Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: zIgU7MhuIPyvAR0G+rJXeP53qORLrHE8u0bJ6Rb02os=
Subject key identifier: 59:66:42:24:54:53:E3:D6:94:6C:BA:3A:7B:31:75:14:9F:2F:06:0C
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 0196C615A8241542EEB608888CDFD9FF3B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 0DCF
Signing time: Mon 12 May 2025 20:00:30 +0000
Manifest this update: Mon 12 May 2025 20:00:30 +0000
Manifest next update: Tue 13 May 2025 20:00:30 +0000
Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: /ts7XohZndhqypsaMplm4pUaDWy/60MiwvwQCISLCCc=)
2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:a8:24:15:42:ee:b6:08:88:8c:df:d9:ff:3b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: May 12 20:00:30 2025 GMT
Not After : May 13 20:00:30 2025 GMT
Subject: CN=596642245453e3d6946cba3a7b3175149f2f060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:56:8e:3c:ee:5e:5c:0e:6d:69:4b:3f:1e:c0:
0d:ac:2b:78:a4:b4:81:f0:f3:09:77:3a:a5:94:ce:
16:0a:0b:37:65:60:00:71:f9:20:a4:fd:b2:8a:82:
73:32:fb:a5:ce:e7:37:a8:37:cc:57:69:23:cf:ec:
88:ee:b8:bb:1b:c1:ea:29:75:f0:3c:5c:a2:f5:78:
b8:fb:d6:9a:c9:e3:2e:23:27:9f:91:86:34:02:51:
f1:be:9f:6e:f7:39:21:d5:ad:f9:90:17:56:15:ff:
33:75:06:8e:a8:4c:b4:19:6f:c1:04:04:6a:b9:0c:
47:65:5e:21:e6:f6:dd:e0:f0:3a:93:5a:18:97:61:
f1:c2:4c:6d:6b:c6:2f:3d:89:fa:48:b4:f4:c4:cf:
06:e1:16:2e:4b:5a:55:d6:17:5e:7a:99:d8:7d:46:
70:3f:fd:94:d0:22:11:2f:f2:7c:b9:70:b5:91:25:
ff:cb:6c:eb:17:80:92:9b:10:66:ed:3f:7d:17:e1:
84:09:f7:8f:0f:c7:68:58:af:0d:42:d8:9b:29:b6:
d0:99:0b:61:b7:dc:81:bd:15:8e:56:18:cc:83:0f:
0a:5a:8b:1c:68:00:d7:65:18:83:d7:4a:e5:fb:5d:
64:49:c4:45:a9:1f:11:26:c8:69:d7:6e:45:bc:4d:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:42:24:54:53:E3:D6:94:6C:BA:3A:7B:31:75:14:9F:2F:06:0C
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:10:f5:54:b2:c2:f7:18:27:25:0c:ab:88:7a:f7:50:f0:c6:
4e:b9:76:b6:57:d1:14:3f:2e:93:a2:76:88:f3:f2:aa:bf:c9:
ca:59:ae:d9:de:9a:4a:df:5d:5a:08:0f:f4:c2:a7:f5:db:74:
a6:d0:2d:2e:f0:22:5c:d1:c9:73:b3:89:4f:32:97:a1:80:34:
62:f4:cb:6c:62:05:97:f0:41:e7:33:9f:fe:2d:94:e7:5c:19:
cf:a9:dc:a8:8b:97:2d:43:8a:a5:54:a8:9b:73:84:78:6c:1b:
d2:a0:05:87:7b:7b:96:dc:2f:db:46:0c:48:9c:a2:7e:15:2b:
ca:a3:fe:9b:63:f3:6d:eb:d6:13:03:d5:ff:b2:b6:0f:06:be:
11:38:c5:dc:f4:0d:95:b6:fd:5f:22:34:0c:64:8b:ac:a5:49:
9b:6f:1b:a5:b3:c6:6c:d1:c9:20:c2:bc:48:a5:06:77:7d:24:
da:03:5f:d0:e2:db:ef:c6:c2:cf:d2:3d:e2:f9:1a:e8:55:b3:
b1:77:44:8e:f6:f6:98:75:e2:b9:c7:9a:32:13:f7:f3:85:ed:
37:2e:dd:a0:44:db:49:4c:6d:6f:9e:34:d8:92:d8:5b:ae:f1:
0a:4c:88:3d:56:a6:0a:9a:2e:f1:74:ab:da:47:51:e8:26:ca:
59:ce:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:23:17 2025 by rpki-client