Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier: ldz+gIoMmStniertNdlohHs3160rpz+b5HQ0wpxuMk0=
Subject key identifier: F1:BC:54:B3:9A:8C:CF:25:A3:F6:07:33:9D:8F:34:74:81:14:53:6F
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 01958B16717152FEA38A743C4348A9E13213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number: 1176
Signing time: Wed 12 Mar 2025 16:00:58 +0000
Manifest this update: Wed 12 Mar 2025 16:00:58 +0000
Manifest next update: Thu 13 Mar 2025 16:00:58 +0000
Files and hashes: 1: NwaNp5L0RusVDFFM4pIExblfTEU.roa (hash: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=)
2: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: 96QBhlGFuHDQGZuG3qbJ+2dPUTVnDuwwdmYchndiJfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:71:71:52:fe:a3:8a:74:3c:43:48:a9:e1:32:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Mar 12 16:00:58 2025 GMT
Not After : Mar 13 16:00:58 2025 GMT
Subject: CN=f1bc54b39a8ccf25a3f607339d8f34748114536f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:f3:5c:d0:19:3f:eb:00:b0:a1:d0:21:ec:
26:17:68:32:47:ce:55:b5:26:92:d2:3d:d0:9e:dd:
fa:80:96:ab:ec:8a:a8:5a:67:1f:f8:98:e7:ef:7b:
14:36:08:3d:7f:ee:4d:de:11:49:c9:1d:87:02:9a:
d7:5d:ac:86:ad:0e:91:6a:30:5f:c9:27:40:1e:af:
a4:74:0a:e7:8e:af:19:05:94:e7:1c:bb:ba:41:de:
20:83:ae:b9:0b:4a:7d:72:df:9b:ec:09:ac:f1:e1:
2b:5d:a7:b5:76:d5:9a:22:05:3a:55:21:dd:78:01:
48:8e:ad:2f:c2:6d:05:c6:dd:ab:be:6c:c4:a4:0b:
40:b8:e1:42:cb:e9:33:6b:ca:9b:6a:ff:c9:5c:7b:
1a:9d:3a:5f:24:bf:ee:c3:7f:cb:06:96:04:9e:df:
49:1e:21:8b:a6:13:cd:a5:45:72:c4:b0:a6:ec:a9:
8b:8a:78:c5:7e:b4:46:9f:e3:f5:25:3b:82:91:56:
e1:d0:33:08:c7:a1:e2:06:22:a6:d4:4d:4d:44:3f:
bc:d6:53:8c:ca:59:b4:8b:90:5d:d7:aa:3b:78:97:
9d:89:9d:6d:bb:8c:b6:08:87:1a:7d:78:b8:42:be:
70:13:2b:2f:2c:b3:69:3f:71:bc:e7:a0:de:92:9f:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:54:B3:9A:8C:CF:25:A3:F6:07:33:9D:8F:34:74:81:14:53:6F
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:9f:8e:ec:d0:8d:f8:62:c2:c5:10:cf:9f:67:60:ef:57:69:
ec:dc:44:57:3f:7f:f1:64:1a:5e:b0:3c:02:5f:42:dd:dc:8f:
34:f6:70:b8:e8:4b:de:db:d8:89:3f:81:af:bc:90:66:81:3f:
e7:00:b6:f8:ca:48:cf:84:a1:3c:ef:94:7d:6d:36:10:31:86:
7a:0b:1b:df:76:2c:d0:a3:ef:2b:4a:97:fd:84:79:31:ed:e3:
ba:54:a0:3b:4f:56:f5:95:76:54:9a:d0:36:2c:b8:3e:96:03:
40:82:f9:2f:c4:1e:c7:11:c4:8c:d6:38:d9:3e:85:13:23:26:
8c:e0:d1:e5:6b:47:a2:4b:3a:13:49:70:63:17:17:4b:51:a7:
27:38:97:48:00:73:93:d9:3b:92:25:42:5a:71:ca:fd:27:2e:
fd:10:16:04:6c:7d:cf:f9:a1:3f:b5:0a:9e:f0:77:35:85:ab:
6b:90:fb:fc:12:76:3f:6d:6d:5c:2c:3d:15:25:17:d1:0f:de:
73:e7:68:25:e8:24:34:ec:33:db:47:ac:06:35:1e:96:e0:25:
60:86:f1:53:aa:ce:a4:d5:c2:39:7a:e3:19:22:30:56:a2:79:
f4:ea:a3:33:8a:88:a8:de:58:64:20:0f:1d:86:eb:1a:09:84:
c8:48:50:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:33 2025 by rpki-client