Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: Q7W/hHRrXgCzuFeBZlu8sO2M0u9xaHRQslsBhV0SNhY=
Subject key identifier: 7E:11:32:BF:6C:65:A7:1F:0A:4E:EF:D7:0C:D8:4E:AB:EE:29:6D:73
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 019739193CC1461EFC249FF4F6A0A994FDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 1342
Signing time: Wed 04 Jun 2025 04:00:44 +0000
Manifest this update: Wed 04 Jun 2025 04:00:44 +0000
Manifest next update: Thu 05 Jun 2025 04:00:44 +0000
Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: dwK/8kEwMYUx8ubBmaVD8pokf49e3isLWBBmsNGfg44=)
3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:19:3c:c1:46:1e:fc:24:9f:f4:f6:a0:a9:94:fd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Jun 4 04:00:44 2025 GMT
Not After : Jun 5 04:00:44 2025 GMT
Subject: CN=7e1132bf6c65a71f0a4eefd70cd84eabee296d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:05:a4:e4:d9:4d:36:9a:07:c5:7a:27:39:
80:15:ae:01:9b:ef:7f:ca:df:78:79:26:ee:ae:9b:
a3:b9:75:eb:99:52:14:5f:a6:3f:c2:d1:0a:24:6c:
19:c9:57:81:0a:a4:da:ba:04:ed:80:63:01:1d:ba:
bc:dd:0c:2f:a6:70:65:3d:b3:dc:c8:c9:92:9c:f8:
99:1f:28:e7:eb:e0:4c:db:bb:0e:c6:ca:d5:e6:f8:
46:13:cd:96:84:dc:71:54:7d:a1:dd:11:06:04:29:
df:6b:d0:f7:d5:5f:d1:f2:9d:53:a8:13:53:1b:fa:
fc:cb:89:e2:59:7f:15:95:84:41:ce:e7:42:94:82:
89:86:3a:9e:34:3f:cf:89:82:bc:43:9b:95:7a:3e:
f0:ea:08:80:35:7a:5c:26:9a:82:16:d9:7a:ce:54:
d5:80:45:94:f2:04:8a:d2:88:3f:59:c0:43:df:56:
5d:5a:60:bc:0a:60:5a:dc:3b:45:40:e4:c6:f7:cc:
6b:7a:f0:09:25:a8:6e:00:1c:d1:30:d8:d1:9c:8c:
c9:a7:85:ba:67:f9:28:c1:19:7c:58:ae:bc:d4:a7:
1e:b6:c6:ae:c9:63:2d:61:4f:4b:7b:27:ae:cc:e3:
ce:87:59:b7:bf:6a:e6:1f:f4:36:ce:93:16:29:d1:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:11:32:BF:6C:65:A7:1F:0A:4E:EF:D7:0C:D8:4E:AB:EE:29:6D:73
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:55:dd:4b:79:e3:7f:2a:d4:a8:22:e2:0a:11:b9:9a:07:5d:
45:4b:d2:ea:8b:85:3f:53:16:e2:51:c4:e9:1e:b1:17:88:31:
0d:e0:88:0b:1e:34:fd:bf:bc:f0:bb:43:09:22:b1:8d:cb:21:
cc:c3:81:ae:53:7e:0e:88:e9:34:a6:d6:38:30:e9:b1:92:52:
2b:48:21:32:2d:aa:ce:62:84:41:2c:81:15:46:eb:b9:43:c5:
f7:47:cc:92:5d:5d:82:c3:6c:ba:b4:04:87:8a:6c:b7:4b:c6:
ac:20:2c:87:f3:62:47:85:d5:3d:23:45:ad:75:54:b3:39:4b:
9b:91:c9:11:52:ef:3d:45:3a:e8:ca:7d:6d:d1:6f:9f:b6:06:
74:d1:b2:90:98:3c:87:5a:ce:df:0f:fe:16:2f:0b:46:26:46:
8e:6a:b7:67:ed:e3:58:71:63:d3:17:97:28:a2:12:be:43:5d:
1d:f5:fe:07:b2:67:c2:5f:93:ad:39:f7:cf:4c:03:c5:39:55:
b7:24:96:59:a6:50:ad:2f:e4:2a:74:25:3a:48:f9:8b:19:bc:
08:7d:61:fc:53:6b:02:73:1b:9b:09:32:65:61:6e:7f:62:4b:
7c:1d:73:6c:08:e8:36:81:70:fa:56:43:5b:5d:c9:74:ea:ba:
3f:e5:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:18:13 2025 by rpki-client