Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: ob1nyvovoO0GnP8tsfCshWP1VH6lLVHVGrXQyIU3pVY=
Subject key identifier: 47:7C:27:95:BB:12:44:B1:10:0A:3E:57:E8:0C:0B:4A:1C:75:22:E5
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 01974A7A5217FF1C6D6481F582EE4ECAD706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 13:00:19 +0000
Manifest this update: Sat 07 Jun 2025 13:00:19 +0000
Manifest next update: Sun 08 Jun 2025 13:00:19 +0000
Files and hashes: 1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: PPFhTnWpZJf/BGn5CWlBKelo6ErmgHJ8S8K3VpHqXLE=)
3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:52:17:ff:1c:6d:64:81:f5:82:ee:4e:ca:d7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Jun 7 13:00:19 2025 GMT
Not After : Jun 8 13:00:19 2025 GMT
Subject: CN=477c2795bb1244b1100a3e57e80c0b4a1c7522e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:01:a8:f3:35:4b:f3:72:7b:38:85:ec:72:
a9:7f:72:0c:f5:96:2e:c2:cd:e1:c7:83:34:c6:94:
eb:d4:d7:13:d1:50:83:a5:3a:a3:90:6c:15:97:39:
e7:b9:8b:d8:b1:80:6e:d9:b7:29:2e:c1:30:a2:97:
e5:be:e7:30:95:76:98:fd:fc:bc:33:fc:e3:2c:98:
df:9b:d2:06:44:76:b5:47:67:65:64:ff:c0:cc:49:
2c:99:d7:7c:e6:96:eb:0a:61:06:f0:46:23:5c:7f:
88:25:45:4e:93:76:5e:00:92:45:dc:99:25:23:b5:
b8:f4:09:5c:4b:0d:71:81:54:b3:6f:a3:34:28:27:
d3:9a:b1:35:bb:1c:fa:3c:61:2d:cb:52:bb:3a:e1:
86:fd:a8:db:47:46:d3:5b:67:91:bf:11:4f:1c:d6:
8f:87:d6:6d:8d:50:8e:45:99:a3:8d:b4:5e:b9:ab:
ae:17:5a:7b:40:60:79:b0:b1:14:22:cc:5b:22:fb:
bc:4c:06:55:1f:35:94:2d:49:ef:ec:89:c7:35:c4:
fd:4d:53:71:67:b8:74:db:f8:ed:a3:bd:88:57:95:
8b:83:8f:cb:42:69:c5:dd:32:ac:a4:d9:d5:d4:7a:
cc:f1:6c:75:7b:c0:bc:8a:a7:7b:6d:0f:1b:03:d6:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:27:95:BB:12:44:B1:10:0A:3E:57:E8:0C:0B:4A:1C:75:22:E5
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b1:d9:c0:6e:fa:56:e5:a6:c3:a1:19:49:2a:f0:56:b4:a7:
94:9a:66:12:87:c5:36:4a:ea:a6:70:1b:19:49:80:c6:74:60:
e9:a2:f6:3d:3c:76:c1:2a:1e:45:ea:25:80:4e:bc:69:b3:91:
2c:25:6a:bf:59:b0:be:c9:d1:45:88:2f:c3:e2:42:4f:0d:91:
bc:06:4b:2a:fb:ff:6e:91:bc:b3:b6:8a:28:5f:1c:85:b3:d7:
d9:d4:32:09:2c:ed:b2:a7:e1:ec:1d:9f:98:64:c1:e7:7c:52:
ee:9d:aa:38:c9:62:31:91:08:84:a0:ac:30:0a:a2:85:be:44:
e3:5e:33:d4:b3:0a:24:b0:46:b2:8c:5f:75:37:88:e6:73:81:
30:0a:0c:9e:ae:c4:ec:f6:ce:61:78:d6:aa:60:14:17:b0:0b:
5a:34:34:95:d9:ef:6f:97:83:81:88:36:9d:27:31:ce:72:84:
73:6b:95:73:43:56:cd:8a:32:b8:8b:8f:c0:50:32:12:30:d4:
b0:4c:3c:e3:76:c3:5c:d6:73:1a:2f:65:13:ad:f4:d2:3c:b6:
ea:e8:67:ff:97:73:d4:3b:84:b1:6b:04:bc:d2:fb:1b:75:32:
29:9a:b1:ac:2f:61:dd:58:83:47:d6:be:4d:65:5d:93:f2:e4:
a1:3e:cb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:12 2025 by rpki-client