Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: NoN0oSw9V9BF1obmq9iVsgvrGj/AHBBlE5anp7cd5gA=
Subject key identifier: CD:31:5E:BC:8B:5D:A9:CC:04:12:DA:11:46:80:C5:04:FB:C5:C9:8D
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 01974742E595AF194E302960C82A320354DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0ACF
Signing time: Fri 06 Jun 2025 22:00:55 +0000
Manifest this update: Fri 06 Jun 2025 22:00:55 +0000
Manifest next update: Sat 07 Jun 2025 22:00:55 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: skns2+YImGGbVSMeiLxHxzLqWqj5m5O6yeakOTPEwXc=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:e5:95:af:19:4e:30:29:60:c8:2a:32:03:54:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Jun 6 22:00:55 2025 GMT
Not After : Jun 7 22:00:55 2025 GMT
Subject: CN=cd315ebc8b5da9cc0412da114680c504fbc5c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:bf:0c:56:03:90:19:4b:c3:bb:e4:7f:ab:
f4:4b:54:47:3e:87:d2:4c:c8:e3:1c:79:15:3f:c0:
cc:40:fb:8d:07:7f:ea:50:6c:66:c8:76:f7:74:15:
87:ac:26:57:fd:97:ad:dc:a5:c6:ed:7b:b1:23:29:
fd:c0:51:00:93:0e:a0:4f:8a:83:e4:06:08:ac:22:
a9:e1:ac:be:3b:a7:73:dc:c4:05:92:f4:d1:30:f4:
a6:02:11:5d:42:8f:12:d4:e6:15:57:63:7a:a9:11:
73:44:5b:e1:c7:ef:42:ae:b4:d1:50:77:f4:cf:2b:
fe:73:ca:02:cb:19:da:a7:64:a2:af:18:19:38:bb:
43:a7:8b:fb:a6:12:c3:c4:01:0b:46:78:dd:e1:1d:
c0:a4:23:8f:5b:6c:01:08:79:b1:ff:fc:53:9e:4d:
49:f0:7e:76:0e:74:37:b6:96:91:20:b9:aa:f9:9f:
a3:e5:b4:15:a2:bb:59:67:3b:5a:9d:43:8f:41:49:
ec:e0:7f:30:30:25:35:5b:b6:60:16:8b:74:66:38:
f4:1d:bc:e1:ae:20:6f:c3:db:58:b5:1d:f1:06:6f:
cd:2b:b1:e3:93:0a:0e:4f:da:38:7b:cd:50:8c:e8:
ea:93:72:35:04:1c:05:7f:d3:e5:70:87:40:fd:c6:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:31:5E:BC:8B:5D:A9:CC:04:12:DA:11:46:80:C5:04:FB:C5:C9:8D
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e3:69:85:db:ff:b6:9c:e5:24:32:9a:48:8a:57:51:bc:37:
9d:4f:fe:20:cc:b4:e7:9b:2b:21:51:c3:09:b6:c3:65:6f:96:
59:b6:49:07:e0:2e:fc:9b:17:5d:b1:95:ba:90:5c:20:e9:87:
78:a4:d0:ac:15:06:56:db:9c:ee:25:29:25:a3:6b:86:8e:02:
0b:61:36:00:79:64:5d:a5:55:c2:df:5c:69:b0:5b:26:9c:f4:
d3:ce:36:3f:89:61:0b:59:0f:18:ad:88:86:ea:16:2c:1f:e8:
f4:d1:01:1f:d8:79:98:84:40:1e:b6:39:e7:d9:6e:4f:44:27:
2e:1f:2d:b1:7f:7f:41:62:bb:60:7d:0e:86:bd:73:d1:94:f9:
dd:8d:14:6d:cf:36:c1:d1:3c:09:5e:9d:7f:4d:f0:37:7b:5b:
60:ec:17:94:92:df:3d:8f:10:b0:71:f9:48:c0:bf:89:d6:47:
66:ef:d8:63:6f:7b:2c:91:78:64:63:fb:db:c9:88:57:52:aa:
79:3c:a8:9c:ef:8c:0f:45:ec:f1:c1:71:47:e4:96:23:13:40:
ee:e1:a6:1e:bd:0c:d0:1b:60:0e:e5:d2:90:bb:db:a7:5b:de:
f8:fb:64:fd:a5:7d:bf:eb:f7:e6:2f:39:c0:53:fc:58:cf:41:
e1:5e:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:22 2025 by rpki-client