Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier: 4B7+rmpFclkMQ9BOnk2HMRC+Ua5rpx0Kigj1p/96m1A=
Subject key identifier: 38:51:79:DC:1E:5E:5E:08:60:89:30:B7:2A:3C:D7:45:3B:9E:FE:64
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 01974D45278C9B145A7021080BDD399CFD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 02:01:07 +0000
Manifest this update: Sun 08 Jun 2025 02:01:07 +0000
Manifest next update: Mon 09 Jun 2025 02:01:07 +0000
Files and hashes: 1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: KBGNMqLUTw6/rfxPsI0SMbGd1DIArl1Xcc5armtnKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:27:8c:9b:14:5a:70:21:08:0b:dd:39:9c:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Jun 8 02:01:07 2025 GMT
Not After : Jun 9 02:01:07 2025 GMT
Subject: CN=385179dc1e5e5e08608930b72a3cd7453b9efe64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:09:13:36:c6:6f:3a:9a:d0:9e:9e:12:d4:
81:51:62:7d:ae:f8:3b:7b:dd:cd:24:9f:05:ca:cf:
71:36:18:ae:1c:d7:be:d0:1c:61:48:13:7f:c3:c9:
71:8b:25:b7:86:bd:a5:ee:01:48:80:68:59:17:8a:
4d:ef:11:b4:8a:80:ae:73:54:df:f2:a8:78:9a:e4:
0b:c2:77:eb:62:f3:e5:a4:06:3e:ac:9d:e5:a4:98:
ca:db:4a:e9:00:da:b7:c9:11:e5:67:7c:13:07:4b:
8c:d3:2f:51:a0:ad:dc:1c:a6:ee:ea:9c:10:b3:56:
d1:f6:c2:07:2d:f5:e4:fe:2b:30:2f:29:b6:75:51:
2f:65:31:ab:61:f5:8d:70:02:d7:e3:29:a8:96:f8:
cb:b9:ed:45:3f:0b:d6:c2:51:de:eb:82:ae:65:13:
62:6a:dd:6f:3a:5c:75:d5:64:15:5f:aa:e6:a0:ca:
d4:47:a9:aa:f4:70:b7:48:66:bf:48:6b:3e:85:2b:
e2:28:63:cf:1c:67:28:09:66:8c:30:54:82:20:69:
85:45:50:72:db:83:98:1c:1a:ce:1f:ad:b5:eb:3e:
55:ed:eb:dc:db:9a:69:5f:d6:1d:83:34:87:cf:3e:
de:3d:9a:c3:37:1a:7e:0e:da:f4:0c:bd:98:fe:6f:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:51:79:DC:1E:5E:5E:08:60:89:30:B7:2A:3C:D7:45:3B:9E:FE:64
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:28:d8:33:ac:ad:d3:cb:dd:aa:6a:ac:cd:0c:b2:93:4c:e5:
e7:3e:83:db:5f:f3:f7:01:77:7b:ff:27:da:b4:69:44:b5:6f:
4d:1e:e1:94:c7:fb:24:33:fb:b2:f3:29:e4:a0:6c:f6:e9:6f:
bc:8f:53:92:54:0a:95:e9:c1:f0:ac:07:fe:91:f5:8c:ed:b0:
8a:a1:10:08:1e:8e:32:2d:27:71:aa:af:79:d2:a4:84:16:62:
c0:4c:1d:43:d4:eb:16:48:d0:6e:ba:f7:60:a1:61:ee:4b:c4:
de:8d:00:cd:9f:94:9b:68:62:21:da:46:8e:93:bd:69:85:e4:
fe:2a:9b:f1:a7:a6:ae:f0:04:5b:41:71:21:75:1c:a0:c2:cc:
21:fa:56:3e:be:ba:34:ea:26:9d:96:fb:87:99:1c:d2:b5:c6:
fe:b5:02:09:e6:f0:62:f1:55:a1:8b:69:96:06:a3:b8:ce:09:
6e:68:60:4f:b2:e1:e4:89:7f:02:05:a0:03:dd:d9:53:50:c9:
6a:ca:8a:46:c0:6e:52:18:e9:4e:16:24:81:5b:ac:87:1b:03:
a7:e1:a4:48:24:38:f4:5b:2f:75:46:aa:a4:3c:9a:ee:fb:17:
7b:08:66:3d:78:f8:f2:32:f3:98:b9:4e:23:5f:de:3f:09:84:
b1:1a:da:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:56:27 2025 by rpki-client