Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: pCGwyKimfFSfBq0y2HscULwcmfJftE+QzlwqyDSdqEU=
Subject key identifier: F8:20:36:D4:F6:F5:99:C1:5C:B3:2C:E7:F6:F4:C0:EB:AF:91:C8:CA
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 0196C9F2F60DA45BF74645D10E72493EF268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 1541
Signing time: Tue 13 May 2025 14:01:05 +0000
Manifest this update: Tue 13 May 2025 14:01:05 +0000
Manifest next update: Wed 14 May 2025 14:01:05 +0000
Files and hashes: 1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: CkkTHW6XfsdHuLkh7da0pW+k6gYJQ0AYHg5qtvwhWhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:f6:0d:a4:5b:f7:46:45:d1:0e:72:49:3e:f2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: May 13 14:01:05 2025 GMT
Not After : May 14 14:01:05 2025 GMT
Subject: CN=f82036d4f6f599c15cb32ce7f6f4c0ebaf91c8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:62:29:77:e8:76:e9:48:7c:88:6f:b0:34:
1d:9b:bd:04:ff:0e:9f:2d:93:d2:ce:6e:f6:a2:7f:
65:bc:27:b9:dd:a6:93:37:a7:03:c0:99:51:ad:af:
61:da:97:e4:d4:17:40:eb:0b:c1:69:2f:7b:51:aa:
0e:25:bc:94:ca:b4:a4:1a:60:06:ea:cf:5d:f9:5c:
75:7c:84:d6:ba:e1:84:35:49:c5:26:1a:6c:3f:f9:
39:6b:44:93:e6:82:9f:b4:c2:b5:62:b0:ce:4c:38:
95:ed:7a:60:d1:17:c4:e1:36:fc:4a:cc:83:7b:7d:
8f:92:ca:d3:04:f6:1b:b3:aa:d8:ad:45:c9:61:f1:
38:08:66:c7:98:e4:2b:85:ca:20:0f:ac:30:38:18:
70:98:59:a5:ea:65:a2:8d:8a:28:23:cf:cd:b4:48:
bb:a1:aa:eb:f6:b8:ec:75:0d:9a:a5:02:86:4d:2c:
ae:18:30:87:9c:9a:76:01:08:3e:ce:0c:b5:d5:fc:
1b:84:b0:9e:94:77:29:53:fd:cc:ad:60:e3:2d:70:
c9:90:9f:10:fa:76:24:19:0b:bb:93:df:b5:d6:48:
91:f6:ca:34:eb:d3:2a:63:9e:86:40:94:be:30:a4:
f1:cb:c3:dd:9d:94:4f:4e:e7:d5:1e:53:e5:84:b3:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:20:36:D4:F6:F5:99:C1:5C:B3:2C:E7:F6:F4:C0:EB:AF:91:C8:CA
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:43:78:b4:9a:a2:58:e3:7a:73:ad:2d:e4:c0:41:04:ab:9d:
b5:b1:16:54:b7:6d:4b:4b:59:fe:9d:ba:55:3d:99:7b:69:4f:
c0:ce:4a:ec:dd:03:72:10:a2:21:3e:3a:e5:37:fa:cd:87:dc:
69:5a:2f:ff:a1:de:f1:c8:34:a8:c4:61:79:a6:84:01:26:d8:
c0:fa:6e:47:af:39:3b:32:5c:a2:95:5d:ea:81:33:05:98:28:
b9:36:6a:29:43:e1:5e:25:fb:ed:b8:cc:0f:f5:90:d9:6e:d2:
cd:76:43:56:23:8c:fa:70:47:2e:65:5c:b5:83:7f:2b:9b:f0:
1d:3d:de:a5:36:e9:e6:8a:71:a7:28:d1:b1:41:3b:c2:43:1d:
63:de:55:88:64:cd:e2:1e:81:14:9d:49:fd:18:fd:1d:69:0d:
fb:f3:90:a0:89:0f:da:26:18:4c:6f:d3:ff:0a:40:e3:a8:e1:
a3:38:b2:3b:6f:11:98:43:7a:fe:81:9d:d5:bc:10:42:ae:1b:
d8:49:1e:94:d8:3e:2c:6b:1f:05:16:43:6a:c8:e6:7b:60:24:
44:98:38:46:62:f5:f1:1f:e9:7e:ed:71:60:2d:cf:e2:ef:58:
5b:cc:56:fd:59:57:62:a7:b8:51:43:1a:96:5d:8b:66:6f:b6:
6f:fc:47:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:13:42 2025 by rpki-client