Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: tpeij9QAq0E+J6EHkXDDXOjQDDNQYaz8Tduq1JotX3o=
Subject key identifier: 82:0D:85:55:40:0B:58:6A:5E:A4:6D:B1:68:31:20:7F:A8:CB:2D:EF
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 0197684E93617BC54C117FEEDFC855FCCD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 0E23
Signing time: Fri 13 Jun 2025 08:01:09 +0000
Manifest this update: Fri 13 Jun 2025 08:01:09 +0000
Manifest next update: Sat 14 Jun 2025 08:01:09 +0000
Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: BFhxmM0/Gic0cTc2gXiW2KXxrA4XFfY/iqc1pwgK/D4=)
2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:93:61:7b:c5:4c:11:7f:ee:df:c8:55:fc:cd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Jun 13 08:01:09 2025 GMT
Not After : Jun 14 08:01:09 2025 GMT
Subject: CN=820d8555400b586a5ea46db16831207fa8cb2def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:d8:66:b0:7d:2c:e8:70:51:3b:6e:3d:cf:
a2:b3:14:0a:25:53:07:4e:ad:fc:e0:c6:5f:be:0d:
2f:af:0f:c6:a0:65:f5:49:97:ce:3b:a3:a5:e5:e5:
0c:7e:37:8e:5a:a3:7f:21:02:b4:e1:03:63:28:b3:
6f:cc:4b:22:9f:3f:5b:29:fd:80:b2:f3:09:10:6a:
60:08:78:93:15:cc:f8:02:04:f9:80:b5:91:e1:1f:
d3:b2:c9:7e:3f:f6:37:e8:53:58:d0:3f:46:ab:b0:
9a:ea:59:21:a3:ed:93:e2:14:69:bf:da:4a:15:7e:
3b:ae:28:41:a1:5c:46:11:70:49:1b:46:43:34:58:
cf:83:ee:f7:a1:c9:81:b2:d4:30:51:49:12:89:61:
32:f9:e0:66:9b:bc:77:fb:e1:87:26:f2:46:d9:e2:
93:12:75:ea:8a:a1:e4:46:32:55:08:c4:90:e8:fc:
f9:00:a3:6e:30:bd:74:a0:57:c8:f3:0f:9e:9d:90:
a0:28:08:4c:7d:79:9d:83:81:44:ba:48:07:cd:a4:
25:fe:0a:1c:46:04:92:28:3c:fc:80:ab:8f:4a:d2:
af:77:d6:a5:ec:40:14:0d:0f:0e:f0:4b:e2:ba:d0:
a4:dd:b6:a4:30:5e:72:c1:38:25:c0:b6:a7:29:8b:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:85:55:40:0B:58:6A:5E:A4:6D:B1:68:31:20:7F:A8:CB:2D:EF
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1f:a8:cd:9a:da:df:dc:b0:7a:bd:ce:2c:7a:19:ac:9b:e1:
46:0f:a0:a2:e1:cf:03:88:d5:a5:33:b7:10:36:e8:74:c0:77:
66:81:c5:ab:9b:bd:b1:a6:07:80:d4:90:0a:17:8c:c1:4f:ca:
f5:8b:7f:85:2c:72:91:5f:4c:cd:4b:b6:8b:9f:6d:d2:4c:25:
0a:aa:c7:23:b7:b1:26:a0:35:8e:1b:4e:57:76:74:04:76:7a:
85:f8:89:be:9a:15:be:53:81:00:00:58:eb:9f:19:fd:70:bc:
77:ae:04:4d:81:d9:00:9a:a4:6a:34:53:ff:ef:fe:2f:ea:78:
95:c1:c9:18:d5:5b:69:c6:48:fc:e6:cc:da:7c:df:3a:9c:42:
3a:3e:04:01:5d:c5:b2:f3:6b:10:27:61:ee:9a:01:cb:f4:43:
fb:96:70:02:fc:b6:5e:5d:b8:a7:b2:d5:54:88:42:3b:11:c6:
91:f3:23:12:41:9f:72:83:5d:ec:12:17:9f:ba:65:87:b2:9f:
70:b4:90:2a:55:20:46:27:57:e6:ee:06:ad:a5:d2:49:cd:5d:
80:cf:ff:41:c9:fc:7f:0f:80:d7:ca:7e:c2:06:61:9a:67:20:
a6:52:52:41:2b:8c:c7:a9:37:f2:53:f7:e9:44:c8:45:c2:8b:
4c:fd:bb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:53:18 2025 by rpki-client