Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
File: T0Es0mmU-vYJva1ONdV2wsrkZVU.mft (raw, json)
Hash identifier: CaGLwwwFh4pPuKjQ0EcGhiKnXvLDd3QAHPPK91kpjb4=
Subject key identifier: 8C:0C:8A:F5:6B:0A:0E:8B:D3:D6:05:68:FB:9F:C1:37:42:13:96:A2
Authority key identifier: 4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
Certificate issuer: /CN=4f412cd26994faf609bdad4e35d576c2cae46555
Certificate serial: 019656EF451CD0B191179D163FE378C46834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 06:00:43 +0000
Manifest this update: Mon 21 Apr 2025 06:00:43 +0000
Manifest next update: Tue 22 Apr 2025 06:00:43 +0000
Files and hashes: 1: T0Es0mmU-vYJva1ONdV2wsrkZVU.crl (hash: QQUKQTVR6GhKzckq7eZFH+uxwhnellY/o6pN+HpuFNg=)
2: aNuMhZPoB5D8geUtVgUfLtn3hcA.roa (hash: kR0Yb3G1j8U1LWYfw43kMYf1t4xNNQqgRVkQzHfelvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:45:1c:d0:b1:91:17:9d:16:3f:e3:78:c4:68:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f412cd26994faf609bdad4e35d576c2cae46555
Validity
Not Before: Apr 21 06:00:43 2025 GMT
Not After : Apr 22 06:00:43 2025 GMT
Subject: CN=8c0c8af56b0a0e8bd3d60568fb9fc137421396a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:23:97:10:7f:0b:6d:06:db:db:f3:88:e5:
65:c2:77:c6:5a:4f:36:a6:e8:c0:14:c2:76:3d:ff:
ba:8f:9d:b5:6b:40:09:86:5f:a7:63:9d:c2:a4:bb:
4e:aa:b1:43:55:43:7d:c5:d1:a6:24:dc:01:2b:8e:
43:8f:27:47:19:02:d6:47:c3:3a:fd:0b:03:27:ae:
e8:91:a2:df:ea:ea:bd:8b:b6:f2:7c:ea:5f:98:b2:
ff:bb:c9:9e:ef:ff:70:3b:c0:05:49:39:85:71:8a:
95:e3:b3:82:73:b7:42:cc:9c:6c:94:ec:aa:3d:ec:
80:cd:99:b0:58:30:93:18:25:1d:14:d9:9e:86:36:
b4:df:78:6e:48:ae:80:23:5a:1f:f7:0a:0b:ec:73:
11:32:81:5e:82:46:fd:5f:54:86:40:fe:f9:fb:5e:
3b:e8:4e:76:e3:aa:99:d4:38:a4:58:53:c6:4b:b0:
78:73:35:3f:36:d3:64:4b:c7:f1:ba:7e:fe:26:6f:
47:58:ea:cd:7d:26:04:21:f1:46:03:55:fd:04:53:
7f:ad:b8:f2:99:be:29:2f:42:85:d7:15:03:97:c3:
76:fa:7f:df:d3:80:28:9c:fa:f6:36:ab:14:0c:79:
4c:a8:1d:50:88:b6:0a:44:8a:f5:7d:fa:74:97:ac:
3c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:8A:F5:6B:0A:0E:8B:D3:D6:05:68:FB:9F:C1:37:42:13:96:A2
X509v3 Authority Key Identifier:
keyid:4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4c:c4:02:de:83:26:01:5b:a3:17:ad:75:96:5c:4e:b3:34:
a2:76:ab:c4:38:ad:d4:a4:6b:74:de:df:b5:ac:f5:a8:5d:d8:
77:bf:b8:62:2e:3d:78:33:a3:aa:d4:18:60:cf:11:44:81:00:
14:e7:4a:c6:0e:15:1b:5a:df:f3:f5:67:45:e6:65:0f:bb:f6:
ac:05:07:56:ef:42:32:41:ef:b3:c8:9c:24:d8:09:6f:c6:8d:
71:98:5a:c1:06:c9:70:16:3b:0a:f4:6e:3d:92:0c:60:5b:0d:
ba:68:0c:1a:33:e8:f7:2a:9d:ee:60:d3:68:eb:bf:6f:9f:38:
c1:f2:29:57:2c:7b:25:e6:21:20:ca:d7:30:be:d0:96:2c:fa:
68:17:96:df:f2:c1:cd:a8:3d:57:df:6e:d3:ce:87:41:f2:50:
b8:87:0b:7e:3a:44:97:4c:9b:24:93:9b:87:43:17:b4:ac:b2:
83:88:53:3f:59:63:0c:59:9d:c1:6e:76:95:77:be:7a:e2:fc:
be:c4:dd:77:0a:df:2f:5b:16:47:54:08:da:c8:8c:f8:cd:bf:
da:5f:ae:fb:1d:25:5d:3d:9a:51:1e:62:7f:f3:3a:35:c7:b0:
b2:e4:2b:c7:11:4f:34:08:e7:56:e2:79:63:9b:aa:99:bc:68:
c8:c8:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:41 2025 by rpki-client