Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File: t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier: I9EFmr7JPPL86vfvOD20SeDni91LM/V83q2vJjguKag=
Subject key identifier: 5F:81:35:B0:7B:42:FA:D1:4F:BE:3F:34:6C:26:3A:79:F9:2A:A7:3A
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial: 0197C802BEA7DBDE4C7C357E1F9C8CE43BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number: 053C
Signing time: Tue 01 Jul 2025 22:01:52 +0000
Manifest this update: Tue 01 Jul 2025 22:01:52 +0000
Manifest next update: Wed 02 Jul 2025 22:01:52 +0000
Files and hashes: 1: P0UPsrwwEpdQwdedOlBN_0JW76s.roa (hash: XTTIfgwtO/hFYhC4hGvqLqbBL3XWX9y/VAMeHabMSVo=)
2: Pw9RBJHk-6VJkZDkzezuuvzuMDc.roa (hash: KTrqAB2f6AG6ZEjHFsNbuwHsaF5ZAPbnL9PTp9QHu7g=)
3: YtQ9-mlElYwUpXvtTBFXExjq8_8.roa (hash: wqv6+ikYWOEh+dOT8PJAZxp/xzYOpnhQ7lDZyj0SG6U=)
4: nKXRC9NUlEgavRczr20Fd3QUFbg.roa (hash: OalBK1MOuAYl+k92ndjaYk1jljs83aLhrbEyE88Tedc=)
5: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: QFJERLHGJsp4UZpxQdOJKsWaxABIGEQkZIP4gEv0UMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:be:a7:db:de:4c:7c:35:7e:1f:9c:8c:e4:3b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Validity
Not Before: Jul 1 22:01:52 2025 GMT
Not After : Jul 2 22:01:52 2025 GMT
Subject: CN=5f8135b07b42fad14fbe3f346c263a79f92aa73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2c:31:13:f3:72:d0:5c:f0:a5:fb:e7:c6:db:
f7:14:91:13:93:e9:be:ab:ef:09:99:72:5e:65:96:
80:eb:e0:c7:1f:a6:d8:7a:1b:19:b7:af:c6:45:d2:
82:dd:df:08:82:27:b4:59:9f:93:93:3d:41:c1:64:
3d:4c:8f:a7:0b:c9:91:c9:47:1b:67:8a:30:ef:33:
e1:36:75:b2:05:4d:de:d5:6b:cd:ec:64:f0:e9:52:
a1:37:a7:a6:50:ad:8a:89:7c:d6:5c:69:35:8f:42:
81:af:cc:74:65:17:c8:ed:89:3e:f4:5a:04:fd:17:
3a:a5:d1:0e:ba:1b:87:ba:07:ff:0c:9d:9a:14:4b:
f8:cd:eb:a2:23:dd:a1:9b:3a:ae:2f:1a:c7:36:29:
e5:39:0e:b4:53:34:3a:20:bb:69:c3:02:a0:58:c0:
23:23:ac:35:a8:eb:1b:5c:77:5c:72:1c:fc:81:13:
01:62:c7:52:aa:e9:76:39:bc:ff:f8:14:1c:68:6e:
3a:26:e1:68:a1:66:75:69:8e:80:9c:a4:b8:b4:05:
99:6c:35:90:44:8d:0f:af:2f:12:4b:e4:a9:14:19:
d3:ba:75:6d:5c:7d:0e:7c:df:43:ac:a9:12:9e:09:
ac:7c:11:1d:ec:d2:2a:5e:3b:f7:f3:bb:19:a9:6c:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:35:B0:7B:42:FA:D1:4F:BE:3F:34:6C:26:3A:79:F9:2A:A7:3A
X509v3 Authority Key Identifier:
keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:92:a1:49:87:1f:83:e1:47:0d:52:38:8f:f9:5f:94:02:56:
e9:46:ff:51:66:34:25:13:86:86:26:d7:e4:7c:72:63:8c:45:
74:0e:e6:8c:5e:7f:2f:ce:63:70:90:89:db:a0:1f:71:02:e4:
dc:fe:aa:65:2b:41:6f:ce:d9:ac:3b:62:c6:94:6f:6a:c7:35:
4d:f6:f6:4a:7d:f4:f4:7c:81:65:ac:dd:07:da:6b:73:32:f0:
de:3b:04:32:30:c5:5a:d7:16:5a:61:b1:f1:5c:09:e8:15:4a:
b3:d7:be:0b:c4:dd:1f:2f:43:1d:c6:a7:59:e1:e7:30:cb:02:
be:e9:72:38:5b:03:b3:e5:d6:82:2e:93:e3:5c:3f:f7:0d:3f:
e1:12:f3:30:48:2b:b9:28:a2:a4:f3:0b:02:32:0e:d8:6a:8d:
d2:05:15:46:34:18:49:f9:0a:96:c8:27:f2:11:79:93:63:4a:
fd:89:5a:bc:96:14:ae:92:db:f1:f6:62:cd:57:96:92:85:d7:
83:da:78:4c:3d:59:25:55:4e:cd:c4:a1:84:99:7b:95:7e:f4:
77:f4:bf:79:b8:d8:3a:77:e4:bf:3e:d8:94:e7:24:39:78:2d:
16:5f:2c:cb:34:00:b6:55:95:c0:6d:37:8f:4c:24:15:5f:6c:
fd:68:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:04:49 2025 by rpki-client