Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: Bnq6Nb+enUUAH3TtTnACqwUeJ2DD7qsTs9wllXL6Mrw=
Subject key identifier: 0C:39:7B:7E:EE:2F:B8:D3:04:66:24:D8:BE:30:05:BC:68:42:56:C0
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 019652A4BF22E856EF8043E7378E354FCB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 0467
Signing time: Sun 20 Apr 2025 10:00:50 +0000
Manifest this update: Sun 20 Apr 2025 10:00:50 +0000
Manifest next update: Mon 21 Apr 2025 10:00:50 +0000
Files and hashes: 1: 3M1TxPnQnA1R328Hu_a_wxQuHzg.roa (hash: wZ4I7gpvm8WkSPRAAsw+HtDMICYMh2x7/+qhpYWtEVk=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: W5d+nD3nLDgbxouQSyxZjmfTNcjrOHBY9Ll2qplqsqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:bf:22:e8:56:ef:80:43:e7:37:8e:35:4f:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Apr 20 10:00:50 2025 GMT
Not After : Apr 21 10:00:50 2025 GMT
Subject: CN=0c397b7eee2fb8d3046624d8be3005bc684256c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:1e:5c:27:f8:c8:16:d5:54:de:04:0c:ca:
e1:f5:f1:c0:29:fb:8a:bc:bb:33:14:5a:5f:35:19:
68:76:a4:75:85:13:60:17:1c:dd:46:8d:52:28:56:
82:6e:58:9c:4b:3c:e7:37:18:a9:27:10:da:44:08:
37:78:72:d7:06:0b:21:4e:01:38:a4:74:e9:3d:2d:
8c:80:e2:61:c0:65:ca:48:4c:a9:eb:38:da:e2:ff:
fa:5a:46:d7:94:3d:4b:fc:6c:d0:dd:09:b8:c3:26:
70:3c:c7:ec:fd:2f:ec:cb:98:6d:45:4a:a2:88:04:
3f:d4:e3:9c:56:e1:89:ca:5c:73:1d:4b:a9:85:e3:
72:05:d7:d7:6e:86:e2:46:50:92:1f:a7:25:c2:be:
e3:ac:5a:fc:82:b0:1a:2a:21:09:52:12:32:1d:b2:
9c:30:0d:22:72:b6:d3:5a:e9:a2:cf:1e:4d:6a:55:
07:fc:c6:77:5f:c6:fa:7c:38:bc:03:b6:39:98:b8:
dd:df:be:c7:09:ab:72:36:b8:b2:15:8a:3b:e4:d4:
5c:3a:c2:75:32:cb:b5:c8:6d:da:a6:bf:e4:77:89:
a9:ba:84:11:4b:b5:e8:88:e6:a7:79:e1:6e:e6:79:
fb:e6:de:99:c2:cb:09:ac:5b:97:a3:d8:30:9a:d5:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:7B:7E:EE:2F:B8:D3:04:66:24:D8:BE:30:05:BC:68:42:56:C0
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:77:f2:9b:41:17:ee:ab:e7:27:bf:8e:ea:0a:96:a6:cf:cf:
c8:4b:ce:fc:9d:5d:0c:c2:d4:97:60:36:25:b3:8b:87:18:f8:
0e:06:69:29:6d:dd:bf:23:44:d3:14:19:ac:35:5e:4c:49:95:
b6:55:be:4c:42:78:87:73:b3:fa:ec:a3:3e:da:20:25:1a:6f:
56:ad:f5:5b:c6:ec:43:53:ed:35:8f:55:7b:f3:93:e6:b7:5e:
56:1c:dc:01:ff:dc:2c:27:6d:88:6b:dd:fe:d6:a3:69:e5:20:
d3:ac:ac:02:81:d2:89:6e:e2:cb:e8:4b:f3:bc:43:bc:4e:a7:
2f:a8:24:c6:8a:c5:8c:b0:96:cf:9a:13:9b:40:8c:fd:47:0f:
28:8f:ce:40:e4:c8:2d:c3:92:ab:36:68:07:53:22:0e:47:29:
a6:8f:67:ee:f4:66:93:9c:fd:18:ed:ef:13:0a:02:6d:49:47:
bb:30:f0:37:fd:e4:c6:77:8a:8b:8b:f2:d1:c8:5a:4f:6d:75:
33:4c:13:98:84:7b:78:c8:53:07:d3:a4:91:06:5d:4b:a2:a0:
38:c1:81:62:ac:f4:78:71:97:73:ca:d7:06:a6:05:f1:46:50:
fa:f8:b6:51:d8:ea:bb:50:ee:ee:7d:c8:fd:dc:07:0c:22:59:
75:da:19:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:12 2025 by rpki-client