Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: 9ByiUUAbbj7jsnxaIlwactcETYkTAAXLp/izriUWnqI=
Subject key identifier: 59:AC:02:D4:9E:17:92:90:4F:1B:0B:13:F6:65:C9:69:18:12:22:83
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 019748557FD03EC5120A0CB83C24B7760DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 033D
Signing time: Sat 07 Jun 2025 03:00:52 +0000
Manifest this update: Sat 07 Jun 2025 03:00:52 +0000
Manifest next update: Sun 08 Jun 2025 03:00:52 +0000
Files and hashes: 1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=)
2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: 0i4QV4GgxRtdMLS0qxJ6uGrP4v16dZgt7GtRYU6fplA=)
3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:7f:d0:3e:c5:12:0a:0c:b8:3c:24:b7:76:0d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Jun 7 03:00:52 2025 GMT
Not After : Jun 8 03:00:52 2025 GMT
Subject: CN=59ac02d49e1792904f1b0b13f665c96918122283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:14:b6:a7:44:a9:3d:74:5a:0f:ec:31:64:
0a:0a:02:96:f1:1a:36:9d:69:45:8b:78:73:9a:47:
ae:26:a2:ff:1f:08:6b:7e:75:bd:b1:6c:3d:d4:39:
f5:fd:17:f8:0f:d0:53:79:98:58:80:10:dd:08:8e:
83:87:d3:7d:46:5e:70:c1:34:dc:2d:f8:05:46:6d:
61:3d:21:05:8a:f8:5f:5d:4d:80:55:d4:a5:f0:82:
e9:06:39:f7:4f:16:c4:6a:6b:fc:b3:b5:6e:a2:d9:
bd:de:11:2a:89:b5:20:36:84:bb:28:42:04:8a:12:
80:d1:ba:cb:59:bb:ba:aa:6e:c2:c8:89:0f:d9:64:
d4:98:0a:fc:97:05:d0:8f:16:39:9d:73:94:03:f0:
64:34:1e:28:bd:d4:c0:47:29:8a:d2:e1:20:be:61:
ab:de:dd:0d:1e:98:1f:78:d1:74:31:42:3d:3e:aa:
e9:cd:ab:65:c6:59:b3:36:2e:d0:81:8b:96:d0:d3:
b6:2d:5d:79:9a:d0:0d:ef:ac:0f:60:7b:f0:c3:14:
bd:0e:54:cd:51:fd:ab:9a:3e:bf:b6:03:ef:69:f7:
b4:c6:e8:25:4a:d6:fe:9c:87:29:fe:b8:e9:25:ff:
d7:5c:cb:23:3a:d2:9a:6a:11:a6:bb:e9:e4:0e:d1:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AC:02:D4:9E:17:92:90:4F:1B:0B:13:F6:65:C9:69:18:12:22:83
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:96:8f:03:10:cb:c6:e0:2e:60:08:a2:03:d4:ef:f0:9b:
97:8c:8b:c6:36:bc:94:54:47:4b:9c:15:d0:26:78:55:4e:2d:
7d:0a:3c:0c:e9:1b:24:7b:3d:ce:48:53:85:8e:c8:82:33:59:
90:57:2a:3c:0b:d0:73:78:45:42:f5:04:9a:05:06:fb:8b:d2:
1b:36:7b:65:67:46:c3:03:db:68:63:8d:ef:e6:73:1e:2b:bb:
19:52:81:04:a3:4a:05:05:b2:8e:87:bb:7a:d2:d8:d6:19:1d:
ff:8d:e4:35:79:90:10:da:ab:43:4c:14:85:b5:ec:3b:41:59:
b7:49:66:db:38:9d:7e:54:0f:63:a2:74:85:35:49:f0:d3:c8:
14:06:cd:12:34:05:a1:c8:ec:2a:6c:2c:3e:2d:b3:0c:fc:f0:
e5:64:27:57:74:01:25:e1:fd:c9:73:c7:e6:72:27:3a:9f:a9:
c4:74:84:97:87:8a:f6:db:39:b2:8a:4f:7f:f7:ad:4a:3c:8b:
5e:86:6c:28:a5:c8:7a:87:fa:81:20:a0:d1:a3:71:55:29:05:
7a:40:ed:34:23:18:74:5f:5b:aa:5c:3c:8f:c4:7f:3c:01:31:
5d:b3:3a:4a:9f:54:70:75:ee:c4:8e:75:e5:62:88:00:06:b2:
a5:d1:2e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:53 2025 by rpki-client