Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
File: T5mJlOtWGejymrO956sq0U6r_P0.mft (raw, json)
Hash identifier: OoYkZEWVg920+UNnG6bg4a+TjS6q7F3pubA3Y6NYp1k=
Subject key identifier: CB:39:C4:AB:18:AE:41:7D:B6:94:BD:65:EC:9E:0D:A2:DD:4D:DD:71
Authority key identifier: 4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
Certificate issuer: /CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Certificate serial: 0196BCDB9DAE23D493DB65DBB270890532C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
Manifest number: 152F
Signing time: Sun 11 May 2025 01:00:31 +0000
Manifest this update: Sun 11 May 2025 01:00:31 +0000
Manifest next update: Mon 12 May 2025 01:00:31 +0000
Files and hashes: 1: T5mJlOtWGejymrO956sq0U6r_P0.crl (hash: c1zq+9G/si1bi/S7Fh1nk9Cj6cqIO0/WYaQfU+B67V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:9d:ae:23:d4:93:db:65:db:b2:70:89:05:32:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Validity
Not Before: May 11 01:00:31 2025 GMT
Not After : May 12 01:00:31 2025 GMT
Subject: CN=cb39c4ab18ae417db694bd65ec9e0da2dd4ddd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:18:fa:2f:6b:9d:7e:d0:24:ca:a3:76:37:
7e:06:07:99:bb:58:f3:eb:14:4e:be:d0:0d:d0:10:
60:20:73:9f:d9:1b:59:95:e9:30:b9:c4:df:42:81:
92:98:f9:53:e8:9c:41:37:32:84:fc:c9:cb:c7:da:
15:81:82:70:28:29:76:84:96:e2:39:ad:68:90:94:
38:f1:14:91:a9:56:55:6b:30:f5:c4:79:38:3a:84:
4e:a3:d9:65:22:23:95:73:f6:b7:f5:55:58:c8:f4:
4c:04:3b:05:8b:9c:48:4a:7f:40:95:50:6d:92:56:
da:00:2e:df:2b:ca:b7:58:bf:c7:a7:32:39:67:5f:
fc:30:dc:72:17:fd:50:2b:20:9a:99:fe:2e:b2:cf:
9e:b9:d6:66:33:b8:0a:1e:6f:dc:6d:91:64:d7:6c:
6e:9c:e0:6c:5a:9d:7a:e9:ec:6e:fc:db:1f:8f:8b:
06:3f:d3:71:69:fa:d7:23:d9:6b:06:af:de:87:81:
b4:31:1a:e7:d3:d3:a9:c8:83:97:c3:89:47:21:fa:
af:d1:af:6c:a5:e7:bd:ae:16:69:59:62:00:e7:3f:
5f:01:fc:02:d9:d1:6d:d9:bf:d2:65:3a:a8:5b:40:
a3:e6:6a:75:7b:48:1c:14:80:5f:49:ec:5c:c4:3a:
ba:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:39:C4:AB:18:AE:41:7D:B6:94:BD:65:EC:9E:0D:A2:DD:4D:DD:71
X509v3 Authority Key Identifier:
keyid:4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:34:70:f8:dc:60:18:de:cc:80:3b:9f:a1:4d:fa:92:f0:f0:
ce:ef:43:3f:d8:c7:a4:e6:a7:2a:f0:dd:3b:66:c8:32:37:ae:
38:fa:31:f7:60:6a:12:ba:e6:f7:c5:0f:f1:25:26:25:0f:b8:
d3:a0:13:64:c4:74:20:7e:70:fa:ea:36:04:45:45:ae:f0:5f:
58:0c:7b:eb:ee:d0:76:74:3d:17:fd:9d:9d:e7:79:20:54:44:
bd:ce:8e:de:7f:b8:93:ec:4b:e7:64:56:b2:e5:d6:73:e5:fa:
6c:f6:c0:ad:d6:a2:46:d9:4c:90:2b:01:93:ed:e0:b7:0e:15:
f3:79:21:d5:d6:49:e7:58:42:5a:07:8a:34:30:68:33:a8:b2:
ca:7e:6e:b9:55:37:66:5b:01:32:e6:ba:12:a9:30:da:aa:d5:
dc:3a:aa:e8:5b:ce:0b:f9:95:07:3e:ec:06:aa:87:5e:ed:df:
4f:10:d9:f0:db:c7:9f:a4:28:cd:81:22:5b:59:98:5f:e9:2f:
2f:24:c6:d2:14:01:a1:a0:b2:06:78:73:00:52:2a:a6:14:59:
5c:81:36:25:7c:b1:17:1c:11:8b:2c:a9:bd:70:67:b8:61:e7:
44:e4:7d:b7:36:b9:70:4c:bc:8e:92:eb:29:83:57:b4:6b:cf:
76:53:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:45:07 2025 by rpki-client