Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: oOPPe3ZlDh2SunClbJZf4rp5QFsynbwUutYWxXt+ReY=
Subject key identifier: AF:84:75:38:A1:FE:41:1B:49:DB:54:6D:85:31:D6:CD:71:FB:71:60
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 0197B7456529FA855B7BA1A3F8F4B77FC9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0A52
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=)
2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: EWP8/tE1XdZwqw0a08H0qhzYyTlmVVWbZF+CwTUcd6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:65:29:fa:85:5b:7b:a1:a3:f8:f4:b7:7f:c9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=af847538a1fe411b49db546d8531d6cd71fb7160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:9b:da:e7:59:1b:43:2e:69:09:62:b4:44:
39:0b:fe:91:1c:05:53:02:04:eb:20:1a:45:cf:06:
07:6d:e1:d8:26:d6:50:b8:4c:6d:93:dd:61:d2:93:
3c:10:06:03:99:ef:d9:bb:4b:b5:58:d7:4f:89:8f:
be:ca:f4:59:58:69:47:43:a4:d0:6c:de:14:43:ed:
f2:a9:a7:69:b7:b0:ab:a5:86:8d:8c:2d:cb:e6:f5:
54:1f:7e:4d:87:1e:75:1d:9c:28:de:83:7b:a7:09:
0d:71:b5:c4:ae:3e:05:60:74:71:6c:d0:26:9f:e3:
68:cb:2c:35:bd:b2:7a:4d:9a:68:3a:67:e3:14:a5:
6f:68:de:e1:b3:92:5d:d1:ea:92:ad:08:63:7e:2d:
02:64:c6:c4:ef:47:f0:15:40:1d:b1:79:4e:4b:e3:
ed:26:2b:25:59:0c:20:fc:9a:c8:bf:2a:c8:32:11:
4d:1a:6d:ff:91:c6:42:e6:15:42:79:9a:3f:0d:9b:
64:4e:60:6b:8d:86:82:e7:46:5b:05:70:d9:78:f9:
92:a3:dc:80:2f:6d:5c:6b:39:f1:7d:5b:24:da:30:
bc:7b:c9:02:13:69:3a:69:71:8a:6a:9f:1e:1a:ae:
a2:f1:78:7a:ef:9f:98:26:9b:e3:68:02:fc:82:c4:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:75:38:A1:FE:41:1B:49:DB:54:6D:85:31:D6:CD:71:FB:71:60
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ad:a2:aa:8a:c7:58:a8:95:d9:8d:10:14:5f:8a:6d:f6:64:
47:30:23:2a:cb:cc:82:7a:67:0f:6b:3e:2c:71:25:67:5c:8e:
50:5e:59:2e:d2:ff:8e:6e:53:65:46:48:c6:33:c4:e3:9d:d0:
52:e9:37:ea:0c:a2:79:9c:bc:df:69:f4:8e:03:23:7b:97:f3:
a8:5b:c0:92:b2:3f:14:a0:29:97:19:b7:5f:25:45:fb:5f:99:
41:ac:71:c4:72:6e:b6:2a:e8:c2:28:b9:47:8d:6d:dc:28:ea:
1c:69:d8:d1:c9:84:1c:d7:c9:99:03:72:e4:e5:6c:ea:8b:10:
44:a8:12:88:b7:d1:60:02:84:aa:dc:c2:90:bc:6c:4d:0c:84:
57:9b:4d:8c:20:58:8f:3a:44:0e:19:30:b8:fa:59:52:d7:7c:
eb:17:c9:0e:66:c7:bf:4c:6f:16:b3:86:cc:c7:28:11:4f:f7:
2c:24:7b:fd:ff:1f:28:a6:73:3e:ab:f4:25:95:6f:43:24:a5:
3b:ec:99:7b:48:41:8f:82:de:69:3e:9a:91:de:f8:be:5b:0e:
a3:6c:e7:fd:da:39:1a:82:3b:ff:cc:78:d7:bd:91:8f:45:fe:
7d:87:d8:4b:b5:02:e9:b6:01:75:c9:f7:ce:c2:29:85:fb:58:
42:bf:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:52 2025 by rpki-client