Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: +e/tlSpMX+WiLTsizDZxb7Cj8enrfR0TjPDvNmBzRJA=
Subject key identifier: CA:40:A5:B1:8A:57:DB:BA:7A:38:58:73:AB:AC:D7:90:7B:DF:41:C7
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 01969F3F22B575CB4267441E16B2A954A437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0A78
Signing time: Mon 05 May 2025 07:00:36 +0000
Manifest this update: Mon 05 May 2025 07:00:36 +0000
Manifest next update: Tue 06 May 2025 07:00:36 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: 8D7Skh+VVXe20ah84Gb7fily0BehzRSMSiAcQVUNFj8=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:22:b5:75:cb:42:67:44:1e:16:b2:a9:54:a4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: May 5 07:00:36 2025 GMT
Not After : May 6 07:00:36 2025 GMT
Subject: CN=ca40a5b18a57dbba7a385873abacd7907bdf41c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:ee:e8:66:1a:76:ed:c6:b5:3c:60:8e:2f:
1b:f5:39:de:c3:d1:77:02:8e:8e:26:46:5c:b1:06:
07:48:7c:ee:b6:bf:eb:54:e2:37:c1:ce:64:ac:2a:
24:8f:4d:fc:4a:96:a8:51:09:de:b4:d9:40:d9:33:
ee:bc:3a:5b:3f:0e:fe:4a:2c:84:5e:6c:25:74:ae:
fd:01:b9:b9:f4:6c:4a:07:01:56:56:41:a9:87:99:
70:e6:d9:98:6c:0b:00:c4:7c:37:0e:e6:73:3f:3d:
75:2e:aa:87:c8:e7:67:51:9e:b5:7b:2e:12:66:5e:
5f:86:28:50:b0:d1:ef:de:56:0c:b2:4c:75:33:10:
e2:33:47:ab:f2:47:f6:01:47:9a:6e:eb:d7:4d:99:
ca:4d:b8:b9:c6:db:3b:a2:d5:8f:3f:1d:fd:37:8c:
13:ab:86:7d:15:ec:00:b9:ba:3f:32:0d:de:68:a5:
ca:72:58:7e:ee:34:01:6f:57:d5:a1:12:a9:87:27:
14:e8:11:b6:44:24:52:a8:51:e0:db:01:20:b2:08:
04:bc:3f:b9:ff:f0:42:c6:0c:db:f0:bd:95:65:5b:
63:11:1d:ee:ef:d7:b6:76:b6:ed:9a:7f:32:62:30:
8c:19:36:61:e2:ed:bf:88:c1:10:49:3a:3f:83:5f:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:40:A5:B1:8A:57:DB:BA:7A:38:58:73:AB:AC:D7:90:7B:DF:41:C7
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:53:67:72:e9:31:8f:31:f8:3d:52:8a:ba:89:6c:48:0f:68:
16:20:00:58:fa:84:e9:f7:f1:fc:ff:2a:8b:b2:25:b3:b0:b6:
95:09:1c:41:7f:1d:24:41:a8:51:0b:17:32:44:62:7d:94:26:
0b:48:31:87:9f:68:8b:95:19:38:73:46:98:39:d2:ab:53:af:
5a:7a:bd:d8:9c:71:a8:77:39:d5:c6:2d:00:c2:7a:b7:da:bf:
5d:c3:26:2d:5d:65:84:92:29:2d:53:fb:79:53:d2:a5:9d:dd:
78:0d:9c:46:b0:7d:22:7e:fc:c6:4d:43:0e:a4:ad:44:4a:ba:
45:14:90:73:89:f1:e6:56:64:97:3d:dd:9a:b8:8f:e8:8f:fc:
11:cc:6b:49:43:f3:7b:a2:6f:76:91:b0:6e:63:a8:7a:91:9e:
54:dd:c8:58:1f:2b:e1:35:fb:02:0f:5b:9f:08:15:27:81:4a:
83:f8:c4:bd:c3:6d:ef:0e:0c:84:63:a2:56:c6:44:0f:0b:88:
7c:37:65:89:2f:9e:a5:61:f2:74:e1:27:a0:12:01:08:8c:86:
83:0a:b6:0e:ae:d6:e1:a9:99:da:c5:d4:21:72:19:44:5c:4d:
69:f4:58:0c:4f:03:2d:16:2f:b0:33:07:25:fd:2d:2d:31:6b:
4b:d6:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:48:01 2025 by rpki-client