Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: b3TSDLYftLfCb0ERSKygptGeOG/FtLWoj4F9rQ4RNSI=
Subject key identifier: 5D:FE:20:11:0C:74:67:03:72:92:F9:08:F2:DB:BE:11:CA:9B:0F:21
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 0197B6A05A316268241DDB9D4A2ED109C24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 110C
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: ONllwZXp3K4xX0ZxLMmhUToFIbwWGy/ThP7Et6GPHAM=)
2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=)
3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5a:31:62:68:24:1d:db:9d:4a:2e:d1:09:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=5dfe20110c7467037292f908f2dbbe11ca9b0f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:33:3e:69:84:39:38:31:5c:ff:2e:53:a0:
51:cf:5d:a6:d2:25:70:5b:29:67:ab:59:e7:34:15:
d1:7c:51:04:56:24:c1:25:61:57:aa:62:db:46:57:
8c:2c:91:f9:8e:96:14:48:a9:cf:94:de:05:16:ed:
38:e0:5e:ce:a8:39:a5:13:9b:29:55:f0:68:8b:58:
3a:ef:d5:de:05:74:2b:d4:67:96:56:68:ea:f5:19:
68:09:3b:ee:02:1e:10:47:68:2d:8c:b4:ec:40:49:
8e:7b:eb:01:e3:26:a4:e1:19:fe:8e:0b:5e:92:81:
44:74:7a:5c:db:70:21:b8:8b:18:39:a8:6c:95:87:
29:57:f2:64:ce:e9:18:33:1f:4e:2b:3b:fe:fe:a2:
3c:2d:a8:9d:85:4f:f4:24:e5:68:1d:26:9f:d8:bd:
ec:1b:df:53:97:8d:ec:7e:88:c4:76:b0:78:6c:09:
79:1b:40:2f:43:40:4b:a9:bc:04:5c:7b:ed:7a:3b:
29:4c:fc:f6:eb:18:3a:7a:ea:2e:e0:e5:30:d2:a3:
d9:c3:08:0f:94:3a:fa:fa:c8:07:ab:f0:06:c2:89:
ff:57:e6:f7:83:86:d1:0e:0c:4d:c4:5a:1c:ae:58:
e7:66:e2:69:70:85:92:a7:57:71:d8:7e:bc:4e:24:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FE:20:11:0C:74:67:03:72:92:F9:08:F2:DB:BE:11:CA:9B:0F:21
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:af:a4:62:9e:8f:9f:a2:32:e4:fb:53:43:a8:72:8f:ed:4d:
7a:9d:1d:41:c0:e2:9a:0e:62:24:6a:e4:bc:17:e5:50:dd:01:
d5:f8:8e:c6:64:ae:79:a2:59:63:82:cd:40:b8:5c:d1:e0:ce:
d1:4b:1b:d9:ca:8e:20:9b:b0:8e:bb:80:02:53:c0:d0:56:dd:
08:cb:09:29:b2:27:81:11:78:ca:cf:f9:41:7b:13:c2:a8:6c:
e2:e1:8c:ce:f3:0d:47:35:bc:d6:4b:70:0f:d0:c7:13:f4:1a:
b4:cf:77:4a:f9:1d:0b:8c:d1:ee:af:cf:46:69:75:47:0b:d5:
4d:f0:11:9f:3a:a7:ac:80:59:01:27:ed:ac:f4:bc:59:be:18:
c7:9b:d6:fb:97:32:55:0c:48:8f:dc:b5:0e:73:05:15:72:a3:
54:16:ed:ea:28:02:cb:30:bd:81:00:91:6c:ea:3e:23:2c:09:
95:e8:aa:42:15:3d:cb:91:a3:c5:32:0f:6d:04:c1:26:4e:f3:
f4:7f:55:a0:e9:6a:36:29:68:b0:57:63:23:06:b4:19:29:e2:
04:49:2b:73:7f:1c:52:50:e5:75:fb:38:5c:28:f1:b2:b9:ec:
08:1b:f8:a4:16:58:00:f8:56:c8:d6:14:67:8f:0f:f3:58:ad:
8d:70:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:47 2025 by rpki-client