Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: lksLw0Xh/1REotIa8MRLg4+9NrJMIWxRtWi5QxVTEA8=
Subject key identifier: 5C:63:01:43:3B:09:2A:31:9E:EC:48:46:EC:1C:EB:23:8A:01:EF:DD
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 0196C570F57383EBB10C3D0AAFEA2542CDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 0CB5
Signing time: Mon 12 May 2025 17:00:36 +0000
Manifest this update: Mon 12 May 2025 17:00:36 +0000
Manifest next update: Tue 13 May 2025 17:00:36 +0000
Files and hashes: 1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=)
2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: PG1hlhc2CojWnvnn8wllHIwr9mZtWFOkNT7kxeYV1DE=)
3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:f5:73:83:eb:b1:0c:3d:0a:af:ea:25:42:cd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: May 12 17:00:36 2025 GMT
Not After : May 13 17:00:36 2025 GMT
Subject: CN=5c6301433b092a319eec4846ec1ceb238a01efdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:04:94:34:85:33:a2:96:0d:74:7b:72:04:
d3:0d:4f:10:cc:3d:75:85:8d:e3:35:cf:4b:f7:62:
8d:59:fd:d1:45:24:38:4c:39:a2:72:2f:9c:09:0f:
c8:7a:b6:92:04:6b:aa:b6:f4:82:19:d9:22:4a:b5:
69:b5:58:8e:ab:ba:c4:4d:bb:93:0b:aa:6c:8e:1d:
b4:a2:f6:e3:46:54:50:6d:e5:e7:d0:ed:0d:01:9d:
2e:33:e5:47:8f:af:25:92:89:bf:c5:aa:ef:82:ed:
8d:9b:70:68:33:f6:75:d3:32:7e:e1:4f:cd:4f:27:
ae:60:cb:2e:48:0f:6c:cc:f8:9e:19:81:01:15:0d:
0f:9f:76:3a:9b:53:35:40:d0:8c:b1:9c:7e:e5:03:
61:88:03:58:71:e5:a7:ed:4a:6f:91:08:ea:51:d5:
87:89:2d:db:24:a0:4c:83:f2:e2:b9:e7:58:7e:cd:
60:b8:eb:3a:22:b6:78:1e:2a:6c:f6:53:f8:36:3b:
ca:5a:99:31:cf:85:94:66:70:42:08:43:54:14:e6:
59:ce:f4:ec:f9:5a:7b:0a:ba:be:9e:32:51:55:28:
43:38:72:ee:59:47:29:3c:ba:23:76:70:dc:81:e7:
ae:9d:b4:30:6b:6e:55:18:a8:cd:79:80:eb:77:16:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:63:01:43:3B:09:2A:31:9E:EC:48:46:EC:1C:EB:23:8A:01:EF:DD
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d8:54:58:d3:37:7c:e7:9c:95:5c:14:62:ee:df:12:7a:15:
56:dd:e3:00:f6:7f:7b:9f:61:81:7a:a0:ae:1e:51:a9:ca:a1:
fd:a4:f7:14:1c:cd:23:00:07:d4:ad:bb:f8:14:9c:38:d2:0b:
d4:90:f7:d3:28:ff:8d:73:75:de:7a:6a:f9:7b:46:e6:ee:05:
e8:ad:e7:10:d3:8c:0e:ec:93:4d:5e:8b:61:92:3d:f2:d7:8f:
71:bb:be:67:c6:36:96:8f:45:0a:31:50:1b:57:14:72:64:25:
7e:42:6f:52:b1:67:9e:54:ea:9d:62:2e:54:99:91:59:23:f6:
12:2b:13:57:56:b9:c6:98:9d:f9:6b:52:06:d7:a1:92:3f:1b:
d4:1f:ea:66:c9:45:fe:12:6d:1c:63:d7:48:9c:7f:2c:cb:61:
28:4a:c6:a4:e7:d2:0e:03:fc:67:e6:93:22:da:12:0f:c9:0f:
8e:f3:03:25:95:e7:21:8b:87:67:42:77:e3:c9:ed:61:75:ad:
ab:bd:c0:85:a2:8d:17:c6:7e:9f:47:20:87:fc:05:b4:50:2d:
99:6b:27:81:a9:22:62:be:e8:23:a6:fb:80:61:9b:0b:e2:c8:
dd:86:bb:5b:38:61:46:f6:5d:71:80:c8:50:6c:1d:aa:73:27:
fc:11:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:29:48 2025 by rpki-client