Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: z+PP46Qb6ZU2OrPdtea6OX9TRBGSWSQBbHpwLTZI8mI=
Subject key identifier: 33:49:CB:CE:5C:73:E9:C3:C3:63:3E:71:68:77:19:9F:4A:D8:53:5F
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 01974DE993F67668C71D4D83FCE8C7DFC8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0CA5
Signing time: Sun 08 Jun 2025 05:00:42 +0000
Manifest this update: Sun 08 Jun 2025 05:00:42 +0000
Manifest next update: Mon 09 Jun 2025 05:00:42 +0000
Files and hashes: 1: DRrOJLgDL5rmiSF6D3RMJURdhRI.roa (hash: 7NgLPdqIa5BkuBXQmhxzkicPEWRt/mYhR9CY8DkwoYg=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: XNhCylMxIvHd5aeOC5SyivvH0ywwN1fv9IETXamTEEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:93:f6:76:68:c7:1d:4d:83:fc:e8:c7:df:c8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Jun 8 05:00:42 2025 GMT
Not After : Jun 9 05:00:42 2025 GMT
Subject: CN=3349cbce5c73e9c3c3633e716877199f4ad8535f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d7:cd:7e:0d:43:63:2f:0d:b8:29:9d:7f:e8:
9c:cb:75:4b:d3:87:8b:48:cf:d5:6a:cb:96:23:67:
9b:02:db:45:ff:0c:6b:7a:09:1a:8b:d8:60:e3:da:
7c:92:02:c4:2e:68:52:e4:ab:07:15:ed:9d:88:e8:
45:02:b4:75:dd:8d:8f:78:a2:c5:df:8d:cc:b2:5a:
80:ec:05:7a:10:e8:60:3a:85:41:73:16:dd:a2:67:
25:33:dc:2e:d5:b5:ca:ad:07:59:2b:7d:23:61:55:
d3:a8:7b:0d:02:0f:c4:f8:01:a4:ff:26:ca:bb:d4:
54:a6:8c:a2:86:41:e0:26:35:98:e7:a5:14:d7:5c:
57:dd:e2:a7:ee:28:38:69:43:a4:4b:47:5f:4e:be:
79:4e:d4:aa:e5:4c:9a:d7:37:e3:ac:f0:c9:08:72:
fd:7b:65:d9:ec:ee:1b:97:44:45:c4:56:9f:0e:04:
f0:89:04:50:47:bb:d8:bb:13:93:f5:04:94:ca:39:
bc:20:ff:24:ff:ba:d9:3f:10:6e:61:18:31:d9:89:
ee:52:96:d4:f5:a8:8f:c3:1e:46:fe:0e:75:c1:02:
08:b6:c6:1f:03:31:0f:c1:20:2e:b2:31:4d:19:70:
c7:f4:a1:8c:4a:66:44:cd:92:80:21:1c:31:af:cc:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:CB:CE:5C:73:E9:C3:C3:63:3E:71:68:77:19:9F:4A:D8:53:5F
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9c:be:67:44:16:a9:e0:1c:dc:d0:b4:f0:83:f0:44:b5:d0:
38:6d:97:b8:17:2c:fc:75:39:9b:ef:e8:08:ae:dc:53:07:b8:
6e:94:21:e9:25:f5:0d:29:52:73:a7:67:19:80:bc:f0:ab:fa:
8e:e5:e9:56:41:57:f6:e3:24:16:01:4c:1b:0a:45:a1:4d:78:
42:f5:41:b1:3a:d7:f0:ea:ce:42:e4:30:38:52:53:77:4d:5e:
63:d4:7d:a3:60:c6:35:d2:ed:34:c9:da:4c:72:fd:f2:b6:e9:
a6:9c:b2:a8:5b:21:6d:63:11:32:a9:58:97:52:be:f4:48:51:
f3:9d:4a:b2:d5:b0:98:80:0b:1a:24:d9:b3:ea:93:8d:80:05:
16:14:d0:46:8e:7e:7f:b9:3e:fc:fc:40:be:74:7d:79:c3:0c:
8b:19:3f:e9:43:4d:e5:45:f5:22:50:5d:5f:01:eb:61:75:08:
28:18:50:05:37:50:62:3c:2b:b4:2a:89:17:59:98:be:a5:be:
b0:ce:8c:b1:07:70:f1:8f:04:bb:ae:b3:68:e4:c1:49:63:35:
74:22:b8:12:a6:bc:30:fa:7f:d7:bc:d5:d8:44:5a:b8:45:ef:
47:86:15:b7:78:a7:4b:7d:19:57:fd:05:4c:90:76:64:13:50:
8e:fd:ca:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:32:03 2025 by rpki-client