Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: 33ym2vVqfcMoJ/YAsZ09yB5b/7MLsqPTPdipQF6VCSE=
Subject key identifier: 42:04:F3:AA:BD:DC:77:2F:FE:26:BF:51:47:F1:D6:63:6C:B5:EF:56
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 0196A2403D57E2581F10802E0FE480CB38A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 11DA
Signing time: Mon 05 May 2025 21:00:41 +0000
Manifest this update: Mon 05 May 2025 21:00:41 +0000
Manifest next update: Tue 06 May 2025 21:00:41 +0000
Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: BuOMwLMIndIOjf7fZOdGZjfIP9A2EdQV+jTKXmuUM4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:3d:57:e2:58:1f:10:80:2e:0f:e4:80:cb:38:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: May 5 21:00:41 2025 GMT
Not After : May 6 21:00:41 2025 GMT
Subject: CN=4204f3aabddc772ffe26bf5147f1d6636cb5ef56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:16:4d:fa:f6:1f:c7:72:8b:91:35:61:0f:
af:92:fe:1b:92:38:61:67:7d:df:38:2b:0e:3b:45:
9d:1e:83:20:28:f7:7a:5c:3c:9b:e4:5b:ea:06:65:
41:ae:c8:d1:12:ee:39:bb:92:4a:5f:92:72:2e:cf:
c2:11:bf:b3:9f:ad:42:63:ce:3b:af:7a:f6:c2:f2:
79:62:00:82:ed:ec:57:7a:14:69:2f:d6:65:c0:a5:
b6:d0:34:fa:a0:3f:00:8f:c3:28:5f:2e:a1:0a:5e:
f9:64:fb:d7:99:f8:a8:5f:79:78:0a:3c:d7:0d:89:
f4:96:68:53:38:e0:d3:9f:57:eb:80:0c:1e:a6:c4:
22:58:6b:40:77:57:d6:5d:f3:73:24:0f:3e:2b:14:
43:76:f4:67:4d:30:5e:04:60:9b:a2:38:43:df:5b:
46:d9:47:3d:56:93:2f:b5:19:bf:21:2d:35:70:43:
72:9f:c0:f6:50:f1:42:4b:92:9f:79:34:c6:38:e6:
67:9a:ef:e0:15:fd:a8:dc:20:86:26:3e:06:cb:f7:
82:c3:eb:94:9e:c7:e2:6a:88:32:9e:ed:17:b7:ca:
b5:61:ba:40:b2:79:cc:ea:eb:97:41:c3:c6:3f:5e:
58:40:1a:2f:0d:bd:52:4f:77:c2:a0:7a:58:d5:de:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:F3:AA:BD:DC:77:2F:FE:26:BF:51:47:F1:D6:63:6C:B5:EF:56
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c4:95:9b:8c:eb:85:d4:f0:17:55:6d:28:89:40:35:18:8c:
64:31:30:87:9d:90:c9:56:a5:46:49:30:41:4e:fe:cd:b5:51:
2b:e9:b1:f3:27:12:cd:d1:c8:38:79:58:50:93:84:3f:af:8f:
9d:bd:5a:ff:bf:17:d9:f9:55:5f:e3:2a:c0:38:31:28:19:a2:
d1:43:58:c6:4c:8f:d6:4c:12:9d:1c:0c:1a:cd:02:70:b0:f9:
88:cb:a2:69:36:ce:a8:f4:7d:c2:ec:2e:4d:de:73:c1:2e:75:
82:6b:7d:ed:48:02:d3:79:7e:12:7a:d9:1f:38:18:b2:45:02:
7e:12:e2:ab:ff:9e:62:a6:3d:14:b9:88:52:76:47:53:cb:e1:
a7:07:df:ec:21:df:55:2b:20:ad:24:6d:86:0e:c7:1b:7a:7e:
d4:32:ae:18:ba:cd:4d:5a:a3:3c:4b:5f:b1:62:ca:3e:9f:93:
46:ef:ec:4e:b7:17:6c:a0:3d:67:99:f2:36:15:66:ee:99:dd:
0c:80:51:10:42:0c:96:20:0a:c7:db:e9:32:57:ea:45:e7:73:
6c:96:e7:8e:c0:63:43:fb:62:18:e3:f9:c0:5f:70:e8:7e:ba:
54:94:c8:ea:54:cc:1a:04:49:57:27:0f:82:e3:f3:99:56:27:
34:9f:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:35:32 2025 by rpki-client