Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File: T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier: ZY90nh/G2W4bmq61tqRI58kUDj9Wp1xL8HoQZ64hQHk=
Subject key identifier: 76:52:A5:7C:49:3F:D8:AF:25:87:8A:13:7B:9D:DF:27:9A:2C:29:CD
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 01963E0BA2F2ADB3EC1E47299F0B2A85C80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number: 14F8
Signing time: Wed 16 Apr 2025 10:01:11 +0000
Manifest this update: Wed 16 Apr 2025 10:01:11 +0000
Manifest next update: Thu 17 Apr 2025 10:01:11 +0000
Files and hashes: 1: 1rrQNZWItDgfdECFOf22Jh7vi4k.roa (hash: oHl9vepG9gEfJ6vCHFkAvnbQr+mxDKJlGHdGdAeE9CA=)
2: 3RF21_ECpL5M_wnxKo1LaLxJwIk.roa (hash: DwVXHnFiU49l5hw1O5O7YFwPLdE2x6EWi17vCjDfMV4=)
3: OfliSFK47yOA2Tkix0wrkAH4x2c.roa (hash: B0Voqn9uU+7JqaJFZrNcBBKpjX2nZFFKEZ39gYCt+es=)
4: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: 3BxcYYaaI3sKpa99LOB8TXo0NqLhzJMPE/QyXU97iZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:a2:f2:ad:b3:ec:1e:47:29:9f:0b:2a:85:c8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Apr 16 10:01:11 2025 GMT
Not After : Apr 17 10:01:11 2025 GMT
Subject: CN=7652a57c493fd8af25878a137b9ddf279a2c29cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:5e:9c:93:e6:30:95:30:46:36:b3:04:d5:
92:d3:57:ba:a9:62:26:24:ee:d4:4a:e7:66:cc:72:
d8:a6:a2:70:c2:a4:1f:5f:d3:f0:26:49:0a:5d:e4:
96:ed:77:49:5f:75:0b:4a:7a:ce:33:95:20:5e:51:
43:fb:61:90:d6:16:ba:93:79:66:c1:f1:8b:16:e6:
5e:00:c4:b5:e1:bd:4f:58:ff:51:e9:46:81:52:c9:
8a:1a:d3:ed:5f:46:7e:4e:69:2e:fb:56:09:6b:0d:
0f:cf:1e:f2:48:22:b9:52:e0:ca:8a:5a:fd:a9:39:
c8:f1:c1:83:12:88:ca:8d:ce:f2:0d:94:3f:db:a4:
e0:ae:5f:c6:50:6f:6f:bc:60:f6:4d:94:50:67:f6:
5f:b2:3e:23:5c:8c:3e:c2:67:58:7c:58:27:84:e1:
9f:36:cc:57:48:ec:02:0f:c7:b3:01:a8:d9:d6:cd:
1a:81:5f:4a:ac:db:f1:e9:fc:81:01:b9:ef:3c:bb:
31:1e:f1:b9:e5:5d:82:af:78:8a:ff:25:c4:67:da:
60:da:3b:68:8c:cc:64:02:d7:bc:16:0c:1a:17:d9:
9f:04:b7:6d:ca:de:2f:0d:7a:09:e9:08:89:52:05:
e3:40:52:1e:29:aa:07:a7:e0:41:56:b4:26:e8:b3:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:52:A5:7C:49:3F:D8:AF:25:87:8A:13:7B:9D:DF:27:9A:2C:29:CD
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:52:04:05:6f:87:51:46:74:94:72:eb:33:1e:72:9b:96:00:
2a:15:f6:63:f3:a7:35:d1:fc:3f:b7:2b:db:6a:44:b0:61:5d:
5d:db:65:74:ec:98:1a:d2:03:7d:3c:2a:f6:38:f3:d6:d1:2c:
c0:5e:4d:6b:cf:bb:19:55:3d:bd:01:c0:97:26:04:42:c9:c8:
67:bc:1c:24:af:70:bb:ca:a1:41:fe:79:f0:82:54:48:79:45:
4d:77:98:6f:83:bb:9c:1a:84:f1:bd:e9:32:45:bb:b9:11:5b:
cc:6a:5b:3a:c3:90:fa:b1:f3:28:0e:85:6d:15:6c:f6:2d:fc:
5d:0c:24:c6:c1:e9:31:12:a8:78:01:7e:4e:b8:84:09:43:c5:
df:08:de:13:cc:cb:5e:97:83:21:fe:a6:e5:22:06:0a:77:34:
55:7f:79:8a:46:a4:88:f1:59:c5:74:37:02:59:40:1b:fd:77:
38:c7:50:03:6d:c2:0f:76:2e:16:96:7a:8b:4b:bf:cb:1e:a6:
26:94:87:2a:49:fd:a4:4c:cc:d3:56:f6:ce:ef:af:91:bc:f9:
0f:b8:9e:17:22:cb:10:9a:8f:9a:55:b5:c1:b0:e2:97:05:df:
aa:31:d3:3f:e3:09:03:71:c2:1a:e5:c1:e8:ce:62:59:7b:e2:
cc:de:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:56:49 2025 by rpki-client