Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: EFBfT/MmlBzdm5nNIBoU5tAEqbK/vhfq8NAmagaOJs8=
Subject key identifier: 2A:93:7C:59:7B:4A:94:47:4D:3D:33:93:7E:99:B5:88:E1:E6:D0:F0
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 0196B58FFACDB042EC8DBB745993B32A9559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 1087
Signing time: Fri 09 May 2025 15:00:34 +0000
Manifest this update: Fri 09 May 2025 15:00:34 +0000
Manifest next update: Sat 10 May 2025 15:00:34 +0000
Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: 9FnDyzfIOX3VrH4n8J1zA7FAUU5bOdMjN8ch7H4MFQQ=)
2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=)
3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:8f:fa:cd:b0:42:ec:8d:bb:74:59:93:b3:2a:95:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: May 9 15:00:34 2025 GMT
Not After : May 10 15:00:34 2025 GMT
Subject: CN=2a937c597b4a94474d3d33937e99b588e1e6d0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:aa:ca:24:16:e1:4b:c0:28:25:e3:28:dc:
42:9f:4b:79:fc:b0:3c:6d:5a:6b:a3:a6:1b:2a:05:
ec:ed:d1:fd:d1:fe:59:ba:8c:c5:b7:96:2a:33:de:
0b:be:30:67:9f:6c:55:51:e6:3e:1e:75:71:9a:bd:
07:09:2e:e2:58:a5:23:2a:71:38:53:95:9f:6d:44:
72:60:84:d9:63:6c:68:b2:af:97:7f:d9:67:02:71:
f5:5a:08:e3:0a:f1:55:be:59:de:5a:22:04:e4:79:
ab:91:33:49:4f:92:a3:76:2b:98:b3:df:05:08:b9:
74:e8:71:ac:b2:ea:75:6d:30:f7:63:a5:19:31:16:
8c:77:38:10:d9:af:52:63:53:e8:48:2d:5a:21:1f:
5c:5a:a5:64:5e:9b:20:16:a1:54:4f:b9:4d:c8:b2:
dc:da:ce:43:4e:42:88:af:21:c6:2e:cb:09:9c:a7:
e3:17:44:61:e9:85:19:32:c6:bc:f1:0a:6f:5d:82:
91:58:35:32:68:45:1f:01:2b:8b:c9:0f:26:45:a3:
18:f9:df:ea:1c:0b:f5:94:01:98:e5:05:62:db:63:
e1:6b:fb:79:a3:ef:41:12:15:b9:89:a5:e1:10:4f:
8f:db:76:6e:6c:40:3a:23:7a:ce:45:71:02:51:30:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:93:7C:59:7B:4A:94:47:4D:3D:33:93:7E:99:B5:88:E1:E6:D0:F0
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9d:93:de:65:6c:eb:e7:33:9c:17:ef:31:97:d0:11:77:43:
b5:48:bf:d1:8b:5c:d8:7a:8d:d8:d3:8f:ba:49:1a:ef:5c:b8:
ee:04:62:ae:55:2e:4d:b2:f9:bb:4c:13:03:2d:9c:91:c3:08:
aa:40:10:1b:9a:c3:2a:1b:2c:dd:5b:dd:b2:f7:d9:76:70:82:
79:8a:2c:a5:a9:46:72:dd:26:72:79:8a:69:d8:d6:7f:5d:43:
76:3d:f8:91:b3:ee:fe:6c:31:1a:36:3a:6c:0f:98:dd:18:38:
72:2f:24:ba:12:ac:32:c5:eb:bd:56:b8:16:76:e8:9b:53:7d:
b4:83:7a:56:bf:87:0a:0e:95:58:e7:cf:90:55:7f:87:18:34:
84:64:31:da:d9:2d:9b:6e:86:63:2d:71:09:a9:05:a2:60:f9:
62:d2:89:1e:ad:ed:c8:93:07:05:8b:4f:3c:ff:70:ae:d5:3c:
78:9e:c0:4f:94:98:aa:44:7b:32:44:2a:ee:d9:53:47:0c:b3:
a8:80:18:51:9b:e8:d3:df:41:6a:ef:62:ae:82:93:3c:3e:c1:
de:8e:86:71:40:33:05:84:2d:65:6d:09:54:d6:41:56:26:39:
0a:b6:bc:ae:72:e7:c1:12:dc:82:44:c3:19:fd:6b:58:30:b1:
cd:48:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:25:28 2025 by rpki-client