Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: 5/hfFPL4g/fVTMkc0Nyx/do38yNOU0k98qAP09ejq7c=
Subject key identifier: F5:3B:7C:50:07:71:BF:45:CE:B5:6D:FD:CF:EC:4D:84:37:A3:05:AD
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 019659F04C77BC2A4A194D7B0209C346E04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 0D97
Signing time: Mon 21 Apr 2025 20:00:42 +0000
Manifest this update: Mon 21 Apr 2025 20:00:42 +0000
Manifest next update: Tue 22 Apr 2025 20:00:42 +0000
Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: 21Dk0wKjn6F08yk06iJtwu2irq6EDyxUNS/3d75iZns=)
2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:4c:77:bc:2a:4a:19:4d:7b:02:09:c3:46:e0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Apr 21 20:00:42 2025 GMT
Not After : Apr 22 20:00:42 2025 GMT
Subject: CN=f53b7c500771bf45ceb56dfdcfec4d8437a305ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:64:62:a2:8f:fe:74:56:dc:ab:b4:aa:d7:c1:
56:4b:41:73:04:0c:66:fb:cc:5a:ca:a2:ec:97:07:
cc:e8:6a:04:e6:34:0e:34:f9:e8:f7:bf:94:a6:5f:
a5:51:ef:f7:fb:31:0b:94:05:84:4c:4b:05:c6:a2:
d2:75:08:fc:6c:21:c5:e3:c7:07:df:b4:fe:ab:05:
e2:24:2f:17:e0:3b:2a:35:f6:9e:dc:27:5e:66:29:
9d:0a:1e:47:b5:94:02:9b:10:0f:7b:a2:6c:8a:76:
02:a7:fe:d1:64:b6:ce:84:ee:ea:43:7f:d0:67:d4:
ba:5c:12:26:7a:17:9b:c9:99:dd:b9:d0:21:ed:50:
04:e5:45:ab:9a:cf:b7:1e:e8:67:1c:0e:a5:b3:ee:
5b:b2:d1:59:9a:25:48:f2:96:e0:e5:d3:48:bd:4a:
50:73:2b:c2:eb:2b:33:a1:95:4d:56:78:c1:fa:2d:
cf:fe:9b:37:cd:49:ce:f5:40:60:ac:18:50:06:bf:
2f:ab:f5:65:b2:2e:63:53:7b:80:da:00:f9:cf:b9:
fb:bc:0b:ac:a5:b0:9b:f5:e1:48:3a:ae:89:fa:b9:
11:83:03:d5:58:35:c4:f3:9f:36:ed:f9:c8:96:23:
22:17:cf:c7:ed:26:82:a9:23:f3:e3:0f:1e:8a:0c:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3B:7C:50:07:71:BF:45:CE:B5:6D:FD:CF:EC:4D:84:37:A3:05:AD
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:89:c9:ec:e8:ee:b7:91:f7:ad:63:c1:34:eb:db:f4:05:b8:
f2:6b:c4:bd:b4:d8:78:14:d7:ea:ef:c3:b1:ce:de:5b:73:d6:
42:26:ad:7f:24:34:12:3b:f6:36:93:c5:00:81:ab:6e:d8:89:
72:66:de:0c:74:de:90:40:79:3f:84:2a:d0:4b:23:14:88:33:
62:eb:f3:09:9e:73:b4:c6:9d:ea:3e:e8:6e:4d:5d:ba:c9:6c:
bd:5a:36:cf:03:d5:be:34:75:67:76:eb:ed:d5:66:ea:3b:7b:
ba:28:b3:9a:0e:67:62:a1:52:a1:e0:7f:71:79:0a:da:cd:0c:
5e:1c:6e:2f:ff:a8:e7:13:96:90:25:fb:f1:c0:0f:38:1b:07:
1d:7b:c2:65:3a:e3:f1:84:9b:94:de:3b:ac:05:57:ca:22:99:
3c:4a:71:10:66:96:0b:a7:39:69:6b:34:78:f1:61:ac:df:59:
6c:91:37:e7:28:58:e4:fc:82:da:30:08:20:a4:ac:d5:19:98:
0c:0b:6d:c8:4c:87:bb:01:81:ae:0c:68:69:ce:ad:af:61:9b:
21:b5:ad:28:21:fd:bb:e5:ff:15:89:c3:4b:c0:14:db:60:f7:
e6:ef:fe:21:52:3b:0e:fc:43:6b:5b:52:00:35:71:10:8d:09:
f1:b7:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:33:32 2025 by rpki-client