Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: v3jJPcCljO8Geg96P25PY35zEgzfQZAvb3BMj1tAR3Y=
Subject key identifier: C7:C2:DB:AF:5B:4F:2D:06:E1:6C:4F:A4:11:F8:1F:B7:9D:8D:F5:8E
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 0197B7EA724061B22FE3947107F7A584C652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 0520
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: 3M1TxPnQnA1R328Hu_a_wxQuHzg.roa (hash: wZ4I7gpvm8WkSPRAAsw+HtDMICYMh2x7/+qhpYWtEVk=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: jDJdtuqL/klxn40yShGRiL+cARsW9lvq2l6vLKi5Y7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:72:40:61:b2:2f:e3:94:71:07:f7:a5:84:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=c7c2dbaf5b4f2d06e16c4fa411f81fb79d8df58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:27:9b:b2:e4:f6:5a:af:69:d9:3c:2b:ea:
b9:c6:6c:cf:2c:ab:21:a7:42:a7:ce:e4:61:8e:ea:
33:fe:71:30:f5:af:48:78:e9:a6:9b:50:16:76:2e:
23:f9:c5:58:5c:09:d7:88:8b:f8:5a:dd:51:de:14:
db:b6:8c:f1:81:27:23:0f:bd:50:be:df:c2:48:59:
ad:fb:17:e7:00:48:32:a9:ea:d5:7f:ad:86:6e:4b:
6e:6f:15:61:a9:ca:9b:06:07:75:50:a7:da:5b:53:
dd:8c:5c:4c:bf:77:3a:17:43:21:2a:15:a8:22:1f:
c3:44:dd:c3:7f:c1:df:5c:a4:86:b7:25:5c:94:04:
d5:f5:15:eb:80:7e:ab:14:cd:73:1d:43:14:74:bd:
4b:e4:e6:4b:89:c8:47:b7:ea:88:a1:68:8a:0f:e1:
27:94:6d:89:2a:d4:45:b0:96:c6:f3:9d:05:22:b5:
fd:60:d1:72:10:a3:1e:aa:0b:f5:92:8d:34:aa:54:
d7:48:9f:35:d7:3a:09:ac:ef:eb:87:40:37:78:2b:
77:7b:4d:b6:2d:db:3a:dd:ce:83:a8:71:d7:f0:a8:
ac:0d:52:b7:92:1c:56:0d:21:a6:76:72:45:19:29:
16:b5:72:e7:02:a9:38:87:ba:8e:a5:9b:5d:96:3b:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C2:DB:AF:5B:4F:2D:06:E1:6C:4F:A4:11:F8:1F:B7:9D:8D:F5:8E
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2c:c0:7c:9b:82:9f:bb:44:a3:de:56:27:4f:ff:ff:71:a2:
d4:b8:8f:08:83:5b:8a:40:76:d7:a0:14:35:f6:aa:02:f8:4d:
cb:5e:94:48:ff:50:d7:fd:ef:89:6d:04:a9:b9:72:22:eb:4b:
63:49:8f:51:0e:5a:13:fa:7e:f5:7d:f3:fd:dc:a1:c7:c3:4b:
c7:43:96:32:b0:ba:53:84:df:4a:3d:40:e6:d3:25:64:da:9a:
2d:2a:39:7e:37:19:33:fb:54:b1:e5:77:8b:e5:75:fa:ae:9a:
7b:40:83:58:5d:b1:a3:d3:ce:74:2f:82:ed:39:a9:af:0a:5f:
7d:a4:78:91:e6:15:d6:62:82:e5:97:e2:4e:b2:ce:d9:ec:09:
f4:49:8f:bf:fa:fc:c5:cf:4a:9a:28:88:a3:11:70:8e:f4:18:
7c:09:02:88:a1:22:ce:ea:9f:92:14:05:03:c1:2b:a0:21:f9:
b0:96:83:e7:37:bd:28:e6:df:d5:43:42:33:5b:fd:27:b3:23:
50:cb:c0:18:72:15:54:09:45:b9:13:98:64:f5:fd:42:59:0d:
bd:67:97:aa:80:67:8d:4f:d7:32:d1:9f:a5:7f:cd:cd:e7:79:
7b:35:70:74:d8:e4:f6:a3:2c:e0:53:f0:5e:80:c2:a8:01:38:
09:85:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:52 2025 by rpki-client