Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
File: t4FQ8EwyNNv58R4RB5kygC0mj7E.mft (raw, json)
Hash identifier: HadJAVoPHfxVkTzKlSDI8j6++182qWCNDSrSaa8BMl8=
Subject key identifier: 6F:5C:0C:D9:8F:22:DD:56:D9:0F:C1:D3:C1:F4:E2:71:2A:0C:45:B4
Authority key identifier: B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
Certificate issuer: /CN=b78150f04c3234dbf9f11e11079932802d268fb1
Certificate serial: 0196B7472CE143D3FA8AA8C0A46B59588DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
Manifest number: 0694
Signing time: Fri 09 May 2025 23:00:17 +0000
Manifest this update: Fri 09 May 2025 23:00:17 +0000
Manifest next update: Sat 10 May 2025 23:00:17 +0000
Files and hashes: 1: MDCWnt2rzIXWYWaxPmc0KCazQYc.roa (hash: 9x3sa/eMNtozgLkEhCL0NnGHAKtQHds50tsgQhEMBDs=)
2: t4FQ8EwyNNv58R4RB5kygC0mj7E.crl (hash: o9X5pcHZk7YSVEKZIJx9zMokoABfJ75nUFKtTu8AFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:2c:e1:43:d3:fa:8a:a8:c0:a4:6b:59:58:8d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78150f04c3234dbf9f11e11079932802d268fb1
Validity
Not Before: May 9 23:00:17 2025 GMT
Not After : May 10 23:00:17 2025 GMT
Subject: CN=6f5c0cd98f22dd56d90fc1d3c1f4e2712a0c45b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:52:98:4e:c2:27:b6:15:48:d6:51:b0:d5:
6e:06:6f:78:0d:c7:11:57:1b:0d:62:41:bc:8c:a9:
e9:5f:bd:a5:b3:f7:e6:c6:fc:93:40:4a:d4:d4:a4:
de:d3:76:55:20:72:21:9f:cb:bf:a8:55:51:b5:8d:
be:df:2f:0c:fe:00:4b:5a:51:ee:55:bc:1d:29:c7:
41:d6:d7:1e:d7:71:c6:91:23:c6:2c:e9:59:97:ac:
40:81:8f:f9:29:ce:80:d0:3f:68:2e:d2:7a:1d:55:
ea:14:a4:ee:0a:d2:3b:19:57:2b:a5:a7:b8:1c:10:
9a:e0:61:60:6f:8b:ce:4e:11:c1:bc:89:6b:7d:dc:
a5:9c:ae:4d:8a:80:f8:7d:6a:05:31:05:06:7c:b7:
7f:63:62:70:a0:1a:b1:7a:99:f8:10:ed:77:50:22:
88:85:f9:09:65:1b:66:08:a9:70:01:6a:d4:48:fb:
d5:bf:1a:68:fb:53:62:f5:ce:71:cf:a9:67:e9:e0:
bb:9f:56:dc:0c:ef:54:08:83:ae:aa:af:7c:11:29:
84:42:04:19:f9:9d:01:60:de:e1:80:bf:39:5b:85:
0b:47:70:0f:01:44:40:1d:93:4c:32:f6:d9:dc:b3:
64:06:6f:31:a7:59:dd:ea:f4:03:26:84:c8:f4:83:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5C:0C:D9:8F:22:DD:56:D9:0F:C1:D3:C1:F4:E2:71:2A:0C:45:B4
X509v3 Authority Key Identifier:
keyid:B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:97:b2:d5:71:0b:06:d0:a5:cc:35:9f:f4:ac:35:bc:44:cf:
29:85:a8:1a:09:3a:5f:03:93:04:0b:39:ce:8a:dd:26:8c:d1:
3a:f3:9d:67:62:8c:62:d4:78:68:53:b9:6a:31:ff:ef:d7:f1:
06:bb:9f:52:15:96:49:4e:8e:4a:5f:c8:04:00:7f:c8:c3:9e:
f4:55:09:5f:01:79:0c:b7:57:ac:32:db:5e:5f:6b:cc:ae:ba:
f1:0d:29:a8:98:fa:54:ff:f6:c2:bb:86:b2:f2:f7:d9:3c:dc:
bd:d3:c5:ba:e2:f7:fd:83:87:40:62:f6:8f:d2:fc:b2:e8:46:
23:80:49:8e:0b:21:60:3d:6e:17:07:11:e2:09:2b:19:51:2a:
08:8e:18:03:6d:3f:7b:5f:26:62:b5:c8:a4:7f:f0:af:74:f7:
e9:70:f9:58:49:99:ee:52:28:98:28:53:7e:a8:f7:bb:0d:9f:
80:85:2a:13:0e:6a:eb:1e:5c:ab:92:06:2d:a9:36:af:b3:7c:
a9:a7:84:02:5d:4a:fa:16:c0:a5:e6:cb:82:a9:f7:cf:46:26:
f4:dd:24:1c:20:df:e5:87:5c:53:84:06:65:ec:65:bf:3a:3b:
52:eb:04:1f:d1:9d:54:df:ce:8c:1e:31:07:5a:f9:65:f3:98:
50:87:2a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:05:55 2025 by rpki-client