Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: cuAth5/oEqEjyjqka0WSL7dp03Qvw2fHoT8CUuVc524=
Subject key identifier: 1B:F7:4C:E1:30:22:A4:F0:FF:F5:59:93:13:E1:36:9A:96:A0:F7:5A
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 0198443EE117F96E8DDF16F411C5DF4B73F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0B52
Signing time: Sat 26 Jul 2025 01:00:28 +0000
Manifest this update: Sat 26 Jul 2025 01:00:28 +0000
Manifest next update: Sun 27 Jul 2025 01:00:28 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: +TeMmGH1Je9KrRK+Myj9ZkVZo33nI+/2kcUfKonC71c=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:e1:17:f9:6e:8d:df:16:f4:11:c5:df:4b:73:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Jul 26 01:00:28 2025 GMT
Not After : Jul 27 01:00:28 2025 GMT
Subject: CN=1bf74ce13022a4f0fff5599313e1369a96a0f75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:92:ad:25:ae:ae:f4:4d:82:f6:7e:4a:e2:
79:58:03:8d:a6:10:8d:b9:c6:5f:05:c3:47:8e:7e:
a2:56:6c:2e:94:e0:f1:2d:6e:a7:1e:5d:ea:a2:20:
15:3f:94:a3:69:e2:25:eb:b8:1f:93:6d:6e:28:d3:
6f:c4:8d:b6:2b:65:c1:6a:60:23:d1:84:ef:8e:a6:
39:28:a6:36:e4:66:05:a9:1a:3c:ff:5e:e5:58:bc:
4c:ca:15:0a:d0:10:59:1c:c5:c2:43:a8:fe:ef:79:
61:92:c7:ce:ee:4d:ee:de:0b:75:d9:8c:6d:b2:9b:
b2:bc:ff:37:52:7f:20:8b:f7:3f:84:c9:af:31:b3:
06:9f:16:31:e3:e6:89:cd:16:0b:ae:e2:33:fd:e0:
82:68:12:27:62:f2:8f:78:d9:89:85:62:a6:fd:d8:
d8:a1:d2:a6:9d:32:cb:0c:02:d3:54:e1:8e:d8:56:
a3:e2:59:e3:11:41:c3:d4:02:c7:6a:af:93:58:b1:
90:04:da:b0:3f:f8:2a:59:b1:04:b0:e9:b6:91:a6:
a0:13:bd:11:10:4d:8b:64:56:89:a2:a4:54:a8:ea:
c2:e3:04:6f:33:03:6e:74:3a:9e:96:65:2b:45:56:
72:4a:dc:a3:da:d9:13:c4:25:66:af:51:39:bf:45:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:4C:E1:30:22:A4:F0:FF:F5:59:93:13:E1:36:9A:96:A0:F7:5A
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:15:8e:a3:fa:0d:e4:fd:40:2a:d4:12:e8:04:f7:c6:ac:2d:
09:5e:09:85:17:0b:e8:55:b7:ff:e8:00:2c:72:11:6b:72:6c:
39:26:b9:6f:57:90:b8:9a:e9:34:c3:ef:52:fc:6c:58:b9:32:
5f:3b:a0:dd:d9:58:0a:89:4f:b8:4c:21:24:68:51:db:ad:81:
97:7e:d3:15:da:9a:15:41:d0:47:e5:f4:6d:79:13:c6:dd:20:
9a:f4:fe:9f:9a:aa:ac:99:88:51:a4:12:4b:c6:73:08:39:3c:
75:c6:25:d2:1f:b9:15:77:ff:f6:1b:a4:2d:62:8b:b4:53:c6:
2e:a2:1d:2a:04:98:24:4f:bc:fc:6a:ab:74:87:47:07:d9:97:
e2:13:b9:4b:d4:96:b6:e5:e5:0a:1d:bd:4c:63:43:b2:14:c2:
71:12:1c:02:ac:05:b3:32:93:91:33:79:e4:71:62:8b:66:42:
83:23:84:e0:b4:20:b9:c6:a7:07:24:1d:46:f1:35:d8:a3:34:
ad:f6:ff:68:10:2b:46:8e:35:cb:ba:11:d3:df:67:30:1d:df:
82:7e:d4:b7:57:72:6d:b1:eb:b8:19:e6:b7:14:8a:a6:1c:c2:
aa:96:27:b8:60:fa:a5:03:ca:14:96:52:cb:b3:dd:a8:76:c5:
63:7c:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:34:32 2025 by rpki-client