Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: W0zEnIrM+QacGaZ9Sb8N6onBJxxYQY9IzVDHHV3EkC0=
Subject key identifier: 4B:C5:34:0A:28:B2:E7:0B:D8:C6:F1:D1:5D:8C:98:4C:CA:A4:3C:F0
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 0197B7EAA14B204541F36E0DC55EC4A10EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 06FF
Signing time: Sat 28 Jun 2025 19:01:36 +0000
Manifest this update: Sat 28 Jun 2025 19:01:36 +0000
Manifest next update: Sun 29 Jun 2025 19:01:36 +0000
Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=)
2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: /RTBv2m9r25Z+gdvJkHa9avckSw9uWXElRewYHpQY1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a1:4b:20:45:41:f3:6e:0d:c5:5e:c4:a1:0e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Jun 28 19:01:36 2025 GMT
Not After : Jun 29 19:01:36 2025 GMT
Subject: CN=4bc5340a28b2e70bd8c6f1d15d8c984ccaa43cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:02:5c:73:16:e6:f5:28:85:15:e5:26:e3:
9e:d5:1f:70:4c:31:68:40:6d:db:61:86:1c:ee:43:
84:ff:d1:15:aa:58:65:50:7a:8d:1f:95:ee:6e:8e:
23:52:12:2a:f8:9f:a9:64:14:77:e2:4f:3b:3e:b8:
30:9a:74:70:4d:ef:5a:14:13:74:d4:99:dd:a7:fc:
ee:6b:2e:61:8e:52:e2:c2:36:ca:8e:04:dc:2b:f8:
3f:4f:7b:41:95:0e:f7:0b:81:f7:c2:69:31:27:3d:
c9:8a:10:d8:4f:64:ae:a5:a3:f7:cd:e2:e0:fa:9d:
c9:76:33:e9:9f:24:c2:b9:a5:24:8a:32:4c:b9:6e:
ae:39:48:7a:b3:e2:5d:db:25:86:d4:47:4a:3b:74:
f1:b3:61:40:0f:c7:02:62:a8:93:76:67:70:5b:ba:
2e:50:40:c0:0d:12:ca:c1:83:7f:e6:60:06:e3:38:
30:df:c5:cd:45:7e:34:fb:51:0a:b0:8d:25:f9:bd:
d0:d8:01:50:27:21:03:89:f3:f4:5f:ca:26:5c:0f:
85:7e:b1:56:7a:bf:cf:55:06:16:02:33:67:5b:7e:
eb:7d:d3:de:98:a8:31:27:8d:14:9b:21:7d:2a:27:
67:7e:a0:88:15:e6:97:39:3a:b1:c2:20:b5:bb:05:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:34:0A:28:B2:E7:0B:D8:C6:F1:D1:5D:8C:98:4C:CA:A4:3C:F0
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:42:e8:ef:f1:e5:2f:39:f6:22:da:bf:01:eb:bc:d7:27:7c:
e7:ac:5b:96:da:5b:d6:62:6b:ab:03:2e:04:65:bf:ba:8a:cc:
01:bc:ba:78:f6:b6:f9:25:51:62:94:5c:ac:7e:98:ce:54:0f:
a5:b4:21:a2:ae:c0:8d:1b:cb:a2:ff:c1:ee:2e:db:fe:2d:f1:
fb:8a:ac:cc:d1:65:c4:2f:31:04:58:b5:be:66:f8:dc:e6:2c:
ff:a0:b2:2d:da:c4:7e:08:06:c3:a3:20:9a:49:18:5e:4a:fb:
b4:fc:b0:0a:ac:88:83:1e:3f:38:93:96:fb:43:ee:c9:e9:6b:
d3:dd:c8:76:97:69:5e:8a:e6:43:fe:7c:30:0b:6c:06:bf:7d:
2e:a1:aa:d6:00:19:b4:c1:aa:c1:6f:de:9f:c9:cd:ec:6d:77:
46:68:90:aa:bb:03:23:bc:79:fa:f8:05:3b:62:8d:22:64:2e:
0e:f3:a5:2b:bf:bf:58:ad:dc:35:52:b3:34:f8:5f:0b:b5:f2:
f0:bf:10:89:42:15:71:bd:05:b9:96:45:5f:da:54:07:72:4e:
f7:f1:bb:8d:a0:98:64:4f:4f:3a:85:07:d9:e9:7c:84:ae:b8:
1a:ef:d6:c1:64:87:8f:06:1c:71:73:d9:b7:2a:68:a1:56:24:
a8:9d:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:29 2025 by rpki-client