Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: 2fLvM/LKbHXwSOjgpx9UQEoX3Dr5ZBLoR2CxYdoPHRg=
Subject key identifier: 4E:C5:61:21:E4:79:44:3E:E8:D2:30:31:8A:64:DA:A9:AE:C4:77:89
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 019649334C96F3265F3179E40E3E9C8DCF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0C1E
Signing time: Fri 18 Apr 2025 14:00:20 +0000
Manifest this update: Fri 18 Apr 2025 14:00:20 +0000
Manifest next update: Sat 19 Apr 2025 14:00:20 +0000
Files and hashes: 1: DRrOJLgDL5rmiSF6D3RMJURdhRI.roa (hash: 7NgLPdqIa5BkuBXQmhxzkicPEWRt/mYhR9CY8DkwoYg=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: xyzWDw/rGYgYKVOMmhOkATpqNIHdjhwATKJQlJdQKnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:33:4c:96:f3:26:5f:31:79:e4:0e:3e:9c:8d:cf:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Apr 18 14:00:20 2025 GMT
Not After : Apr 19 14:00:20 2025 GMT
Subject: CN=4ec56121e479443ee8d230318a64daa9aec47789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:52:5b:0d:56:84:ca:72:19:41:5a:70:34:
59:b2:78:6f:99:a4:eb:ee:17:3d:49:a9:a7:7a:2c:
91:db:eb:05:9a:83:de:b9:9a:57:16:b4:5c:d1:39:
71:08:66:6f:43:dd:1b:58:44:08:0f:24:16:9e:ef:
4c:69:65:fc:df:33:4f:97:d1:04:d5:22:15:d4:75:
d6:03:f1:53:90:29:65:8d:39:f8:f3:aa:e5:62:d5:
40:3a:a9:5b:1c:47:c2:17:63:65:79:5d:ca:8c:f7:
02:5c:2b:78:ef:27:8b:8f:1a:6f:12:8e:38:4b:80:
1a:e9:7f:05:fb:e4:b6:f2:ad:b9:83:c0:a6:10:8b:
ba:f4:00:29:f0:44:62:f4:9c:70:63:a2:0a:c8:55:
b5:c4:07:36:2c:7f:c9:bb:dc:91:b6:64:8c:55:cd:
1c:4e:75:1e:c4:b0:ee:bf:55:f8:20:50:d3:a0:25:
b9:b8:d5:0b:80:dc:0f:2b:4a:98:8a:dd:d7:de:e0:
2d:49:3b:00:e3:3c:ef:58:b7:49:60:10:78:f2:6a:
87:06:5c:dc:d9:21:31:17:9a:4f:a8:39:33:32:96:
27:a1:a8:ef:04:af:af:34:ab:4e:b9:e5:3a:8c:2f:
83:1c:67:a0:4d:9d:aa:8c:82:77:b2:1c:1b:46:49:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C5:61:21:E4:79:44:3E:E8:D2:30:31:8A:64:DA:A9:AE:C4:77:89
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:94:b4:af:c1:50:4f:4c:17:2e:97:f5:33:58:0a:a6:0c:a2:
32:49:50:f9:bb:59:9f:50:e2:34:41:bf:7d:c1:3c:ac:93:a2:
51:e4:33:5d:96:95:bf:cb:4f:3a:8a:5c:ec:e5:73:78:38:7b:
81:19:9f:e0:ba:5e:ca:ea:2e:dc:0b:2f:40:87:fe:af:ac:cc:
8c:ad:ff:ba:3c:a1:3a:c7:35:8a:d4:74:05:68:d7:9f:15:0f:
71:e7:71:7a:15:70:47:27:d4:e0:4e:5f:e5:e0:55:f7:58:7b:
a5:32:fa:98:ad:9c:ce:79:ba:2a:1a:eb:76:c6:ad:d1:68:f7:
a5:80:ec:39:98:85:ac:f5:e3:5c:6f:a7:0d:30:0b:1a:58:2d:
4f:d2:ef:b2:9e:d4:2b:74:81:dd:d5:97:8f:22:89:6c:ae:e6:
fb:e0:42:2b:f7:f2:c6:4f:6c:9d:c4:1f:8b:c9:76:b0:8c:50:
b0:5d:48:5d:f9:55:35:b8:47:02:70:d4:08:da:df:e0:82:5d:
73:8e:57:72:a0:30:dc:cb:38:2c:d3:04:c2:b4:0a:aa:b9:80:
7e:1e:6f:6d:1e:61:df:02:79:dc:07:4b:cd:81:b8:b8:50:d9:
aa:12:9e:53:59:7c:03:0f:62:28:02:59:a3:63:52:b5:c0:6b:
90:02:2f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:31 2025 by rpki-client