Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: Xp532r6WlUHVYuwF7J9l82/226TA5GB2989vsiwuS3w=
Subject key identifier: 83:CD:6D:E9:10:15:3C:D1:20:7D:59:D3:FF:7A:50:EB:26:BA:9F:98
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 0197B820F1007E6436A5F14C487362097593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 20:00:55 +0000
Manifest this update: Sat 28 Jun 2025 20:00:55 +0000
Manifest next update: Sun 29 Jun 2025 20:00:55 +0000
Files and hashes: 1: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: yAU8GnC3j5Ubh3pYB23kq/aZpZJChJCqtr87YiyTqmk=)
2: qMVYOgqIzk9KMROylZiVtF-t3Zc.roa (hash: xqIRDpc2sFOdr1/l4Pzbo0nNaeEXShJ8C0GuGpTGneI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f1:00:7e:64:36:a5:f1:4c:48:73:62:09:75:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Jun 28 20:00:55 2025 GMT
Not After : Jun 29 20:00:55 2025 GMT
Subject: CN=83cd6de910153cd1207d59d3ff7a50eb26ba9f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:84:e5:c3:99:f8:dc:f3:a7:18:0a:3e:4d:
f6:b8:8d:5f:6f:6d:b6:d0:d7:c6:6c:36:31:37:d8:
36:38:22:6c:bf:c1:f3:a2:2c:17:86:4a:c9:09:ba:
00:87:a5:62:5a:51:f5:75:40:7c:60:00:8d:69:b6:
01:82:1d:45:bf:20:7f:b2:dd:64:5e:cd:31:93:ce:
c3:7b:04:44:8b:11:0e:96:68:c7:a9:36:a8:d9:91:
43:04:b9:1e:1a:36:55:50:11:2e:ec:30:d2:f5:7a:
85:6e:a2:75:f7:5a:20:a7:b7:f8:83:f5:c1:99:f3:
30:1b:1d:b3:8f:a6:39:52:66:b8:59:27:fb:a2:5d:
26:9a:a2:5b:99:9a:ff:4d:d1:93:fb:34:b8:be:a6:
6f:0d:46:96:ac:2a:2f:b3:54:0f:5f:3e:cd:cc:6e:
05:d9:a5:e0:5e:be:82:4a:1c:4b:86:04:3a:f7:72:
b0:36:2f:2e:05:db:28:ba:b5:80:94:70:ce:58:95:
8f:53:3a:c3:62:f0:3c:b7:fd:98:f8:61:c7:ba:5d:
05:f4:3a:96:5d:81:c2:56:76:5d:d7:22:70:32:24:
51:07:0b:4f:67:27:de:0e:94:53:bc:a9:f2:93:66:
e0:cd:32:0d:1b:69:9d:62:ea:b5:80:a0:90:67:52:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:6D:E9:10:15:3C:D1:20:7D:59:D3:FF:7A:50:EB:26:BA:9F:98
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:de:51:6b:3c:cc:a5:19:d5:7d:f1:19:c3:ae:11:8d:f6:a4:
cd:3b:ec:a2:3e:46:4b:0b:e1:36:e1:a9:50:56:27:c8:ba:b5:
31:05:4b:66:49:18:80:03:ce:11:93:39:1f:68:57:66:01:a2:
d5:62:7e:24:b1:36:c5:ed:c4:18:df:95:8f:a9:7e:89:0c:57:
2f:5b:d2:70:d1:87:fd:19:a8:ed:19:d7:ed:06:dc:c9:00:01:
69:08:56:04:81:bf:49:24:ea:b7:60:7e:73:c2:b5:1a:5e:27:
07:99:54:f8:8f:c6:54:b3:af:ca:8f:5c:31:87:11:af:4c:b7:
58:ae:0b:3d:3a:3e:93:26:e4:51:95:da:14:12:66:37:7e:62:
d1:e5:f0:29:ed:6b:ae:56:24:ec:fa:80:85:97:ce:e0:36:a2:
05:b7:f1:6e:ed:5c:e5:0a:7d:92:53:d5:79:43:f2:47:8b:91:
57:22:bb:b6:3e:2e:1b:ef:83:51:3c:d5:4d:3a:37:73:12:2f:
e2:d2:f5:1a:df:bc:6e:97:89:e5:8d:1f:52:58:ef:b9:a0:a8:
47:b1:75:89:0e:a9:9a:d2:ac:65:59:78:57:48:57:2a:dd:01:
56:45:fa:58:b3:80:49:18:d9:73:84:d5:f5:db:dd:c3:4d:e1:
d9:15:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:03 2025 by rpki-client