Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier: Lgqi7Tnmu/pEj9Ugb7FB0oQ4Yoiq3k+nREYPrEsxXS0=
Subject key identifier: 76:1C:41:47:49:50:50:EF:1D:A2:F0:C3:F8:10:0F:20:6A:22:1C:A0
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer: /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial: 0196B77E7B38FCEFC6AC204D4F3D6F254CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number: 0741
Signing time: Sat 10 May 2025 00:00:41 +0000
Manifest this update: Sat 10 May 2025 00:00:41 +0000
Manifest next update: Sun 11 May 2025 00:00:41 +0000
Files and hashes: 1: 33E6U-90LI21C0lkTnzQ6VfaiXI.roa (hash: t0pnwqLcy2OtfvtukL13J3l3uzKc9VJEEKWY4aTDjS8=)
2: KTNKEz9B68iNvMGQpqql8Umd6Rg.roa (hash: 4c3WZli6HrqpP5XT4I7aYzD+h8A8/oNoRJSDq9oByhk=)
3: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: ZF/57glxE26vxn0kONAcvCrDeLqRBiCt4C9gcpnnQVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:7b:38:fc:ef:c6:ac:20:4d:4f:3d:6f:25:4c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
Validity
Not Before: May 10 00:00:41 2025 GMT
Not After : May 11 00:00:41 2025 GMT
Subject: CN=761c4147495050ef1da2f0c3f8100f206a221ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1f:94:86:be:22:9f:ae:db:55:3d:47:ae:f9:
50:74:ac:a1:35:75:95:e7:49:ea:b8:26:1a:36:82:
4b:29:cd:be:f3:23:55:cd:ce:2c:2b:d1:3a:c7:ba:
bb:9e:0b:dd:82:87:cd:23:f0:64:fe:80:1d:fa:33:
eb:a7:b3:1c:56:11:66:8c:2a:47:98:c7:b3:64:7d:
64:98:9a:8e:cb:26:54:44:33:40:84:da:05:56:c5:
52:fd:96:97:48:29:60:85:e1:21:a1:75:7e:d7:b1:
18:f3:3a:3f:3e:96:9b:89:44:f1:d4:33:fb:2c:f6:
d2:7a:4b:1a:15:42:ff:aa:d0:d7:bb:36:28:fe:f3:
26:ab:b4:cd:fa:d7:f2:dc:f1:60:6e:bc:81:0e:56:
9f:d4:4b:9a:03:b2:ec:63:42:1b:4a:c2:05:79:29:
39:be:73:dd:4d:8a:e2:97:ca:28:aa:e1:00:50:72:
45:46:4a:96:ce:67:ea:fd:ef:23:f7:2f:fe:56:e8:
e4:74:b4:a9:9e:45:7a:e9:80:21:a3:29:95:58:ff:
f3:77:0e:2b:7e:71:2e:16:d7:a3:60:bf:c4:b4:d2:
88:bb:c7:c2:ec:83:69:8f:3b:91:8f:01:df:ec:50:
2e:28:d4:c6:de:ee:18:5b:92:72:37:dd:74:7b:01:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:41:47:49:50:50:EF:1D:A2:F0:C3:F8:10:0F:20:6A:22:1C:A0
X509v3 Authority Key Identifier:
keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:be:2a:49:d9:52:b8:92:30:39:b7:60:b7:a9:f9:8d:fd:d5:
d3:af:27:25:01:48:96:79:9c:76:84:4b:02:bf:a4:6b:98:85:
c7:be:c4:a8:20:78:cf:ec:b1:e9:d5:9c:17:d2:ba:0e:5b:ca:
50:91:7e:6e:3a:a6:8f:57:fd:ea:c7:6c:76:f2:b4:5b:2f:18:
c1:de:d7:30:0a:a6:e9:e2:b1:92:ec:33:6b:8a:25:57:32:19:
49:d9:00:59:5f:d0:c3:b5:8d:77:64:f9:96:52:45:32:35:78:
76:05:94:c8:fa:75:01:1b:bd:ff:f5:6c:52:2e:e9:15:74:7e:
77:e4:ec:1a:60:29:5f:7c:45:c7:1c:d3:56:7c:72:fc:8c:67:
3d:3b:dc:fd:39:24:ff:41:34:8a:f1:de:c2:b5:14:75:76:d0:
30:ab:1f:cf:6b:b5:25:d3:be:71:bc:dd:a5:e6:d2:df:d0:b5:
ab:67:1c:59:63:77:9a:d9:7e:43:e2:1d:94:a7:83:0e:46:57:
4c:54:e3:87:32:5e:22:64:73:93:15:b6:28:97:c0:01:66:1d:
d8:2f:58:d6:1f:d8:00:23:dd:18:11:40:12:2f:88:70:6f:9a:
fb:30:1b:d8:eb:cb:f0:b4:31:29:42:33:c0:8c:20:d6:58:32:
ee:ac:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:17:39 2025 by rpki-client