Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: 0G+MOgQJ3wzyA5KoFnPXeknyNYVi1UD+6itG488DoY4=
Subject key identifier: 31:0C:2D:A3:D3:1F:60:72:76:D0:18:D1:51:8E:4A:FB:97:12:18:2D
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 0196C2A6E109AAC171E7098B32B16C70C99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 04A1
Signing time: Mon 12 May 2025 04:00:38 +0000
Manifest this update: Mon 12 May 2025 04:00:38 +0000
Manifest next update: Tue 13 May 2025 04:00:38 +0000
Files and hashes: 1: 3M1TxPnQnA1R328Hu_a_wxQuHzg.roa (hash: wZ4I7gpvm8WkSPRAAsw+HtDMICYMh2x7/+qhpYWtEVk=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: RteHKhpP9RERRHtzjLQR1Dk8GmWDMyRlquHOjFAvCRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:e1:09:aa:c1:71:e7:09:8b:32:b1:6c:70:c9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: May 12 04:00:38 2025 GMT
Not After : May 13 04:00:38 2025 GMT
Subject: CN=310c2da3d31f607276d018d1518e4afb9712182d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:a6:19:5e:3f:f5:85:62:8b:1c:ac:b3:12:
6a:bd:6f:da:de:8d:6b:0d:f4:ce:18:f4:8a:7f:5f:
a2:44:d1:09:aa:3c:ea:6f:2f:4e:73:28:79:33:c6:
1e:48:07:b2:da:c9:0c:5c:6b:29:cc:7b:e9:19:f4:
9d:ef:c5:17:97:70:6e:36:4b:81:ad:4c:10:24:ee:
4f:f4:95:9f:b1:cc:a3:2f:21:c4:48:de:18:2a:d4:
06:bb:5f:c5:51:6d:9c:5f:35:76:86:13:39:3a:2d:
e2:be:15:f2:cb:33:a9:6a:4f:cd:2e:02:c1:96:0f:
b8:39:90:c7:fd:e0:f2:4e:40:0d:e1:2e:f9:b1:b0:
2e:de:5e:08:49:68:bb:2f:03:9f:ca:67:76:4a:15:
c0:5a:d7:bb:2a:a5:6d:b9:d0:5d:3c:6e:24:2c:c0:
4c:ec:2e:d5:4b:e7:8c:04:97:57:3a:57:3c:ac:e9:
fe:53:b5:3d:86:76:27:48:e4:64:a3:df:bd:46:59:
b3:03:a4:81:74:a6:f8:04:1a:99:80:32:df:80:4a:
56:7f:f0:f9:59:ee:00:e3:be:f5:01:76:f7:3b:f0:
61:48:93:fd:ac:0d:5a:3c:37:99:6d:3e:8e:f7:1d:
06:a2:4f:7e:6c:0e:1f:2c:75:58:a2:6e:d4:d2:1c:
a1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0C:2D:A3:D3:1F:60:72:76:D0:18:D1:51:8E:4A:FB:97:12:18:2D
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a9:ad:df:71:7a:88:5a:c5:f4:70:b1:7d:e0:f7:96:1d:ad:
13:9a:7f:14:92:82:9b:cc:b1:ee:6f:50:6b:85:4b:12:b1:e6:
5c:d1:1b:15:be:c6:3c:46:47:87:53:04:9a:4a:6f:c7:56:c0:
36:34:e4:80:aa:f9:e1:47:ca:7d:b8:33:77:ee:d5:0b:0e:9e:
01:6f:a4:7a:29:48:2d:d8:d8:e2:dd:93:3d:ea:3c:3d:3e:70:
85:af:c5:d4:2d:d0:5f:4f:b0:dd:5a:c7:b2:0b:73:71:58:2c:
e6:bd:9c:3a:44:d2:f4:5e:56:29:df:c6:c5:d1:2a:f7:a6:d9:
43:2a:6e:d7:ba:ca:ee:59:ec:12:2c:8b:81:e1:22:3b:0b:d4:
16:b6:33:05:af:dc:7a:13:45:6e:b6:ae:95:08:db:c5:de:9d:
9c:06:ed:46:03:44:ca:3b:8c:8b:7e:b0:17:14:a5:22:f8:9c:
4e:be:48:b1:91:4c:fb:1b:41:5f:48:3b:c5:5f:f7:e8:5c:e0:
d6:94:54:2d:05:ee:96:22:f3:02:98:cd:e1:2d:3a:2f:9e:b9:
a6:12:05:06:be:4f:0f:fd:4e:b9:8c:82:ab:e9:fd:fa:02:e2:
36:e5:77:9e:0f:2e:f2:e9:ec:e7:90:f6:5e:2b:0f:9c:85:dc:
f1:28:31:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:19:39 2025 by rpki-client