Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
File: T893EF-VB1zlhdQn6XdU6PAHqLk.mft (raw, json)
Hash identifier: HQwmBMgHRDcwjagf8UBD2GhU6ZG2Mb+EG9f1uNE3MfU=
Subject key identifier: E4:AF:F6:72:B2:4D:1B:1A:9A:98:52:6E:4F:05:33:DF:22:D1:4D:9E
Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Certificate serial: 019659144382416647415E8FB55F880C321F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
Manifest number: 0860
Signing time: Mon 21 Apr 2025 16:00:22 +0000
Manifest this update: Mon 21 Apr 2025 16:00:22 +0000
Manifest next update: Tue 22 Apr 2025 16:00:22 +0000
Files and hashes: 1: T893EF-VB1zlhdQn6XdU6PAHqLk.crl (hash: rYbHbRHtsn4rUkIUwN81pP0rhb/t+I70hhOn+FrSNOw=)
2: T9LZjeWP7v9MjImSQxwCyXQEIjQ.roa (hash: ryZ/pHb+xQxL2NrfTWfDmvDfQVr6T5F6jZbDhNZwl/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:43:82:41:66:47:41:5e:8f:b5:5f:88:0c:32:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Validity
Not Before: Apr 21 16:00:22 2025 GMT
Not After : Apr 22 16:00:22 2025 GMT
Subject: CN=e4aff672b24d1b1a9a98526e4f0533df22d14d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:cf:c9:f3:a9:11:b0:e2:52:75:18:56:15:
ff:64:4d:e8:92:e1:d6:14:ef:3a:59:65:2b:88:99:
10:71:66:bf:bc:bc:7f:5a:cd:49:8b:76:7e:e2:15:
b6:d4:c3:63:91:f7:5e:20:fd:0f:6a:fb:2b:98:ee:
f3:3b:c8:97:6d:80:c2:d1:5b:ca:03:19:c3:37:9a:
0e:47:2a:9a:97:0d:ae:66:bd:f8:0f:8b:f5:e2:51:
02:00:a3:bb:c7:7e:b0:af:c4:24:35:a0:80:6c:1f:
48:40:ae:58:e2:ad:00:92:93:19:04:cf:c8:20:21:
ac:7f:6b:8f:d1:ee:8f:32:6a:a3:b8:1f:b6:04:c4:
21:05:d8:a1:3c:69:1e:0f:38:4e:de:c6:ae:f2:b4:
e9:57:63:63:8d:83:a6:41:3b:a3:d4:60:0d:20:20:
d5:7b:1f:dc:d5:84:ad:e5:b9:26:de:e9:3a:e9:eb:
48:ea:76:ef:07:29:29:77:6c:8f:f7:e3:af:0a:b0:
df:4e:43:c7:24:87:53:f7:b9:15:a5:e9:cc:0b:d8:
55:30:be:69:ef:ad:c4:7e:98:29:84:57:c6:0f:c7:
22:33:84:d5:ba:96:31:89:cb:1e:8a:09:6d:d1:a2:
7d:98:69:4c:08:ab:c5:3b:c2:1d:f1:c4:3b:ab:7f:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AF:F6:72:B2:4D:1B:1A:9A:98:52:6E:4F:05:33:DF:22:D1:4D:9E
X509v3 Authority Key Identifier:
keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:74:66:36:d7:cd:ab:8e:c1:b4:b1:f4:60:bf:e0:23:24:6c:
b6:5d:96:d4:0b:92:1c:f4:e2:b0:f7:79:23:a2:af:79:74:7b:
4f:3a:e5:5d:e6:d5:67:98:c6:c9:8c:55:11:55:9f:eb:48:a4:
bd:90:6e:a3:fb:d5:55:57:2a:f8:5f:6f:d1:db:e6:1a:b0:8d:
11:94:56:de:10:77:5b:0e:8f:6b:ec:f0:68:b7:12:41:de:1e:
2b:9f:5b:b7:50:4d:fb:ee:dc:ee:de:42:22:cc:c8:0b:bd:dd:
4f:c7:e8:47:e3:9a:ed:2c:78:03:2e:39:8a:37:b2:22:9c:2a:
db:cc:c9:31:21:f6:a3:f1:f0:ea:44:23:ee:8c:17:7a:74:ab:
52:8b:6a:b9:73:ed:93:2a:a4:1d:f2:af:6d:e8:19:18:09:25:
d9:23:15:74:89:16:10:90:44:40:18:d2:c3:61:99:cb:94:16:
39:43:57:74:67:1f:2e:60:44:93:9a:3d:83:cb:a7:6e:5c:e7:
f1:ee:8c:95:e3:6b:3b:91:56:7e:33:98:9a:be:f6:23:2a:d7:
38:23:de:4b:43:fa:f0:a6:25:21:92:fe:9f:f6:45:a1:d9:6c:
19:27:ea:49:2c:12:37:9d:82:04:16:f0:f0:3c:49:63:c4:42:
cd:73:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:46:02 2025 by rpki-client