Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: v+Tjlajlvmb09H9uwJpVLXb0xJ6x+xUoJsreDVpUkoQ=
Subject key identifier: F5:73:99:EA:1D:9A:0B:55:5C:7B:76:25:2A:3E:29:50:A9:9A:01:46
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 0197B77C131FBF9E6A2A20986070444BB6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 0FB0
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: PHtHgmSOY6QlNjsIyECg_KW7ZYU.roa (hash: cSzW9+Tdn6riD70yyykVu3Jxk7SzmVYuL8aIL6ZeXmM=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: TRbwvRhBmpfxCa0rQBzShIws66MGcVaWaDq078ySO3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:13:1f:bf:9e:6a:2a:20:98:60:70:44:4b:b6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=f57399ea1d9a0b555c7b76252a3e2950a99a0146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:54:02:f1:fd:0a:f5:7f:b3:92:e0:7e:90:
f2:82:9c:a5:94:83:cb:e4:b9:06:65:5f:c4:8f:aa:
43:61:ee:ea:d4:da:2d:55:5f:1c:51:c4:fb:d6:39:
65:58:cd:96:d9:4e:c4:b4:81:b2:84:da:3a:67:68:
17:9b:aa:7c:42:45:72:a7:cb:26:8c:49:d4:0c:4c:
28:fc:04:23:cd:08:1b:b9:d3:9f:56:1a:4c:79:2d:
1a:ec:31:ee:cf:93:9e:d0:47:3d:f3:05:bc:05:08:
10:4c:38:d0:25:29:a9:8f:46:02:73:d1:82:66:22:
72:d0:81:e0:11:45:f2:c1:8c:13:c3:b4:0b:ec:c7:
76:ab:6c:ce:de:a9:3c:df:5e:85:ee:39:f1:93:1f:
3a:7b:6e:80:25:7a:3e:b8:b8:ed:19:d3:7d:d1:88:
cf:1b:6f:a4:26:3b:9f:f9:88:d2:0d:a6:fd:a4:e1:
85:3a:47:6e:92:b8:96:48:c9:62:5f:5c:bd:24:4b:
62:4a:16:d9:7b:ab:b4:f7:4e:52:9f:37:82:a1:45:
91:3f:e8:46:70:fc:13:bb:19:13:1a:a6:0e:a8:f8:
ae:8c:5e:75:8a:f3:ba:b6:ac:40:1a:a7:ab:33:a1:
80:d5:3a:d1:19:01:d1:4c:45:29:ea:c3:77:9e:f2:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:73:99:EA:1D:9A:0B:55:5C:7B:76:25:2A:3E:29:50:A9:9A:01:46
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:84:56:89:f3:09:77:62:16:20:a5:98:56:81:3a:31:76:
bf:49:e7:f8:f5:11:f8:96:01:da:dc:42:1b:86:48:3a:b8:88:
1e:c2:64:99:31:ac:cb:5d:3f:2d:87:2f:2a:b3:92:31:79:7f:
7d:9f:1f:56:4f:87:e5:86:96:44:55:b1:ec:25:72:f8:99:80:
3c:91:10:5b:dc:29:3e:a2:12:40:89:5d:9a:64:71:fd:59:de:
ca:a6:cd:d7:fb:c6:c2:46:27:1c:2c:4f:64:11:c1:ba:0a:bb:
b4:7c:27:0e:05:2b:d8:c8:ca:bb:ae:ef:a4:62:80:8d:58:52:
55:77:58:ac:25:53:a3:d1:60:7f:22:99:ae:29:df:8d:72:a7:
26:01:0f:e2:81:bc:80:ea:22:87:2e:dd:da:91:e4:12:10:59:
d0:ab:9e:ba:18:51:7d:78:0d:62:55:fd:cb:f1:15:8a:0a:92:
ca:a7:03:10:f5:76:f2:54:73:c4:99:f9:ea:06:a8:49:86:cb:
71:79:18:1d:77:13:03:6b:0c:5c:17:a3:28:61:56:8a:c6:9c:
8b:12:3c:f2:84:1a:46:c7:67:9b:5b:21:5a:66:b3:1b:c3:39:
77:e2:88:2f:37:99:eb:72:8b:c4:a8:67:dc:c8:42:0d:f2:c7:
9f:d2:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:53 2025 by rpki-client