Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: yEUOrB7FT7jW1anGKQl7vPlJZDiBOUZXCrSDCyJ4zBk=
Subject key identifier: 9A:F5:43:BF:FE:92:15:BD:ED:F2:D9:05:DA:7D:AE:60:76:F0:9D:74
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 01975791355210F98D33864112D880AF1DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 1583
Signing time: Tue 10 Jun 2025 02:00:23 +0000
Manifest this update: Tue 10 Jun 2025 02:00:23 +0000
Manifest next update: Wed 11 Jun 2025 02:00:23 +0000
Files and hashes: 1: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: /gJO4a2e1LBUjHyDDKXfd9zlhsM+GaIAqn6K7OPURE0=)
2: qMVYOgqIzk9KMROylZiVtF-t3Zc.roa (hash: xqIRDpc2sFOdr1/l4Pzbo0nNaeEXShJ8C0GuGpTGneI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:35:52:10:f9:8d:33:86:41:12:d8:80:af:1d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Jun 10 02:00:23 2025 GMT
Not After : Jun 11 02:00:23 2025 GMT
Subject: CN=9af543bffe9215bdedf2d905da7dae6076f09d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:37:ad:e4:35:ee:eb:5b:3b:f0:90:bf:0b:
11:55:5e:d8:76:eb:1d:b8:9b:af:4d:02:7b:f9:b5:
56:22:2d:0b:e8:62:db:bd:a1:8f:bc:bc:1e:24:be:
c8:c3:10:15:62:e6:cb:ae:2c:45:b6:10:3e:d6:ab:
60:ef:09:87:26:b6:49:68:53:7d:e4:3c:91:69:ab:
3b:1a:f0:60:cd:5d:3a:54:bd:8e:be:3e:b7:d9:76:
e4:36:eb:c2:fc:ca:78:d4:03:20:ef:03:77:1e:60:
7a:5d:9a:3c:65:f8:b6:45:68:3f:f8:96:a3:f8:64:
cf:e5:a2:0b:6d:ac:c8:3d:0f:71:73:60:09:31:4a:
64:b1:96:20:e0:88:4e:8b:cb:26:e2:00:d2:d1:49:
7d:4f:27:67:bf:f0:c1:40:a2:00:4e:28:3a:61:04:
2c:c5:9e:df:50:27:e0:1e:97:df:72:fa:36:62:fc:
da:35:e2:3b:10:a4:39:5c:55:6b:24:4b:91:98:6e:
00:5c:89:25:be:a0:12:7c:e3:91:b4:88:cf:6c:65:
fe:10:a4:03:84:ed:07:30:dd:68:67:2f:a3:81:7a:
53:87:c5:f7:9b:eb:af:72:4c:79:fc:5e:85:0d:32:
a6:28:ec:24:73:ac:1d:80:6e:42:84:13:bb:09:52:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:43:BF:FE:92:15:BD:ED:F2:D9:05:DA:7D:AE:60:76:F0:9D:74
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:59:6f:d4:62:b2:e1:fc:b6:d0:d1:0c:f9:ef:d6:63:73:c7:
cf:0b:1c:46:36:60:32:17:e6:90:92:0d:07:32:b3:9c:65:3a:
f3:22:75:d3:21:08:d7:15:86:31:4b:3b:bd:5c:ee:8d:e0:3c:
c8:1d:86:b5:5f:28:37:71:f7:48:ff:b8:ef:4c:87:55:6b:da:
94:55:2d:f8:93:d3:4a:61:4e:a2:fd:03:ae:9a:ad:3c:5f:db:
4e:d0:20:e3:ad:f5:12:c3:cd:5d:3b:b0:81:59:4f:16:71:9d:
d4:40:91:be:31:89:94:06:dd:05:18:6d:35:5a:9c:59:27:d7:
8a:99:50:a6:c6:6b:83:42:ca:2c:26:c9:f5:99:b3:07:9c:1b:
46:11:c6:86:54:9f:f6:ba:25:61:65:22:09:21:1d:9c:12:8b:
7e:24:f7:1f:35:cd:66:ec:1d:14:39:32:8f:ca:25:59:43:26:
ec:62:7b:6a:2d:96:6b:1b:e9:1c:93:9e:c4:31:ee:60:2c:13:
ce:e0:ab:b2:c0:9f:e3:4c:ce:bb:62:9d:f8:cd:6a:49:ce:2c:
a8:9d:95:e9:1e:a2:73:d5:1c:ce:4b:d7:29:26:65:a0:99:f8:
89:86:7e:5a:d2:e8:dc:4b:cd:c4:78:c1:7d:48:6f:f8:af:17:
bb:15:df:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:30:10 2025 by rpki-client