Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: sKG/WDeoiK2FipjGthYIQrmg9WBLbmwHViAGVJ+8PwA=
Subject key identifier: A9:C0:88:65:0A:18:68:F8:F9:8F:AD:96:1E:FB:92:FD:D0:05:53:25
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 01974D0DB3725268F9B06A10EC3D8E6FFBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 0A1B
Signing time: Sun 08 Jun 2025 01:00:32 +0000
Manifest this update: Sun 08 Jun 2025 01:00:32 +0000
Manifest next update: Mon 09 Jun 2025 01:00:32 +0000
Files and hashes: 1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=)
2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: hyLyVBB2/adJ/E5d/X+6D06NneRwvfD4pW2afgKvxfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:b3:72:52:68:f9:b0:6a:10:ec:3d:8e:6f:fb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Jun 8 01:00:32 2025 GMT
Not After : Jun 9 01:00:32 2025 GMT
Subject: CN=a9c088650a1868f8f98fad961efb92fdd0055325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:f4:32:d6:6f:88:f9:f9:52:55:39:43:63:
84:69:f1:bc:ef:74:26:a6:d7:a1:67:67:75:bf:6c:
95:7d:c4:06:8d:2a:1e:92:e0:a0:e3:3e:55:d0:1c:
29:35:57:03:16:09:99:14:33:2f:2c:42:b0:0a:d4:
a6:a2:29:e3:ec:e6:24:60:e7:95:53:bd:54:dd:c3:
f3:10:41:7b:0b:5d:e8:0c:30:59:8a:22:d6:d5:4f:
e6:d2:f9:c4:ed:6f:6c:97:fa:11:49:a0:69:90:ec:
82:48:58:c5:fe:f0:58:3c:c3:e5:6b:eb:8f:6b:8b:
e8:c5:67:97:26:27:69:62:c4:03:48:39:5d:7c:38:
b0:6b:32:a1:f4:11:cb:00:e3:79:9a:2c:e3:98:a2:
20:f6:c1:3b:53:38:ed:28:f2:a9:b4:f8:5a:5f:36:
35:37:df:77:a1:bf:62:55:89:f0:db:c6:ab:50:ce:
d8:f3:fc:35:3a:7f:2b:83:cf:1b:cc:0f:83:88:33:
a8:d1:e2:60:61:8f:e6:20:e6:3f:d4:7a:9b:b6:8d:
95:01:f0:73:2a:e3:c7:b9:d0:fd:34:e2:f4:8c:a4:
39:73:21:47:04:d1:e6:bb:fd:1e:72:23:b7:3e:34:
41:46:5f:b9:92:d9:3c:c7:45:7b:f8:60:d9:46:39:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C0:88:65:0A:18:68:F8:F9:8F:AD:96:1E:FB:92:FD:D0:05:53:25
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4a:3e:78:66:ee:c2:a9:26:f0:57:77:2f:f4:72:c0:fa:3b:
4e:1d:3f:11:67:3e:25:10:ed:93:78:d2:f9:90:e0:b6:f7:fb:
05:d7:f6:f9:a3:f0:69:68:a9:41:1d:01:2c:90:e9:0b:9d:d5:
d3:82:bb:93:83:70:37:c4:3f:e8:77:7a:f7:bf:cc:d8:1c:a8:
a4:1d:5e:0d:3d:a2:00:6f:3e:97:c4:49:5c:d5:54:c8:82:69:
1a:63:23:b9:0b:82:d2:70:32:65:34:03:d7:bd:b6:d5:95:5a:
ec:91:ba:bf:02:2c:64:db:72:cd:89:6f:ed:c3:78:4d:5f:78:
86:3a:e0:a0:a8:72:3a:9d:c7:29:e5:77:0f:81:d2:34:f8:39:
a6:9c:4a:99:55:ce:a5:29:e5:35:5b:33:72:18:ea:aa:11:9b:
7d:1f:0f:f3:57:4b:28:6a:c2:1b:e2:15:68:0d:23:d7:93:56:
ba:6b:13:61:2b:ea:3f:c9:0a:2c:c6:86:96:79:eb:15:03:cc:
df:94:c8:13:8d:f4:c6:05:99:65:ec:5e:0b:de:0e:52:89:e8:
d2:a0:64:74:40:30:58:db:4c:3b:98:00:93:ea:6b:fe:a7:7f:
c2:39:d8:7c:bd:f2:2a:ce:68:3e:b2:1c:4c:1d:74:c2:44:fa:
db:0f:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:03:40 2025 by rpki-client