Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File: T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier: ll+HGMtquWX7DavlLQAma7hpjrYhAHc3BfCnP5dizI4=
Subject key identifier: 12:4D:58:AC:D4:21:D5:2B:3D:B9:51:AB:32:7D:94:EB:F8:E4:44:CD
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial: 0197B745196C296792EBBFB931D6C155BFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number: 0128
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: MtCu6sFrD1432kk0IRfc5KNTGfc.roa (hash: mq6V3hOgU2VesW7dh8aKsr7RVyaB9UHKkJnet/uS01g=)
2: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: eyLsgoaF8+wNppBvNSVGEN3p193s0UjcWRUXmuDlA6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:19:6c:29:67:92:eb:bf:b9:31:d6:c1:55:bf:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=124d58acd421d52b3db951ab327d94ebf8e444cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:e2:6c:2f:76:51:3f:95:7f:7e:03:83:55:
1d:2a:35:62:c9:48:ff:04:99:f3:03:6d:66:b9:01:
ba:2d:b0:b5:77:d7:ed:ab:d9:bb:63:cc:3a:92:3b:
ab:c5:92:7f:96:82:81:97:94:55:bd:9f:c0:c2:bb:
a5:4f:17:db:a2:91:f7:2b:e4:6b:cc:49:98:a2:8d:
3f:82:7d:64:c3:7c:07:17:09:11:ca:b8:33:d4:ee:
34:7d:59:8a:06:7d:b8:c2:17:0a:68:17:d2:72:2f:
2b:2b:9a:3e:11:2f:1d:81:53:74:9e:45:2d:f4:95:
ed:40:8a:b2:2c:43:3c:71:44:ad:22:8c:fe:2b:4e:
4a:f6:d5:4b:89:5c:66:5f:ed:0f:9a:62:8e:10:46:
cd:79:f9:97:ec:8b:04:0e:17:fd:a4:df:2b:77:7c:
b1:8e:46:9d:bc:fb:4c:9a:5c:aa:30:3e:5b:4f:8f:
01:d8:b4:4b:d3:3c:0c:dd:2d:ae:14:99:aa:76:e6:
96:d0:79:4a:46:5c:7c:f6:70:b4:27:f0:3b:d7:8e:
87:19:55:f2:f1:6f:13:ba:7a:fb:2e:9c:44:2c:1b:
9a:7e:de:bd:d8:77:07:c4:25:79:30:9d:28:ad:ef:
b7:43:7f:8c:5f:c8:6f:c2:f9:c0:e4:14:1c:98:1b:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4D:58:AC:D4:21:D5:2B:3D:B9:51:AB:32:7D:94:EB:F8:E4:44:CD
X509v3 Authority Key Identifier:
keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:25:1e:65:f8:02:55:29:9a:5d:83:94:81:30:72:88:73:58:
25:e3:a6:50:8d:13:8d:c2:8b:ad:9f:44:ec:9c:4e:65:8d:f1:
32:13:4d:e6:fd:7b:79:71:a7:33:68:ed:4d:b6:9a:4d:bb:3c:
0d:6d:d2:99:90:17:93:25:28:bd:41:f5:6f:cb:3e:28:2e:d8:
a3:1b:6f:e6:8c:05:bd:d5:63:6c:81:65:1c:34:23:d9:8a:4d:
ee:5d:fc:d6:52:6a:a9:b8:f4:24:76:2c:e2:a3:84:24:6e:98:
8c:70:18:07:08:46:08:11:e6:2b:d3:9e:d8:39:73:80:3f:03:
30:54:b9:58:c6:ae:e8:d4:ae:d8:db:16:00:f6:fe:47:f7:5c:
ad:7f:d2:5c:38:6e:5f:10:3e:47:15:fe:6b:31:c6:6a:5b:17:
44:ae:a8:02:d5:ac:3e:7a:5d:07:c8:f9:62:47:0b:38:90:5e:
18:6e:97:62:9e:68:32:11:cf:69:0c:20:86:c6:5f:97:1a:46:
7d:90:0e:ae:7a:02:ff:70:37:c9:25:a8:a6:40:c4:01:6e:6f:
d0:34:a1:87:e4:93:fc:22:38:c8:b3:c6:bf:c5:e1:c3:cc:29:
0d:83:74:fa:70:27:fb:86:c2:5a:57:44:e1:af:19:31:0b:9e:
4e:14:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:33 2025 by rpki-client