Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: AGW7nsN9thNDSciYzBdTRPgLRe576z7snPZeKLjy77g=
Subject key identifier: 53:52:62:AD:D1:7E:60:64:BC:09:15:AB:57:E1:D7:58:ED:03:90:9F
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 0197B890575D0DB364A0B0CED509800EAF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 0377
Signing time: Sat 28 Jun 2025 22:02:36 +0000
Manifest this update: Sat 28 Jun 2025 22:02:36 +0000
Manifest next update: Sun 29 Jun 2025 22:02:36 +0000
Files and hashes: 1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=)
2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: ZRJ1XKYjuf0RNTel0F+L1vldUaRASZBA5j/VR6TrSqI=)
3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:57:5d:0d:b3:64:a0:b0:ce:d5:09:80:0e:af:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Jun 28 22:02:36 2025 GMT
Not After : Jun 29 22:02:36 2025 GMT
Subject: CN=535262add17e6064bc0915ab57e1d758ed03909f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:6a:18:74:a5:85:ac:ee:90:91:7f:96:8b:
46:9b:1e:24:2d:13:b0:6b:7f:eb:31:a0:3b:a5:cb:
ca:8e:71:27:30:2a:61:ab:2b:72:22:74:5b:1c:de:
91:d4:21:1f:53:17:0e:f4:f5:b0:7c:e0:39:e9:b4:
26:47:74:86:8d:ec:fb:5f:b5:8d:36:5a:bb:74:19:
64:e3:99:a6:0a:a5:45:de:d9:a8:fa:2e:c8:a7:bc:
07:0e:30:62:e2:31:0f:52:b2:42:d6:7f:54:de:ef:
7b:c7:66:dc:06:ac:0c:cb:29:0f:c0:41:a4:93:61:
10:4f:86:d1:5e:b7:3f:34:4b:bc:5c:a1:cb:3b:96:
1a:73:e4:63:bb:b8:f9:2b:e2:11:eb:53:2d:4f:a9:
92:72:f9:87:a1:fc:2c:7e:36:f8:26:34:86:c1:ea:
bb:48:62:88:8b:ef:8e:4b:0a:97:6b:6a:00:02:eb:
05:09:1b:32:4c:a0:45:93:12:bd:04:8b:d7:bd:b0:
3f:c6:6e:d6:74:6c:40:48:55:1d:2d:23:65:23:10:
58:90:ae:e2:c2:ca:42:03:85:59:72:33:c4:09:fb:
47:3c:73:0d:2f:25:7a:19:a3:0b:b6:ef:f8:07:60:
34:84:e4:13:2b:7a:e0:94:92:e8:d1:f6:1d:c6:07:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:52:62:AD:D1:7E:60:64:BC:09:15:AB:57:E1:D7:58:ED:03:90:9F
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ad:97:47:91:2f:ed:4f:71:3e:f9:43:45:10:a1:96:dd:ea:
ce:27:58:bc:38:16:95:06:a3:2c:32:fe:35:bd:8e:b1:d0:af:
d3:bd:6d:9c:f0:fc:70:a3:d3:ea:9e:b8:3c:ec:02:66:50:90:
d0:63:15:31:93:c6:8f:af:04:e5:db:ec:1a:c8:0a:c5:2e:64:
49:ed:38:9f:ab:54:31:23:93:48:4e:d4:d2:a2:5b:ec:a1:66:
47:36:1b:f0:e0:db:5c:82:d0:3d:7f:ff:83:e2:b5:ee:28:8d:
79:f5:3d:5e:a8:bb:5a:56:04:d3:7b:20:eb:be:76:84:82:4c:
54:b9:f1:b6:95:35:67:34:ca:1d:1c:16:28:98:fc:b9:0e:37:
88:7e:18:b4:7a:dd:b3:8c:3d:4f:9a:53:35:93:67:91:c4:20:
40:93:0d:dd:ac:52:54:99:81:fb:bd:d9:16:9d:a1:ba:58:b7:
9a:78:93:10:25:6e:28:71:3c:73:a9:a4:df:ac:35:5e:40:05:
2b:d6:fb:0e:1e:bb:41:02:2c:d9:1c:0c:1a:43:36:64:3c:e6:
54:2e:76:14:38:ce:f6:3e:aa:a4:dd:fa:a6:9e:0c:82:11:e5:
0d:3f:58:fd:af:31:82:44:78:2d:e2:66:31:30:2f:89:03:45:
42:05:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:00:04 2025 by rpki-client