb:55:61:8c:d2:29:44:45:36:76:c9:4d:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AD:4F:01:3A:8D:D6:6A:3C:76:51:9A:31:60:7C:33:E1:87:22:41
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5b:3a:48:94:d4:28:04:a2:bb:b8:05:a7:21:ba:ef:7b:cc:
7c:36:f3:88:64:02:c2:44:06:66:c3:0b:59:2a:e3:22:5d:df:
67:fd:e1:bb:ef:9a:2f:44:bd:9a:f3:b7:ed:b4:d1:83:ee:9a:
69:4b:eb:92:97:2a:98:ab:70:1a:03:03:fe:01:b8:99:4b:d4:
d8:d2:a8:84:2d:2e:67:2c:a3:6b:50:88:47:91:62:c1:ff:a8:
fd:4e:c5:20:d1:23:0e:65:79:29:88:69:72:9f:4e:1a:3e:9d:
da:cc:24:65:2a:1c:aa:29:d1:4d:4d:8f:fd:bb:2d:c8:ac:65:
5a:64:97:ed:0e:3c:2d:b8:e0:8e:8a:d6:0a:43:87:fb:6a:67:
b7:9e:29:75:77:95:bc:58:31:e7:8f:58:50:df:b0:ed:96:4c:
73:79:1c:7b:fb:27:d2:fb:00:18:d9:67:3a:03:75:c3:6c:d9:
0e:f2:59:7d:53:ef:ac:62:f1:6f:84:21:0a:31:20:f9:d7:06:
50:03:ea:a2:e8:bf:3b:fe:56:57:c4:50:39:89:6d:00:3e:38:
52:24:32:be:87:68:1a:e0:97:76:07:2d:fc:7e:e2:77:b2:3d:
91:ce:d3:25:61:37:51:54:95:9f:90:8a:97:58:7f:10:72:53:
02:49:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:54:38 2025 by rpki-client