Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier: 2pe09eYxjDjGrc0S7b/1pgk8hrY4bN+cvBtX8wkBdNo=
Subject key identifier: C4:24:2D:FE:83:7E:79:8C:6D:9C:95:62:D2:E8:1F:07:20:3C:8A:15
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 0196B891601C5A85F31E232375658E4DEE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 05:00:57 +0000
Manifest this update: Sat 10 May 2025 05:00:57 +0000
Manifest next update: Sun 11 May 2025 05:00:57 +0000
Files and hashes: 1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: xp0acG8kUs4D6yZwgVWyIJ0wuKxaH9yiXwqMT3MDXm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:60:1c:5a:85:f3:1e:23:23:75:65:8e:4d:ee:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: May 10 05:00:57 2025 GMT
Not After : May 11 05:00:57 2025 GMT
Subject: CN=c4242dfe837e798c6d9c9562d2e81f07203c8a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:8a:79:43:5e:af:c5:38:23:a8:17:e1:76:
9b:8a:0e:cc:c1:e0:b6:a7:fc:d3:b0:6e:01:57:25:
0f:29:61:6a:ac:ed:1d:1a:d1:31:d9:a0:52:f1:a0:
fc:72:02:1e:98:1f:19:27:62:54:90:53:cd:e7:5f:
71:e1:86:cf:24:6d:7d:06:31:b5:89:93:c1:5c:aa:
27:1d:12:d9:54:a9:d5:a1:21:50:64:dd:b9:16:e5:
1b:72:e4:6d:b7:08:50:30:fa:c2:97:90:25:6f:af:
7f:7b:5a:89:59:3f:08:66:ba:46:3c:8d:44:12:b4:
79:ef:c1:0e:ad:01:75:86:64:fe:dd:d1:38:48:14:
ae:23:df:65:4c:87:84:81:1a:07:5e:95:99:74:df:
8a:6e:b7:07:ed:22:4f:c9:ee:5e:e8:a3:16:7a:21:
1a:f7:31:55:b3:d0:58:0c:d5:6a:65:44:69:9a:07:
84:75:fe:f3:8a:c4:8e:fe:21:38:3f:ee:04:55:40:
1e:ec:da:82:8b:f4:10:3d:05:19:d3:09:bd:5e:7a:
64:ee:a7:c2:3a:25:e8:c0:ea:d8:de:0a:79:8a:00:
29:14:b0:84:69:f0:f1:c7:1f:7e:4d:40:a2:bc:ca:
47:46:cf:35:19:4b:97:3b:b4:ac:6e:9b:45:97:a6:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:24:2D:FE:83:7E:79:8C:6D:9C:95:62:D2:E8:1F:07:20:3C:8A:15
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:df:26:6b:b2:38:23:c6:f8:12:83:e9:41:d7:af:21:20:73:
0c:05:0a:0f:38:50:01:99:36:8e:46:4c:af:47:a6:ea:ae:b8:
b7:6c:3b:53:71:64:8c:0e:15:03:65:24:2a:83:b5:4c:dc:65:
0f:3d:a8:57:ea:f1:70:4e:7d:78:ac:17:97:b9:98:de:4f:27:
9b:2b:bc:28:cb:9a:07:92:88:54:b6:28:36:b4:0f:83:3a:b4:
48:bb:6d:72:59:9e:1e:d5:7e:b4:2e:ae:36:4a:31:f4:66:6c:
95:7c:60:0c:16:c3:2e:65:e5:b6:36:5f:61:32:ab:03:d7:48:
20:51:33:0f:5c:56:f8:29:e8:85:92:bd:16:36:9d:5b:ef:59:
b7:18:6f:82:2c:4a:da:b9:87:75:c1:2c:9d:7b:0f:ad:92:4d:
34:84:54:4b:aa:30:36:5f:22:7d:26:61:0e:64:7d:d8:21:1d:
67:da:92:f4:86:9c:65:10:e8:8d:9f:e1:8d:e0:27:88:27:df:
44:f7:dd:d7:b1:5d:c3:17:ff:15:fd:16:22:8a:97:a9:80:48:
1a:cb:7f:3e:a7:75:5d:76:f8:18:7d:25:4b:8b:0d:2e:54:14:
21:46:74:7e:2c:ae:f5:22:da:31:a7:eb:c7:3f:03:9a:5f:7c:
12:3e:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:10:21 2025 by rpki-client