Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: 5PnCheosccJWSTXUd8J1tFIwJFnnc2F8pwEmcQ+d7RI=
Subject key identifier: C6:2B:65:8B:A1:76:AA:2E:9F:8E:C7:A2:B8:FE:98:F5:19:AB:10:50
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 0196C2A6C8C8227C6042346C3A738A732D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 0680
Signing time: Mon 12 May 2025 04:00:32 +0000
Manifest this update: Mon 12 May 2025 04:00:32 +0000
Manifest next update: Tue 13 May 2025 04:00:32 +0000
Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=)
2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: DR0Txihf+mE+WAzbElN2ZNL9R3JJNVjLOTQ9KPoI0n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:c8:c8:22:7c:60:42:34:6c:3a:73:8a:73:2d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: May 12 04:00:32 2025 GMT
Not After : May 13 04:00:32 2025 GMT
Subject: CN=c62b658ba176aa2e9f8ec7a2b8fe98f519ab1050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:db:3b:61:3f:16:6f:d6:26:14:93:d1:b0:
71:f1:08:d8:7a:18:0d:35:16:3a:67:67:be:41:bb:
df:6e:2a:4d:59:26:9a:95:90:60:2f:35:aa:65:37:
8e:ce:a7:22:70:e7:67:e5:73:a7:6c:b5:e7:64:66:
a6:8f:e1:0f:7e:8b:38:1e:a3:27:b4:cf:3a:e8:6c:
26:48:d5:41:ce:82:13:36:0c:5b:af:82:ec:22:96:
90:09:cd:19:28:ff:7f:51:d6:55:10:9b:10:9c:56:
2b:44:de:1b:f5:3d:0f:c5:da:15:1c:47:33:2b:de:
db:90:37:66:e9:21:23:e8:be:c8:31:64:fc:fd:0d:
0d:df:67:9c:9a:78:36:81:79:82:5e:2e:8e:0d:09:
14:f2:a9:06:22:e4:8e:30:c2:d4:20:68:a7:91:b6:
29:16:25:e2:1e:0d:d4:e7:b5:92:6c:09:77:59:1b:
53:ed:63:06:6f:54:13:8e:b6:b0:b4:70:8d:31:8e:
5d:52:4e:64:41:b9:bf:a8:41:4a:1e:9a:f8:e2:7b:
c4:66:b2:18:cf:d9:c5:44:b6:7f:52:be:b1:f5:f8:
d9:14:97:51:f2:b5:fb:45:c0:8b:58:a3:c6:c0:ca:
76:29:be:b7:96:02:35:6e:f4:a8:d2:d9:8a:19:08:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2B:65:8B:A1:76:AA:2E:9F:8E:C7:A2:B8:FE:98:F5:19:AB:10:50
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:83:12:ae:95:41:3e:e8:c7:be:ed:f5:5a:b8:04:a1:9b:27:
a8:12:b4:f9:23:4b:2b:2a:4d:f1:3e:36:bc:b7:60:48:12:03:
b5:1c:41:f8:aa:25:4b:d4:7f:ec:84:42:4b:bf:5b:19:72:f4:
4e:77:89:e8:74:d0:3e:b4:c6:8f:04:b8:02:29:94:58:f2:cf:
03:92:d9:16:a1:0a:99:28:52:48:73:d4:7e:2e:22:71:3f:8d:
bd:46:bf:9d:0f:17:f7:1f:27:82:f7:af:e7:19:56:e3:ce:0f:
65:86:aa:9a:10:9c:ce:48:11:0c:67:87:e6:a8:e6:6b:ef:66:
85:be:4a:e1:28:c1:50:71:dc:fe:8c:18:91:36:06:7b:d9:f8:
65:fa:14:04:3a:98:17:8f:37:7a:75:81:5d:e4:fd:a1:a7:4d:
4e:4a:26:e8:43:cb:ae:56:6d:13:60:79:38:a0:12:a9:ec:1a:
5f:d7:3f:32:83:a0:55:b5:cc:9f:72:e1:41:eb:fa:64:4f:e3:
75:6c:8b:db:56:7b:1b:6f:63:60:d0:db:10:78:33:0f:c1:95:
15:f7:51:46:3f:6e:b1:90:c8:f3:b6:e7:c8:2d:90:b0:fb:10:
3a:c3:0c:b7:62:84:bb:8a:80:89:17:b8:b9:45:82:b1:24:ce:
1f:51:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:44:48 2025 by rpki-client