Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: mrlFzJm8JH6R+1bl7Anxjti8pahYc9X7IYDiScXCXfw=
Subject key identifier: 55:B3:49:C2:F4:CC:A0:25:D2:7F:13:16:93:66:B9:E3:A0:82:62:B3
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 0196458D7BB649329166D347EA97CD7BE723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 104D
Signing time: Thu 17 Apr 2025 21:00:22 +0000
Manifest this update: Thu 17 Apr 2025 21:00:22 +0000
Manifest next update: Fri 18 Apr 2025 21:00:22 +0000
Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: 3Hc+fDR/pijmVsS8IJADJ27RgQkmRo4f0KBeswmOPSU=)
2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=)
3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:7b:b6:49:32:91:66:d3:47:ea:97:cd:7b:e7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Apr 17 21:00:22 2025 GMT
Not After : Apr 18 21:00:22 2025 GMT
Subject: CN=55b349c2f4cca025d27f13169366b9e3a08262b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:57:88:fa:c1:36:aa:38:f9:ed:92:c5:fd:
41:59:73:11:9a:75:59:a4:9b:02:d7:5b:cb:5e:90:
33:f9:d3:d9:da:8d:1d:13:3f:cd:99:4d:36:03:55:
6f:28:6d:81:32:4b:d4:9d:69:42:52:1a:91:b0:17:
ad:ff:8b:0d:c5:6c:8a:13:ba:25:3a:d1:5a:f1:07:
b2:ba:e5:d2:2a:8f:db:de:8e:88:e5:72:8e:82:c5:
41:0e:1c:68:2b:d9:16:ad:ae:9f:19:49:f4:02:99:
32:e6:de:0c:e9:52:c0:42:26:6c:b5:99:c4:7c:2d:
bf:44:66:41:73:51:cc:1d:1b:83:37:58:85:ce:2c:
b0:2f:89:d6:8e:5c:44:38:ac:7f:93:d5:b9:20:28:
3a:ff:a3:45:c9:d1:8d:51:a8:89:0c:8a:bd:a5:1f:
6a:a4:05:5e:45:21:e3:a5:6c:9a:58:df:75:d7:de:
54:be:f7:d0:95:81:6e:24:39:17:26:e2:92:1a:43:
7e:60:2a:0c:24:62:91:dd:57:21:83:9d:0e:73:91:
8e:b2:c8:a5:58:50:cd:ac:5d:4c:90:4e:19:ca:07:
c5:2b:08:36:ad:7b:45:27:9f:ca:7d:ff:ec:b7:9f:
52:2c:4d:df:f2:6a:a4:33:38:79:3b:87:c8:3a:37:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B3:49:C2:F4:CC:A0:25:D2:7F:13:16:93:66:B9:E3:A0:82:62:B3
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:87:2b:d5:e6:c8:8b:2f:65:0d:aa:03:06:d7:09:6a:50:f6:
7f:eb:6e:8a:27:4b:d9:08:ea:f2:63:07:32:80:a4:3f:a5:e7:
b5:10:0c:d4:14:f9:87:53:09:ae:46:02:96:3f:9c:ba:a1:bf:
47:f0:94:4f:70:88:8e:fe:c5:4a:c7:23:da:13:13:a5:18:32:
86:44:4e:63:38:a3:af:a7:9c:20:17:af:7e:f5:3a:eb:4c:18:
9d:95:10:d6:61:bc:e7:0b:37:23:7f:83:99:c9:ab:6b:b5:af:
82:4a:97:d0:d5:1a:e6:90:d5:f2:de:6f:d2:7a:b0:cb:2e:be:
a3:ff:83:18:0f:36:94:e3:3b:0d:bf:48:dd:75:79:d9:4e:42:
0c:82:49:0c:98:28:71:b9:71:9e:b0:06:c7:44:4a:41:62:64:
95:b6:3c:31:95:c1:cc:e2:58:2e:68:36:61:61:be:74:7e:30:
62:0a:98:87:21:e1:1a:cf:2d:96:31:82:8b:0a:bb:5b:1a:94:
81:61:a6:ea:38:26:b7:fe:f2:87:bb:fa:df:e6:a2:d5:d8:8a:
a2:76:46:04:6d:20:0f:b5:e9:34:77:26:ed:b2:b9:0d:08:d7:
32:10:7b:9d:00:bf:6c:97:ac:cc:a7:fa:1a:a2:94:08:75:e6:
4b:dd:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:46:41 2025 by rpki-client