Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: fcPz/nMJh9BWObFRYbKlRFZdt0LHWcx9qs3ye1aMB58=
Subject key identifier: 17:90:2F:C5:DF:E4:86:44:C9:F5:2D:5B:A2:27:F8:C6:5C:A2:58:F4
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 0197B88EFBBB14FAE5ED5C1DF5B798648860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:01:07 +0000
Manifest this update: Sat 28 Jun 2025 22:01:07 +0000
Manifest next update: Sun 29 Jun 2025 22:01:07 +0000
Files and hashes: 1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: if8CdmRT/KHFv3GB40g2hkBzq9c2PbbLcWgIGRtvwbQ=)
3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:fb:bb:14:fa:e5:ed:5c:1d:f5:b7:98:64:88:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Jun 28 22:01:07 2025 GMT
Not After : Jun 29 22:01:07 2025 GMT
Subject: CN=17902fc5dfe48644c9f52d5ba227f8c65ca258f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:58:60:1b:1b:01:18:44:ab:25:7d:8d:d5:
ad:db:92:d0:dd:e2:91:e1:a9:c6:76:d0:3e:6f:37:
32:35:a0:d1:f7:76:89:83:88:b1:91:b9:82:97:f0:
ba:a6:63:f3:0e:00:93:ea:d7:49:40:dc:98:a1:b2:
a4:cf:02:72:f2:21:79:59:57:82:96:2c:e8:1d:1f:
2a:2d:3e:d8:bd:14:94:7b:12:df:13:74:fb:f8:07:
ab:32:fc:15:e4:36:6a:d8:d0:45:c8:f9:c8:d6:e7:
e5:10:29:a7:34:c8:ba:38:e1:73:81:b6:95:0d:5e:
79:8f:e8:03:03:ad:2f:e1:12:23:1e:ed:e8:6f:75:
f3:e6:22:3b:df:5c:75:77:a8:a2:98:36:33:39:cf:
2d:34:e4:48:08:62:f3:12:c7:c6:c2:ed:7c:3a:63:
29:03:ef:f3:69:d1:81:87:a8:54:4e:84:cf:27:ed:
64:cc:0e:7b:36:c7:0a:fa:c4:7d:66:7d:76:43:5a:
c0:d3:47:89:a8:df:ef:b0:9a:d8:8e:5d:18:f4:84:
27:d7:27:42:73:09:3f:d4:3e:49:4e:f2:56:22:de:
41:87:ae:23:ff:b6:ed:19:77:42:d0:b8:24:4c:38:
1d:34:ed:03:1e:6a:f2:89:3a:6d:ec:e6:ab:00:4b:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:90:2F:C5:DF:E4:86:44:C9:F5:2D:5B:A2:27:F8:C6:5C:A2:58:F4
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f9:bc:9e:39:7e:1b:ac:02:27:2f:81:f5:5d:19:28:82:68:
b4:83:c2:30:3b:0e:2d:75:06:dc:c7:b3:fc:ea:4d:50:4d:59:
1f:80:f0:25:28:9c:de:83:81:35:eb:90:a5:5d:8e:7e:e9:31:
fc:7a:68:75:48:39:5c:1b:44:02:b9:75:a6:dd:5e:fc:00:eb:
7b:8a:67:01:7b:c7:f5:a5:10:80:68:d9:28:71:de:29:7a:a5:
43:6a:dc:b1:c0:5e:98:d3:c4:99:cd:71:13:16:d0:bc:cc:f9:
b5:6b:b7:7c:d9:4e:66:dc:9f:5e:87:d6:eb:5a:e3:47:87:39:
91:f5:17:5f:d6:58:90:b5:04:b9:09:b8:3d:9c:ec:b6:89:e2:
c8:93:49:1a:4c:1a:0e:01:ff:df:98:1c:ed:58:4c:3a:bf:3b:
4b:ce:31:7c:39:b6:66:a8:fd:78:d4:e4:cb:02:cb:0d:fa:f7:
70:8c:ac:ff:62:2f:aa:25:6c:77:db:7f:bb:40:42:25:c3:98:
e8:9b:af:32:ec:ae:c7:20:3e:1b:69:64:91:0a:44:56:d8:7d:
cf:0c:04:15:5e:d8:1f:c5:a7:b9:82:ce:5e:a2:e9:2d:85:a4:
aa:42:94:00:35:89:df:40:1b:2f:7a:60:94:cf:91:b3:b8:5d:
b1:c0:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:15 2025 by rpki-client