Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: upQVzVCwmoXFcCj5rSxQ51BXUg4wsNQfdXPMq2w5D4k=
Subject key identifier: A0:EB:85:6B:27:92:C9:A2:C6:DE:89:CB:EE:82:FE:D0:5F:5C:C6:72
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 0197B745043ECE1327E7271704F35E3FCA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0B09
Signing time: Sat 28 Jun 2025 16:00:42 +0000
Manifest this update: Sat 28 Jun 2025 16:00:42 +0000
Manifest next update: Sun 29 Jun 2025 16:00:42 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: sfAqwyJwseL6yBD0PgDCGN6x1Qd90Gq4s6axJQBoKz8=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:04:3e:ce:13:27:e7:27:17:04:f3:5e:3f:ca:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Jun 28 16:00:42 2025 GMT
Not After : Jun 29 16:00:42 2025 GMT
Subject: CN=a0eb856b2792c9a2c6de89cbee82fed05f5cc672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:09:04:38:4a:26:5a:1e:1d:e8:56:f3:8f:
ce:0b:43:71:59:fc:5f:27:6a:38:cf:bf:ce:07:c7:
64:28:cc:3d:84:e3:5c:52:44:c5:33:d0:b6:e3:ea:
0a:37:70:cc:ae:6b:17:3f:5d:ae:f5:60:b0:3e:07:
9b:99:05:75:e7:50:89:33:75:01:60:53:6e:de:93:
6a:96:4f:58:d3:be:09:fe:f3:80:70:c0:06:b9:99:
f5:33:99:65:2f:f9:86:6b:9b:1a:37:fe:21:a7:ce:
1f:97:a7:37:ae:e3:74:a0:06:26:d1:50:2c:bc:0a:
1e:cf:f3:fa:6f:24:18:5a:d4:f1:78:4a:b3:74:3e:
85:da:8a:5d:eb:0b:41:fe:31:ed:bc:a4:66:30:0c:
7d:3e:36:a1:05:45:28:64:91:0e:61:a7:c4:32:57:
b2:4a:8a:72:a3:ef:a2:c1:d0:66:d9:7c:d9:56:05:
7c:72:64:51:35:8f:cd:87:49:8a:78:88:a9:e7:ef:
5e:7e:02:94:b8:58:53:70:0d:a1:ab:ca:18:dd:f2:
46:39:bf:9f:bc:7b:69:a5:f2:35:c5:33:3b:d6:33:
07:80:5c:39:7f:14:76:48:70:1c:c2:16:bd:74:e5:
2c:c3:85:32:b9:49:3d:e4:09:c5:ee:24:93:13:59:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EB:85:6B:27:92:C9:A2:C6:DE:89:CB:EE:82:FE:D0:5F:5C:C6:72
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4c:d3:2b:59:e6:b9:7e:f3:e1:5b:38:4c:65:fd:62:16:d6:
20:24:8c:ca:7f:2f:de:a9:db:2b:e2:17:45:d6:fc:4d:fb:fb:
8a:3e:fd:8e:e3:f6:de:1f:08:cc:77:c5:86:7d:81:e2:70:24:
95:20:a9:3e:36:0f:1b:7c:83:c8:f8:d6:11:76:b9:48:4a:c6:
8f:a8:09:36:54:39:b7:9b:c6:be:91:f6:f0:63:d0:b1:f8:9e:
28:42:39:41:37:ff:2c:e5:64:b3:22:e8:f5:00:73:a0:1a:65:
5c:b9:05:01:0e:c6:7b:0e:5f:f8:1f:ab:bd:53:5e:5b:0f:63:
cd:cf:06:33:3c:a2:19:02:95:9d:97:5c:71:a3:c1:88:1d:79:
52:6d:27:54:24:de:cb:67:24:03:cd:a1:fe:4f:88:87:9a:5a:
80:fe:1a:1f:e4:c6:34:02:b5:88:9d:aa:ef:b8:ff:43:4a:66:
3b:5e:f7:05:22:60:15:8a:8b:2e:bd:de:9f:41:41:71:f9:3a:
8b:14:9c:a4:d3:22:22:63:c7:45:39:1d:c1:f1:04:35:7c:04:
5d:4a:5c:38:c2:0f:b4:4a:31:08:19:d6:61:9c:b4:9f:79:5e:
e6:bb:72:97:f5:2b:9e:93:9e:41:47:aa:84:34:79:02:a6:19:
48:e3:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:51 2025 by rpki-client