Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File: T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier: avjhKdUUm9hZE+9QT8Bi61iOf+oNxyUNiB5sWmrYHxE=
Subject key identifier: 82:08:A6:CA:64:26:38:57:C6:FC:1E:FF:BE:13:AB:EC:6D:BF:C1:85
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial: 01969E2C161107E748EBF646F8D9B23D1646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number: 04C6
Signing time: Mon 05 May 2025 02:00:11 +0000
Manifest this update: Mon 05 May 2025 02:00:11 +0000
Manifest next update: Tue 06 May 2025 02:00:11 +0000
Files and hashes: 1: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: ZSjeUr5GCmQQyJIVtq7/bhBgVMM2nF7MRkA+drHXsTw=)
2: q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa (hash: ol9vwFP2kye7kweAuJ86LI17vpYzbBP1gC/LI4vVUEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:16:11:07:e7:48:eb:f6:46:f8:d9:b2:3d:16:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Validity
Not Before: May 5 02:00:11 2025 GMT
Not After : May 6 02:00:11 2025 GMT
Subject: CN=8208a6ca64263857c6fc1effbe13abec6dbfc185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:89:f4:db:5d:9b:d5:cb:49:2e:21:a5:73:
1d:b6:8d:34:39:49:67:a5:75:5a:cd:fe:9e:cd:20:
80:3f:5d:4e:44:f7:f3:8c:4c:7c:9d:5c:f3:a6:20:
ca:57:c7:3e:e7:75:b5:af:10:44:c9:46:72:ae:5d:
92:ed:d1:9f:8b:7a:dd:cf:e1:d2:25:a8:67:68:e1:
60:83:93:18:0b:ed:51:b8:4e:9f:9c:99:d2:17:70:
d4:d4:66:73:f2:6a:47:55:cb:d7:12:26:97:cf:40:
7d:ac:d1:d8:14:1f:f5:60:b3:41:0f:0c:97:d8:13:
6b:6a:92:43:af:4b:9c:d2:8c:47:3d:64:ae:6d:a9:
63:6b:93:f9:6e:ce:87:85:32:af:be:ee:a2:00:45:
73:2c:72:f8:8c:ab:c3:65:ac:b8:9d:cd:40:00:ee:
9e:21:34:7b:5f:af:82:d1:df:32:be:15:ad:9c:6c:
62:48:c8:c4:82:1e:9b:25:46:8f:df:12:79:5f:46:
01:11:5f:1b:c5:52:10:0a:f9:73:de:3b:04:9c:01:
6a:aa:36:89:38:be:94:00:f3:c0:17:4f:6f:c8:ce:
93:85:9a:7d:48:3a:42:15:21:0d:9a:db:d9:12:a7:
77:6a:1c:fe:39:06:64:34:dc:cb:3e:20:59:5d:ee:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:08:A6:CA:64:26:38:57:C6:FC:1E:FF:BE:13:AB:EC:6D:BF:C1:85
X509v3 Authority Key Identifier:
keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7f:a6:63:3d:82:44:fe:cb:30:da:3d:2e:45:2c:64:f6:43:
38:e1:dc:d5:13:06:78:ea:0b:d3:0d:52:82:4f:08:e2:87:69:
e3:9a:b1:de:c1:a6:c2:0d:14:a5:7e:28:48:0b:2d:46:02:b3:
cd:19:ae:3e:4d:be:81:e8:04:eb:72:25:eb:dc:86:4f:75:ce:
6e:50:63:bf:b8:2a:ab:02:5c:ac:91:ee:0b:ab:15:06:f7:e5:
53:ee:70:f3:ad:39:1e:02:63:e1:29:26:63:3c:7d:b5:0d:7a:
b4:82:bf:7d:96:e6:a3:ca:a0:67:31:ca:0e:a6:35:9c:dc:fe:
a5:0b:03:43:7a:ad:be:4d:da:40:be:8f:44:09:cb:09:7a:9f:
61:d3:61:ca:f6:0a:f7:48:96:90:27:75:45:fb:de:bf:6f:fd:
1f:8b:a1:0c:0d:de:4a:10:71:47:f0:63:dd:c0:a5:4a:96:61:
e4:50:b3:a5:1f:b2:c6:07:c4:ca:f8:cf:67:f1:87:4d:00:8d:
f3:dc:e8:4d:64:4a:2a:b6:5c:27:50:a7:a9:3b:64:fd:9c:fd:
91:a5:77:a0:5d:3f:7a:8d:e2:bd:14:a2:24:e4:42:c2:c2:4f:
aa:90:5d:c5:88:49:3d:f7:12:df:49:40:c9:50:04:4c:89:a0:
df:c5:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:31:58 2025 by rpki-client