Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: hKwIodXV7TqAnS4fPqrRjaP6gcqxW0tEwmVvLF0XNMY=
Subject key identifier: CF:0B:E5:EC:65:39:E3:D5:A9:0B:82:4A:A6:2D:73:D8:BD:13:71:94
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 01964E234B442C04C48C9DB0486503D3036D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0A4E
Signing time: Sat 19 Apr 2025 13:00:57 +0000
Manifest this update: Sat 19 Apr 2025 13:00:57 +0000
Manifest next update: Sun 20 Apr 2025 13:00:57 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: PZxgT1fJH1shqb/7Okgo7eFz4YDM10Gv+hmrgxqo5Fg=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:4b:44:2c:04:c4:8c:9d:b0:48:65:03:d3:03:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Apr 19 13:00:57 2025 GMT
Not After : Apr 20 13:00:57 2025 GMT
Subject: CN=cf0be5ec6539e3d5a90b824aa62d73d8bd137194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:f9:6a:63:42:39:fa:59:fe:ac:01:10:6c:
50:4e:e0:fb:77:9e:01:90:44:fb:00:aa:20:43:8a:
74:4e:13:89:ff:0a:51:91:38:d7:f7:66:a4:35:75:
99:49:94:21:5d:3e:6c:22:4f:e7:dd:32:dc:d4:7f:
59:b1:9b:ce:24:b4:50:ce:6f:c5:78:cc:09:25:ac:
be:a0:69:b0:75:45:6a:9f:30:e7:db:bc:8d:2b:38:
64:15:65:44:f8:1b:a8:49:ed:1f:80:90:07:c8:6f:
64:1c:89:57:6f:45:ca:a9:bc:73:74:cc:89:e3:5a:
14:7a:b0:d1:b4:3c:4d:bc:54:22:73:c2:39:65:f8:
10:1f:44:33:ab:da:9a:06:f4:ad:b7:bb:01:1d:d4:
6b:01:74:08:0a:e8:27:09:cb:5e:0b:7b:1a:fb:47:
17:90:2c:58:5d:4d:16:13:12:9e:e6:34:dc:78:d5:
40:28:e9:8c:6f:c2:dd:1c:de:96:88:92:10:03:10:
12:92:b0:b7:a6:79:f4:ee:79:88:02:54:c9:6f:2f:
88:f9:c2:9f:c9:14:39:a9:d4:33:f3:98:41:5f:0d:
03:5f:4b:81:19:6d:b8:ec:72:52:24:68:64:a3:0d:
62:22:e2:f7:09:14:c1:02:98:db:41:e1:a7:b8:a5:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0B:E5:EC:65:39:E3:D5:A9:0B:82:4A:A6:2D:73:D8:BD:13:71:94
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ca:51:2f:4a:95:4d:68:be:8f:31:5f:3e:1e:c0:f4:45:4f:
0a:d3:32:7b:53:26:0c:71:b5:fc:93:63:9b:ee:e0:6f:da:02:
95:d3:a9:64:9a:0e:7a:bf:bf:73:31:ef:f8:31:23:0e:15:d2:
a5:14:8e:12:f5:36:7e:4d:4d:ed:71:71:23:ea:16:e1:5a:09:
31:c5:e9:2b:05:54:a3:2c:33:6f:9d:ff:6e:79:05:7f:e6:61:
5e:4d:8e:c6:c0:a4:24:1c:31:cd:9a:3b:88:6d:6f:37:59:83:
52:be:d5:0e:e7:fc:30:6b:b6:b8:1b:f7:c9:71:8f:2e:44:d7:
03:a4:98:74:e4:85:34:48:0f:67:17:e4:82:b0:37:6c:99:f0:
65:bb:d5:29:9c:3c:44:68:f8:7a:50:c0:aa:2a:85:c7:78:29:
1f:10:18:ea:db:24:7e:44:09:9c:5f:d6:1e:1c:28:57:a1:e1:
72:3d:ce:f3:f7:b4:8a:85:76:83:6d:2c:4b:be:7a:a1:5b:cb:
bd:cb:3b:ee:2d:18:55:6f:f2:f2:2c:33:f7:72:e0:1e:3c:30:
63:37:b3:26:e8:bd:58:d8:88:3d:4c:7b:b4:d1:30:e6:80:52:
db:22:04:21:34:0b:3a:35:ee:36:a9:7e:b6:dc:c6:6c:c8:c6:
86:9c:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:10:44 2025 by rpki-client