Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier: XCed65q4IvWvJ6DkLV9wQfcLLFtKMBua6GYcMkRs+yo=
Subject key identifier: E7:55:28:B4:F1:14:24:37:FC:7E:C4:A5:3B:00:5E:1A:BC:E5:36:FA
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 0196C7295326ED0570D57E4AD3099B004E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number: 0CE8
Signing time: Tue 13 May 2025 01:01:36 +0000
Manifest this update: Tue 13 May 2025 01:01:36 +0000
Manifest next update: Wed 14 May 2025 01:01:36 +0000
Files and hashes: 1: QjtOOOK5pwQKBGSkxklhdFksgp4.roa (hash: mBFc78U/Py4iQS+BrsEjELYMOU1hEEh06mY9X8mzPLw=)
2: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: mirKylmPTPd/6zOky6rmcLf4HwVUhCR9zM82xsAGoSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:53:26:ed:05:70:d5:7e:4a:d3:09:9b:00:4e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: May 13 01:01:36 2025 GMT
Not After : May 14 01:01:36 2025 GMT
Subject: CN=e75528b4f1142437fc7ec4a53b005e1abce536fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:2a:37:bb:68:b7:6c:3a:e4:4d:89:0d:a5:
9d:ef:f1:41:84:f4:a0:75:35:0c:4a:be:e9:4b:f8:
b3:95:e0:80:12:db:63:a2:52:bd:9d:78:08:7c:8d:
a8:0a:f0:7c:63:39:24:70:36:91:f8:51:7f:9f:bb:
b5:ab:8b:29:df:b7:0a:cf:a8:51:69:30:8f:ce:45:
6e:f2:b1:b6:f2:74:e0:99:74:3f:65:37:fd:0e:93:
63:c1:84:2d:5b:b3:c1:3b:12:82:4e:7a:6b:57:31:
50:0f:4e:3d:e6:6e:f6:59:86:a9:c6:8a:fa:05:34:
98:7d:5f:ff:9e:39:4b:2f:2c:06:88:60:3b:5e:b8:
e7:29:32:2d:ab:75:c5:42:a3:bc:65:55:e2:fe:77:
a0:aa:ae:47:d3:57:af:ab:12:02:9e:ed:37:06:62:
a7:31:7b:20:19:90:45:2c:e1:27:63:48:23:c0:1b:
1f:fa:14:d8:45:fc:d0:da:9c:9c:75:bd:88:60:8b:
0e:61:78:76:c4:ef:a4:a0:0f:06:fa:48:9b:d5:4e:
f4:f8:0c:e3:2a:d0:e6:54:ae:a3:ba:0e:4a:62:9c:
8e:b1:6a:a6:77:4d:69:14:33:e5:ae:2f:f9:1f:c5:
44:ad:11:dd:60:1b:14:35:d6:e2:9b:06:da:fe:9d:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:55:28:B4:F1:14:24:37:FC:7E:C4:A5:3B:00:5E:1A:BC:E5:36:FA
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ef:1f:71:aa:d6:d9:58:d3:1f:08:5a:8e:4f:a3:bc:a3:12:
b3:2e:65:fb:75:0b:ab:06:a5:44:81:3b:7a:2a:38:46:a3:8f:
4d:6d:33:d1:20:d3:95:05:3e:b9:ce:e7:e8:26:b5:21:e9:36:
90:1e:00:4f:24:e5:ab:c1:90:da:f2:a6:9e:6f:d6:10:01:1b:
cb:31:68:22:3d:0c:52:bb:25:65:b4:61:10:66:a7:d6:8e:ee:
d4:ca:55:08:fc:82:10:08:44:bb:0b:68:07:47:4f:77:b2:40:
61:87:10:f4:ea:8a:f4:f3:34:e4:b6:9f:15:ff:41:ed:51:47:
85:c9:36:b4:59:93:2c:79:a3:bd:71:be:43:a5:b3:b3:dc:b3:
35:cd:df:b7:2a:f6:e4:1c:64:4a:73:3e:3c:16:ca:fc:73:63:
70:2d:08:b6:d1:f6:bc:4d:17:88:f8:6c:6d:ae:64:a0:d4:96:
77:1f:14:24:cd:4e:7b:3e:ad:ef:23:e5:87:61:f8:22:c3:dc:
88:f1:38:e9:82:98:89:d4:2d:24:25:7b:86:d5:69:d9:57:fd:
b5:37:54:c7:57:45:e9:a2:bd:f7:19:42:d4:70:d2:5d:ef:9f:
f3:0e:b0:05:bd:87:80:24:ab:a0:a0:89:99:50:4a:35:cd:99:
b1:49:1f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:59:21 2025 by rpki-client