Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: v/qZDjQy11Z6g0ZvezJTmizFl4z//5fz4CilwtX959Y=
Subject key identifier: 59:59:1E:87:C4:16:F3:4D:DC:7F:DB:D1:40:94:E9:6A:1A:E7:95:14
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 019652A476F8D7350CB9F592768F49796B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 10:00:32 +0000
Manifest this update: Sun 20 Apr 2025 10:00:32 +0000
Manifest next update: Mon 21 Apr 2025 10:00:32 +0000
Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: dw8BTTlXISnDrG9X6G/mOqUzOCVbaHO6/XqR47OvP/k=)
2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:76:f8:d7:35:0c:b9:f5:92:76:8f:49:79:6b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Apr 20 10:00:32 2025 GMT
Not After : Apr 21 10:00:32 2025 GMT
Subject: CN=59591e87c416f34ddc7fdbd14094e96a1ae79514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:3b:b6:83:82:9c:1e:a0:1e:00:c5:8c:ec:
c1:56:4e:1e:9b:9d:9f:25:70:cc:38:f7:d5:fc:72:
0f:ee:43:c4:e3:7c:89:ee:5f:d3:f9:41:eb:ff:39:
a0:48:f0:a4:d0:fe:17:74:cc:1b:89:f8:26:46:cb:
9f:3f:86:38:9e:4b:97:11:77:2a:8f:df:02:ee:ff:
9b:07:8c:f4:98:4f:df:f3:00:62:25:bf:46:50:69:
d3:58:18:3c:22:8c:68:72:22:e3:68:ea:27:a9:e6:
5f:b8:35:94:33:85:eb:e2:7f:af:2f:d4:c3:00:7a:
6c:52:91:f7:dc:9c:91:c6:d6:7f:b8:e6:97:44:35:
65:e1:80:1a:79:d1:4a:b2:a8:9f:d8:53:de:51:1a:
b2:7a:60:f6:8d:05:28:94:69:f0:97:3b:61:e7:63:
12:8b:ef:80:ce:4f:1f:38:b7:0f:23:6a:f9:93:04:
33:7b:52:58:cc:af:f0:16:d0:40:35:69:f7:dc:29:
1e:73:7d:35:8f:6e:48:ff:ec:d0:60:17:4a:03:e0:
e2:55:5c:8a:29:8b:cc:aa:a1:00:61:28:d8:d6:b3:
81:94:dc:39:a1:a6:0d:62:c4:7f:e1:5a:99:ba:54:
a9:f3:64:81:bb:d5:a5:ee:90:0e:3f:5d:ac:dd:7e:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:59:1E:87:C4:16:F3:4D:DC:7F:DB:D1:40:94:E9:6A:1A:E7:95:14
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fd:2a:29:0f:60:0f:99:f4:a1:e4:b2:c2:5b:eb:b4:e3:5f:
a2:46:2c:49:f3:3c:14:6e:13:da:20:2d:b3:00:a8:08:76:d3:
1d:c9:40:75:7c:58:ef:96:28:51:72:29:79:73:58:b0:dc:d9:
3d:08:26:0b:5a:7f:ce:c9:29:69:91:75:41:d2:a9:0d:6a:4d:
e7:3e:7a:d6:27:37:94:11:74:19:4a:46:81:2c:b4:2f:6d:50:
16:be:62:68:9e:2d:76:d0:b3:fb:3e:69:43:6d:4c:af:20:67:
9e:01:7e:bd:ee:3f:a3:1b:70:6b:61:11:04:0a:05:dd:b3:96:
5b:18:09:2f:0d:06:5a:43:ca:01:8a:67:81:3e:21:52:5f:31:
ee:8f:cd:26:5b:65:7f:ab:6a:37:ce:33:17:6d:ac:af:0f:45:
46:74:12:83:1e:cf:90:0a:e1:d3:9b:8f:ad:0e:3e:16:f8:f7:
d9:32:a1:53:7a:d1:ff:dc:aa:8f:24:36:58:bf:54:18:35:31:
05:03:57:e0:c8:c0:82:c2:4f:90:d8:06:90:1f:2a:98:a8:bd:
f5:1b:e2:57:18:36:cf:86:60:ed:20:a4:5e:56:79:80:89:65:
92:4c:94:0e:6c:bc:c9:3d:8d:09:de:41:95:e4:f9:d2:2a:ec:
dc:33:04:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:43 2025 by rpki-client