Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: +/sl7BEH+UqaSC5MYbuX3qIPaAxiXtuHk74tOKNYrAA=
Subject key identifier: 1C:48:75:97:22:89:FC:FC:A0:3D:5F:B0:A8:14:6F:B7:10:EA:2B:40
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 019748F9E3D27FB9EE77DB76E303F4F0BA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 0227
Signing time: Sat 07 Jun 2025 06:00:25 +0000
Manifest this update: Sat 07 Jun 2025 06:00:25 +0000
Manifest next update: Sun 08 Jun 2025 06:00:25 +0000
Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: 37r57rjfhHaOu2Q8nIk7sZ5kwF7qtTsJ+oTlcFLhvBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e3:d2:7f:b9:ee:77:db:76:e3:03:f4:f0:ba:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Jun 7 06:00:25 2025 GMT
Not After : Jun 8 06:00:25 2025 GMT
Subject: CN=1c4875972289fcfca03d5fb0a8146fb710ea2b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:d0:21:3f:f4:ea:bd:8c:2c:24:b5:b7:22:
11:8f:c7:87:c0:58:7b:97:af:7a:10:f8:4c:41:52:
da:dc:91:7f:64:33:8c:ff:75:ad:13:1c:30:f0:1c:
cc:a9:0d:9b:b6:0c:bd:5d:e6:88:65:52:aa:2b:bf:
d0:0f:2c:b4:a3:59:4a:cb:81:31:db:2d:0c:a2:5e:
29:05:1f:4d:fc:53:2e:f1:a9:41:4e:f3:1f:af:0b:
27:46:b8:e9:14:f1:88:d7:d3:04:71:3e:c2:79:71:
e8:81:e1:75:36:d4:d6:75:0f:a6:e0:90:84:89:a6:
33:31:a4:e1:4f:6e:38:39:04:f8:38:da:5c:e9:78:
db:5e:ee:5d:07:b5:a1:01:fa:c0:2d:b7:eb:6d:9f:
73:39:ed:29:52:7f:7e:a8:4e:be:03:4c:6f:b2:e9:
67:b1:ab:25:a3:62:1f:54:84:9f:ff:22:17:92:72:
23:c7:10:9c:51:2a:0d:d6:c1:be:9d:97:6b:4b:0a:
10:de:0f:95:94:33:3e:e0:62:0f:ec:28:21:58:4d:
1a:2a:8a:47:6d:0c:b3:73:1f:fe:16:79:ee:f7:9e:
fa:5e:bf:cd:c6:6e:10:7a:dd:b2:8d:1d:cf:3e:9c:
0e:00:52:cf:3c:8f:2e:7e:7c:f0:c7:31:db:86:9f:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:48:75:97:22:89:FC:FC:A0:3D:5F:B0:A8:14:6F:B7:10:EA:2B:40
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:cf:79:af:21:de:e1:32:8b:6a:62:6f:13:7e:33:9b:94:
53:89:3f:af:e7:f4:dd:1d:60:1e:24:6a:c7:9c:76:14:5b:5f:
3f:da:52:b0:41:fc:fe:3b:70:35:e1:f5:f8:c5:68:f0:a0:9c:
02:8b:21:0d:43:69:ae:42:aa:c8:a4:b5:b7:a2:19:8d:e6:eb:
4d:0d:ba:57:7d:2a:18:bb:a7:54:ea:02:f6:20:dd:d2:2b:a3:
5f:37:8e:c1:38:52:70:c3:01:ba:56:b4:f7:26:01:b0:b2:bb:
3a:8a:b4:a4:e7:9a:e9:35:ca:ed:26:f4:24:b2:94:95:bf:71:
de:f3:0f:80:1c:a5:03:08:e8:c1:46:a3:2a:74:88:16:8f:6e:
da:45:ec:91:aa:11:8c:ea:ab:1f:12:ae:cf:41:d3:73:91:20:
16:f1:55:dc:78:2e:71:fd:91:01:28:eb:df:91:67:54:e0:93:
71:a1:ba:f1:a3:59:f0:7a:35:f6:4e:8f:a3:bc:35:2e:82:2c:
8b:ef:2f:5b:b5:9e:5d:22:61:9c:08:02:b6:d4:ce:0a:51:79:
74:11:c3:d3:12:bc:39:50:3b:b5:a8:3e:b7:c6:64:4a:37:09:
80:13:14:06:b8:84:13:44:76:04:2e:99:1f:32:e1:53:c5:37:
d2:ae:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:16 2025 by rpki-client