Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: yNDBb9RA7qWVQ4MaU0C7gx2+bQzemAIgWajZDqIubyk=
Subject key identifier: FA:55:22:38:8A:46:B2:EB:11:03:09:63:D7:CD:5A:17:34:96:46:A4
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 01974C9FA84CFA49D0AB4A9DE00D04759AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 23:00:21 +0000
Manifest this update: Sat 07 Jun 2025 23:00:21 +0000
Manifest next update: Sun 08 Jun 2025 23:00:21 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: bACv2qQzvkwe/U8IyI2GA+BYMnwVFWXYerdqw6V/u7g=)
2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:a8:4c:fa:49:d0:ab:4a:9d:e0:0d:04:75:9a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Jun 7 23:00:21 2025 GMT
Not After : Jun 8 23:00:21 2025 GMT
Subject: CN=fa5522388a46b2eb11030963d7cd5a17349646a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:3c:25:dd:78:c0:f9:2a:ad:04:47:bf:e6:
ea:f4:cb:44:50:85:40:9a:73:b5:15:7d:4c:62:7e:
83:6c:a7:06:6f:f7:75:03:2b:58:5b:64:84:3e:9e:
46:a0:dd:b4:98:bf:b3:06:9b:53:d1:a5:ae:a7:ce:
4b:91:72:ac:86:cf:a8:db:db:48:79:f8:e6:45:7e:
39:c4:c0:cb:03:13:08:61:1d:3e:d4:1a:0b:d2:ff:
66:f9:07:33:69:96:bb:22:97:56:6f:b8:51:78:ea:
6e:58:f8:26:43:b7:b2:aa:e5:60:69:29:36:b5:87:
b5:fe:3f:1d:e9:06:84:37:88:87:90:a0:ee:ce:b0:
bd:f6:22:48:76:cf:83:01:32:a9:ea:6f:02:e6:b1:
e6:b6:ba:4d:6a:f8:c5:6e:c8:2d:3b:4f:95:a3:1b:
70:57:b0:5a:8f:da:66:5b:68:c2:3c:ae:d9:66:e1:
39:b9:f9:73:e2:56:b5:37:49:1e:58:1d:c1:28:d9:
c3:46:60:ba:19:ce:93:33:08:55:09:57:24:49:ed:
d9:34:73:e3:d2:c8:f3:34:4e:a1:d4:95:e9:69:68:
2b:5b:26:d6:55:35:ad:e9:5e:f3:90:34:a0:9d:c1:
61:07:a6:fc:27:18:63:88:c1:c7:19:bb:d3:7e:b7:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:55:22:38:8A:46:B2:EB:11:03:09:63:D7:CD:5A:17:34:96:46:A4
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fd:d8:1d:00:ba:fa:22:83:dc:89:d1:37:b8:9c:c3:7e:ab:
09:c8:8c:c5:31:c4:f3:16:30:09:9f:3f:de:40:51:24:5a:c9:
5b:cf:f8:f8:8d:6f:ad:a0:90:dd:cc:e5:8d:ef:db:42:f0:28:
2f:d2:62:f1:b9:ba:d0:5f:68:a1:c8:e0:9b:85:5c:11:19:7e:
3c:6f:10:b0:13:c5:b6:eb:64:51:13:a4:ac:ed:99:81:9b:26:
66:0c:53:33:cf:0a:7c:3a:a5:f2:40:71:66:0a:f0:93:d8:91:
42:6c:4e:17:e5:be:b9:ac:c0:75:d8:6e:0d:01:dd:8d:47:81:
64:49:79:48:e8:db:05:5f:1b:cd:a2:e1:77:24:5a:cb:6d:74:
22:b2:a2:84:73:4a:ae:af:83:f0:c6:1f:0c:68:c4:01:dd:71:
a5:2c:fa:71:d2:55:15:68:f2:9b:2d:07:8d:a3:bf:85:c3:88:
de:d5:5e:6f:a4:de:7b:8f:06:b2:c4:42:88:b9:c3:16:68:08:
16:ba:df:04:7e:bd:3f:9e:6b:76:04:15:82:b1:d7:95:99:e0:
c0:3f:ef:e8:55:a5:2b:40:b6:ec:f6:7b:93:b0:8c:fa:6e:34:
d7:29:f6:ad:71:2b:7f:79:3a:36:61:00:a1:02:a2:ed:df:dc:
a5:70:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:33:33 2025 by rpki-client