Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: s9aUOOMsos4Rr5Imlacyau1N9gfeRD3aj5H4nQE/3hw=
Subject key identifier: 19:2C:D0:57:C6:64:95:B7:B2:67:76:3A:8E:DB:0B:6D:8C:AD:64:03
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 019758DB70E567D179E20558AADF1C0E2EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 0E1B
Signing time: Tue 10 Jun 2025 08:01:05 +0000
Manifest this update: Tue 10 Jun 2025 08:01:05 +0000
Manifest next update: Wed 11 Jun 2025 08:01:05 +0000
Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: bzZJE+5d4wZxZz1CmPimo7bSn119aMvyvAexuDWDZQU=)
2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:70:e5:67:d1:79:e2:05:58:aa:df:1c:0e:2e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Jun 10 08:01:05 2025 GMT
Not After : Jun 11 08:01:05 2025 GMT
Subject: CN=192cd057c66495b7b267763a8edb0b6d8cad6403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:38:2c:92:8c:05:93:bb:50:6e:5a:64:97:
d3:a4:4d:5f:55:ff:d7:58:c5:a3:81:23:76:cf:7f:
07:37:54:ff:4a:5b:00:7f:a7:10:ab:35:58:40:1c:
4d:b8:f7:e2:a8:2a:6c:c3:b3:03:fc:a1:84:48:8d:
0a:f0:4d:1f:1b:8a:ba:f0:4c:9b:bb:a5:61:4a:b9:
c1:f4:f0:c0:a6:48:f3:8b:87:3e:c2:4a:14:16:e2:
02:f8:52:75:10:1e:25:b9:8d:2e:2f:e4:15:c3:b1:
4f:9a:63:8b:de:2a:a6:98:30:e2:99:b6:31:6f:a8:
bd:47:ba:53:f8:33:81:35:42:dc:32:56:52:7a:df:
5a:4e:4a:ab:c9:d4:c2:c0:b8:b9:49:1b:c5:62:3c:
90:54:e6:a4:4c:f6:0b:75:bc:52:81:9b:f7:e4:5a:
b7:a9:1b:2f:96:6d:65:4f:fc:b0:85:d3:ff:00:0e:
49:18:ac:e2:57:ed:b5:ae:06:3f:e0:42:f5:08:6a:
fc:85:cc:2c:8d:c5:ad:39:d5:80:b4:6d:81:53:08:
d2:48:4f:29:84:5e:74:6d:01:63:ed:d8:fe:2b:eb:
c1:a6:da:ad:66:59:44:1c:89:29:c5:4a:3c:13:e9:
12:c2:a0:ef:0f:17:b3:6a:61:07:26:f4:77:34:63:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2C:D0:57:C6:64:95:B7:B2:67:76:3A:8E:DB:0B:6D:8C:AD:64:03
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a2:21:ad:ca:f1:96:1d:42:b1:e6:d9:42:b9:57:5d:0d:61:
4d:08:69:ee:b5:76:2d:47:26:ad:44:6a:2e:34:be:85:91:25:
3e:f6:b6:ee:6d:53:5e:84:4e:fc:89:57:6d:82:4b:d0:8b:f1:
97:0a:c8:64:bb:8f:10:a3:4e:0f:3c:09:81:57:0b:12:b3:d5:
34:ff:3c:b3:72:ff:4a:55:0a:49:f7:9e:2f:05:de:70:7e:5b:
5f:15:3c:60:36:cb:17:1f:b2:b7:ec:0c:c7:f2:d2:bb:2f:5e:
1e:9d:e8:3d:e5:7e:8f:22:bb:2e:aa:db:95:38:18:8a:af:4c:
2e:bb:5b:2f:a5:e5:c8:fa:83:d9:aa:44:c8:7a:38:15:78:4b:
74:9a:d3:b0:14:1f:5c:6e:dc:9f:de:6e:5c:50:ab:b3:5d:6a:
25:cc:1f:1c:72:c2:5c:db:65:89:e7:57:cd:f3:20:bf:d4:02:
1a:d8:b1:df:40:89:84:3c:dc:a0:a2:34:66:70:ef:ef:0e:19:
16:cb:c1:67:f3:06:b5:e3:46:b0:05:ed:90:83:32:85:62:61:
da:01:8e:a7:0c:61:1f:1a:c4:bb:d5:38:61:71:72:e2:b1:93:
92:bd:eb:81:94:73:4f:eb:2e:eb:de:e3:c6:20:2a:6c:db:29:
5d:aa:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:32:22 2025 by rpki-client