Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier: 7nFGvQ2xZE8rejyyxwT55/EBzt+7rIJCzLl4oT0Ag/Y=
Subject key identifier: FB:1E:C5:17:A2:8A:B1:09:67:69:55:CA:FD:98:A4:E3:84:92:A6:A9
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 01969F3F237D42DA89821E183D9AD58C49D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number: 1205
Signing time: Mon 05 May 2025 07:00:37 +0000
Manifest this update: Mon 05 May 2025 07:00:37 +0000
Manifest next update: Tue 06 May 2025 07:00:37 +0000
Files and hashes: 1: NwaNp5L0RusVDFFM4pIExblfTEU.roa (hash: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=)
2: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: cV3nlV+VFfJUhXIt+ksvVVgltf9UGjFDN8L9izCBUtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:23:7d:42:da:89:82:1e:18:3d:9a:d5:8c:49:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: May 5 07:00:37 2025 GMT
Not After : May 6 07:00:37 2025 GMT
Subject: CN=fb1ec517a28ab109676955cafd98a4e38492a6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:97:7c:41:d2:37:b4:ed:63:0a:d4:b9:92:9d:
ea:98:54:69:e0:14:ec:12:a3:c0:62:88:01:52:6c:
fd:a6:6c:cd:c4:5c:49:69:2b:c6:49:d1:b9:9c:42:
d3:95:cf:f9:35:95:39:1d:19:81:57:ea:5b:7e:72:
00:c6:92:aa:bd:e3:40:9b:98:02:9f:32:30:fe:49:
45:32:46:f9:6e:0c:28:c2:2f:af:b1:9c:89:f1:7f:
69:ae:03:48:1e:ac:13:37:e1:46:21:99:cb:ea:00:
eb:7a:de:e5:e3:76:ca:70:23:35:0e:93:28:bf:c9:
a8:73:e8:74:fd:56:7b:12:f8:59:78:64:e7:3b:09:
29:3d:fb:3d:cf:45:6c:28:bd:20:71:9b:9d:7d:04:
01:65:26:99:42:34:fb:86:1a:d4:66:c3:f5:24:d1:
29:d2:54:db:44:7e:c4:37:3f:f8:e1:04:8d:11:66:
23:35:d1:f9:00:ff:cb:b6:bc:66:f8:09:12:56:c0:
f2:38:bf:91:ba:bc:81:67:8d:71:6e:a0:ec:95:6d:
84:b3:8a:96:4b:0d:80:c2:5e:05:f9:a1:af:11:2a:
5f:8a:84:3b:ae:ff:b8:9d:b3:86:1f:02:7e:ad:21:
b5:25:93:5e:51:2c:6c:28:93:d9:71:9a:b0:87:e6:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1E:C5:17:A2:8A:B1:09:67:69:55:CA:FD:98:A4:E3:84:92:A6:A9
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:ae:c5:27:d4:5a:77:cb:f3:c8:57:ca:00:ac:b5:57:e1:c9:
9c:d4:8a:9e:eb:1f:14:38:65:86:f0:ae:1c:2c:74:fa:30:42:
72:3f:34:f9:e8:ff:9c:e8:62:6f:69:36:5c:05:e5:35:70:ec:
ab:23:0d:c9:5b:97:9e:a7:59:2c:06:6a:aa:54:1e:48:68:45:
77:cf:d2:07:da:f8:11:e7:e1:2d:7f:f0:a0:0b:7a:65:43:f9:
d2:9d:99:d6:9d:1e:b0:f8:97:56:6c:b6:9d:eb:12:9f:46:40:
3b:36:8c:73:a5:32:20:2d:cd:df:2e:11:35:e3:23:4e:bd:4d:
48:b0:4e:d4:8b:fe:e2:89:f3:06:71:45:6e:00:89:ab:fd:af:
12:d5:3f:9a:c4:ee:11:95:7f:94:fc:9a:bb:c5:a9:6f:e1:df:
c3:60:e2:8d:3a:8b:f5:30:11:be:22:33:8a:01:b0:97:6d:41:
f0:51:2a:d9:e2:4e:09:55:9d:92:41:83:5e:fc:0d:54:72:e8:
e9:b7:0d:42:9d:58:2e:5d:df:c9:20:9a:4f:ce:e0:e8:be:35:
85:80:c4:8a:29:a5:ed:6a:41:4f:0e:1f:3f:cc:bd:dd:05:d9:
76:0a:95:9c:9a:c5:48:c1:89:5a:9c:b5:d9:3b:33:2a:a7:26:
8a:3e:44:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:18:27 2025 by rpki-client