Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: OFzWeM51R4klBbpSrEexLYranweNSZCEsHVCqDL//2w=
Subject key identifier: AC:F7:D7:22:55:E4:B7:B4:1C:23:F8:2C:AE:F2:18:BD:F1:80:2E:FF
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 01969E6392B8ADCA3262889E8DD1FC16EC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0C1A
Signing time: Mon 05 May 2025 03:00:47 +0000
Manifest this update: Mon 05 May 2025 03:00:47 +0000
Manifest next update: Tue 06 May 2025 03:00:47 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: XvuO/vDGgtbyK0NROb81PZPvRRbvCtEx0ofq2T+TL7o=)
2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=)
3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:92:b8:ad:ca:32:62:88:9e:8d:d1:fc:16:ec:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: May 5 03:00:47 2025 GMT
Not After : May 6 03:00:47 2025 GMT
Subject: CN=acf7d72255e4b7b41c23f82caef218bdf1802eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:1a:5d:87:d5:e7:82:df:21:90:96:17:5e:
8c:7b:b2:00:49:c7:b0:55:f8:91:21:19:fe:71:d9:
c6:48:5f:9b:84:15:f8:e0:a6:c2:3a:22:b4:8f:24:
68:a1:af:26:5f:b7:68:71:0f:0b:ae:90:2c:29:c5:
77:aa:58:55:f2:33:df:9a:8f:92:c8:6f:80:15:ff:
ab:1b:5c:ad:7b:5f:95:3d:40:10:76:85:2f:a0:0e:
f0:dd:b1:1e:a7:06:c9:9d:2e:25:c0:fe:9e:0a:e9:
47:f4:f8:31:e1:72:16:8b:c0:a1:23:c2:67:40:ab:
9a:c8:96:a7:a6:74:32:42:7c:02:c8:3f:21:5f:42:
f9:24:1d:2a:39:87:b6:dc:90:95:a1:20:67:14:88:
96:cb:9d:92:1e:2e:39:5e:76:4e:cd:a0:a8:32:8e:
e2:f8:32:a2:52:a8:87:c1:44:8d:a7:7b:33:7f:60:
ef:06:9a:a4:c3:f8:97:af:47:a9:94:56:5e:96:ec:
7d:4f:ef:52:a9:b6:d3:49:cf:77:8f:ed:00:4b:fc:
ef:bf:06:67:76:7d:90:16:35:14:49:22:14:23:e5:
09:f2:ec:d2:bf:57:96:97:81:a2:e5:c1:f7:7b:a2:
05:05:61:cf:6b:0a:32:69:88:c8:39:30:d6:e2:98:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:D7:22:55:E4:B7:B4:1C:23:F8:2C:AE:F2:18:BD:F1:80:2E:FF
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f6:bb:15:cb:c5:12:30:95:e5:e2:80:b2:4e:93:b9:91:21:
17:dd:73:27:bf:95:ec:e1:70:b3:d9:38:6b:cc:e6:ca:59:12:
ce:90:97:2b:32:6e:e1:e3:86:a9:be:a6:6b:5d:0a:62:16:88:
43:22:19:c8:9a:85:4d:99:30:fd:e4:4f:f3:d6:12:6e:52:fd:
a2:7e:1a:0e:0a:60:6e:df:c3:ea:c8:76:cd:f5:65:72:7b:ee:
00:97:ae:ab:f4:5d:e5:d8:9b:a5:e3:ca:f2:f2:c9:0f:4a:b8:
6e:97:3a:9d:f9:a8:66:5c:66:d0:fb:10:c1:e5:30:dd:bd:94:
e4:ef:96:91:3e:ed:64:9f:c5:f2:55:1c:ef:89:32:18:6c:5d:
37:a0:d3:9b:2f:c3:aa:69:d6:7a:c0:d2:64:2a:59:bb:40:1c:
d4:38:e1:e5:ef:db:c5:a5:8f:c3:b9:65:ce:61:69:83:42:de:
42:0d:c1:e0:37:eb:b8:8f:c6:2c:09:8d:e8:e1:3c:0a:0c:8a:
25:41:25:42:15:47:ac:fb:fd:bf:45:87:0c:dd:97:1e:df:72:
38:fd:94:4e:57:97:de:45:97:47:61:fe:b8:f1:cf:70:49:b5:
9b:cf:d9:13:d2:45:8f:59:e2:c1:a0:9f:93:9a:15:3d:cd:dd:
15:cc:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:02:38 2025 by rpki-client