Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier: TsO3Aef1RMuQ+m8ijazwfJOIgmyAvcMIVBAu0SmDRBc=
Subject key identifier: 8F:86:2B:24:FB:0E:F8:3F:5F:3E:C6:45:ED:4F:21:8C:B6:14:95:CF
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 0197B7453DA81F0F4F572A33F7DC2BDDD7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number: 1296
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: NwaNp5L0RusVDFFM4pIExblfTEU.roa (hash: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=)
2: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: vJrOk5ILVPg2WjMpwSR2o0UXpEERPsvB8MfbYnkpkP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3d:a8:1f:0f:4f:57:2a:33:f7:dc:2b:dd:d7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=8f862b24fb0ef83f5f3ec645ed4f218cb61495cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:e0:24:4c:9f:ed:aa:88:f7:93:06:57:6b:
92:f8:43:c3:63:71:28:04:d5:29:fa:55:e7:e1:bd:
1e:d3:2d:b0:7c:89:6d:ba:d1:bb:93:11:e3:30:c5:
67:9e:2c:09:65:0e:81:36:5b:4a:22:22:2f:64:a7:
7e:ee:94:1b:6d:c6:e3:75:86:d1:ad:0b:77:ba:7c:
28:f7:dc:71:c2:cb:72:8e:47:b6:13:0c:13:27:ef:
c2:62:6e:f6:68:85:62:87:6d:71:d7:96:07:1b:c9:
84:bd:e3:f1:3e:49:2d:6b:a5:e9:7a:3f:b6:64:5a:
41:d9:07:d2:36:c5:21:f3:b2:bb:ae:25:b2:ff:11:
52:5d:e5:a4:55:08:a4:f8:64:6a:dd:f2:b3:28:d3:
9b:7f:9a:c6:6f:d5:cf:45:dd:6b:30:7f:f1:60:e9:
da:71:2b:f8:94:85:98:47:43:06:05:48:bc:e5:73:
ae:11:dc:f2:ed:a6:73:4a:1b:60:5f:7e:81:bd:7d:
cb:3a:9a:0d:6a:9c:7c:0e:ba:53:e8:ad:2f:b7:82:
53:fa:d4:e4:52:ba:81:bd:4d:7c:06:88:63:e3:25:
5d:1d:07:c7:13:99:70:76:85:8b:59:cc:a0:47:dc:
90:c7:02:dd:43:ad:64:4b:e7:ab:76:75:fd:e3:3c:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:86:2B:24:FB:0E:F8:3F:5F:3E:C6:45:ED:4F:21:8C:B6:14:95:CF
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9f:b2:e1:6a:40:c1:11:cd:bc:b2:4b:27:99:75:f1:48:9a:
90:bb:20:15:a2:d3:d5:1a:e8:5e:b0:5f:73:36:b1:48:94:0d:
e5:8f:a7:65:fb:4d:bd:21:29:0d:90:75:5f:cf:bc:e6:23:a4:
be:2d:9f:d4:9e:6f:f8:3a:60:64:f3:63:e6:67:64:62:f9:69:
2a:97:8a:c1:a1:ae:5c:59:6e:6f:e1:eb:6f:ac:b6:d8:f7:5c:
43:55:8d:4f:1d:83:33:7a:ec:b1:3b:ba:f8:52:cf:e6:0a:00:
0f:7b:2b:b5:dc:c6:32:b6:91:db:63:7f:d6:2d:d3:c0:fc:5c:
8f:9b:ab:de:a9:58:50:ec:a8:b5:d6:39:3c:0f:1b:de:ae:06:
f8:62:d3:99:66:eb:40:44:11:32:d7:c1:a7:bd:74:28:4e:ff:
41:3c:90:f0:0a:59:57:5b:67:31:0c:24:c5:c9:cc:60:30:87:
fa:c8:44:c0:5a:8a:77:36:8e:cd:4d:88:ca:08:74:26:e5:4b:
a9:35:5a:46:48:d6:28:8a:ec:a6:6d:c9:5c:3e:c8:1d:dd:aa:
5b:10:26:f3:71:86:9a:8a:b0:dd:85:33:27:c8:f2:be:ce:02:
ea:7c:f9:c6:78:5e:b0:38:d3:82:ce:44:98:05:74:6a:92:e5:
2b:b5:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:38 2025 by rpki-client