Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: nZZziUtbBw1NdmySZ+pwl2HsqoTuh1J4T3NHhSeZLi4=
Subject key identifier: F0:D5:AA:AF:5F:13:11:16:56:EA:D2:02:06:F1:13:4F:24:84:60:95
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 01965C4C28806D0999C7899DEC46FD9FC011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 07:00:16 +0000
Manifest this update: Tue 22 Apr 2025 07:00:16 +0000
Manifest next update: Wed 23 Apr 2025 07:00:16 +0000
Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=)
2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: p/W76xqg4kgtU0r9vFxrhUSOmb5ymbf6fTUJbfnWbMk=)
3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:28:80:6d:09:99:c7:89:9d:ec:46:fd:9f:c0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Apr 22 07:00:16 2025 GMT
Not After : Apr 23 07:00:16 2025 GMT
Subject: CN=f0d5aaaf5f13111656ead20206f1134f24846095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:79:39:54:69:31:b7:74:6b:5b:c3:8d:f4:
cc:17:18:b6:4e:ec:83:60:44:30:f2:c1:7a:36:3a:
05:14:8c:97:13:63:6c:bc:bd:a2:79:aa:a3:8e:1a:
89:b8:40:a5:67:9d:a0:b1:9d:c8:14:90:0e:f0:ac:
cd:fe:67:56:d5:46:a8:f5:b2:d2:77:c0:fa:78:9c:
f0:c6:6a:fa:49:40:e3:2b:a8:dd:c7:42:b2:6a:ba:
93:90:c4:bd:f7:99:49:87:7d:e9:c4:18:66:7d:ce:
21:d4:6a:a6:0a:67:a0:39:a5:aa:50:62:e6:ea:f3:
50:2e:e7:07:2f:75:32:18:c4:01:5e:5b:55:d6:4c:
97:cf:c3:d5:cb:c0:bc:32:11:96:77:4f:7f:24:c3:
69:40:32:e0:9c:de:a5:51:43:3a:05:1b:da:04:b5:
cc:f1:37:8a:8a:b7:7d:a9:69:79:fc:d5:e8:c3:1c:
e3:8a:8c:87:90:08:75:f6:3d:b2:da:36:26:c9:d9:
b6:87:b0:a9:b9:7c:f6:a7:b7:87:a9:64:79:c9:6a:
ab:f5:a2:0a:9e:0c:a7:52:31:c1:f5:c0:d2:84:02:
ea:27:d1:e7:01:f5:7c:7e:51:97:58:d0:71:17:e7:
cf:03:de:35:bd:a1:0a:48:96:57:ba:36:b6:fa:fb:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:AA:AF:5F:13:11:16:56:EA:D2:02:06:F1:13:4F:24:84:60:95
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1f:0e:5b:af:3f:45:1b:f2:bb:a2:db:85:03:13:d1:47:17:
2e:d2:77:1c:29:2e:e4:7f:9b:d4:7b:ef:67:44:43:64:da:6e:
13:17:40:55:18:1e:be:8c:9c:48:24:88:a1:f9:fd:9a:7a:e2:
6e:5b:ee:f7:0c:24:a4:6c:6c:ee:16:af:32:d0:74:e2:70:a4:
88:72:0a:61:2b:cd:69:3b:86:62:64:6d:cd:0e:5c:a5:ad:0c:
f2:68:40:bb:9f:d5:f5:ba:e9:e2:26:02:b7:95:0e:ae:3f:46:
ab:34:a0:ef:ec:2c:7d:a2:18:ea:50:71:34:45:d9:63:78:64:
97:47:1e:4c:49:f4:cb:3b:c4:87:69:b9:1c:75:13:01:ba:f2:
94:28:78:ab:75:0d:ed:23:e9:b7:22:3e:24:42:47:2a:86:3f:
96:08:bb:38:eb:6a:0e:5f:47:ef:ab:16:87:13:1b:20:e6:6f:
6e:17:dd:77:ef:e5:81:35:25:0e:35:8d:7d:98:0e:bf:d1:28:
d4:45:ad:73:13:ad:1e:2c:3a:24:fc:b5:48:cb:33:7d:96:83:
db:dc:d1:7f:90:c4:f1:28:b0:f2:2e:71:00:39:69:84:07:71:
b5:e7:3f:47:b5:d5:8b:00:9b:4b:52:0d:92:7a:36:60:e1:dc:
52:87:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:59:00 2025 by rpki-client