Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: /2ZYO1PMzbKQO936wonXZ9o1EIlmN4c3v4p/+uUgbCQ=
Subject key identifier: 45:67:86:9B:54:26:98:CC:33:D0:8F:D4:1D:59:87:C8:F7:6A:7B:46
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 0196BE5C725E41136676D1B030C39141ABF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 0F2F
Signing time: Sun 11 May 2025 08:00:51 +0000
Manifest this update: Sun 11 May 2025 08:00:51 +0000
Manifest next update: Mon 12 May 2025 08:00:51 +0000
Files and hashes: 1: PHtHgmSOY6QlNjsIyECg_KW7ZYU.roa (hash: cSzW9+Tdn6riD70yyykVu3Jxk7SzmVYuL8aIL6ZeXmM=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: sHyXyGa9UxGcDvXVQRAyMMV0ojtEAJzC7qRy3UXwy/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:72:5e:41:13:66:76:d1:b0:30:c3:91:41:ab:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: May 11 08:00:51 2025 GMT
Not After : May 12 08:00:51 2025 GMT
Subject: CN=4567869b542698cc33d08fd41d5987c8f76a7b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:7d:f8:b0:96:fd:65:27:60:3e:75:6e:e7:
ec:28:dd:e2:8d:00:2b:bb:78:13:39:74:4f:5d:45:
9a:f7:af:d8:e3:e5:78:2b:6e:f7:ee:f5:6d:b6:27:
01:27:ec:9d:c3:c0:d8:3a:a2:c8:a3:44:28:a4:b9:
8b:29:e6:6d:b1:57:9b:76:14:c8:37:2b:dd:84:f6:
00:44:9c:3e:1c:66:db:c0:69:65:cc:13:10:2c:b7:
fc:54:df:c9:50:c6:b2:16:32:ec:94:a0:cd:2f:b1:
3c:a8:e9:bc:89:78:36:12:f6:31:eb:c8:5e:24:22:
5c:b1:4a:6f:37:7d:db:04:e3:c9:28:7b:29:72:43:
82:32:25:fe:46:40:4b:c1:fd:6f:54:5e:ce:65:47:
aa:b8:30:72:01:f9:26:b6:a8:ea:dc:11:90:21:42:
b0:c4:d9:d6:fb:20:89:a1:35:98:8f:5c:fe:35:19:
1f:90:49:64:78:06:40:29:80:3c:f9:15:d2:53:85:
c4:89:4d:2a:ba:b9:a2:5d:e5:79:68:51:56:ed:ec:
c6:ba:7f:2f:9e:80:ae:1f:d3:a1:e0:32:2a:b0:b5:
0d:f3:b1:ea:48:f2:de:eb:5f:f4:47:44:0b:57:0f:
95:82:b7:86:49:d0:06:f8:86:d7:26:a2:5d:6f:54:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:67:86:9B:54:26:98:CC:33:D0:8F:D4:1D:59:87:C8:F7:6A:7B:46
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e2:a9:f1:1d:55:5a:13:4c:cf:ef:17:43:de:06:d2:e6:7a:
df:b5:c4:7a:30:2d:50:b7:6d:ac:43:f1:29:b1:e6:0d:27:b5:
f5:2d:08:c6:18:6d:9e:39:ed:1a:e9:f5:5f:02:f8:2e:45:97:
04:5f:99:62:81:b4:3c:13:74:a6:93:f0:6e:6e:64:3c:76:65:
54:5b:c0:b3:fa:b0:88:d8:18:e3:2e:38:ae:5d:56:69:c7:c8:
b8:33:25:df:6e:d3:51:7d:76:29:ee:ad:92:7f:53:70:f8:cb:
68:7d:dc:5a:aa:ea:d3:b8:26:3c:a5:3e:a3:a2:77:cb:7b:eb:
3a:2d:3f:42:4a:73:88:66:68:a1:7c:70:b8:07:db:fc:8c:32:
4a:fd:d7:e2:d4:4c:85:38:d8:9e:a5:6f:59:41:5a:c1:50:9d:
73:dd:2e:fe:b9:84:52:7b:6a:40:df:7d:fa:b1:f1:62:1a:42:
3b:86:5e:c1:a2:39:05:17:09:75:c1:19:3d:bc:13:3d:5c:5f:
fd:50:1b:e3:da:7a:2a:91:14:14:b4:90:a3:c3:5b:6f:91:18:
47:cf:e1:f9:7f:61:fd:87:9e:cf:79:8c:5f:56:8f:d5:cd:73:
b8:75:b4:0f:d6:d9:5e:88:e2:0f:96:15:e5:21:65:f1:57:e4:
82:a6:6b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:49:41 2025 by rpki-client