Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier: l5pisJJKQFHpWJ5l+mUWparGwO98L5YbUzQD4rpXFC0=
Subject key identifier: 0D:87:AA:42:7D:9C:B6:E2:6C:96:1B:08:5A:45:32:DC:41:2C:1E:F8
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 01976BF3ED642419981C270234480AAC7608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number: 14CC
Signing time: Sat 14 Jun 2025 01:00:37 +0000
Manifest this update: Sat 14 Jun 2025 01:00:37 +0000
Manifest next update: Sun 15 Jun 2025 01:00:37 +0000
Files and hashes: 1: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: MN9P6bsasZ+pM2wkKBhZGlan6mnCPLjeac8RD7MMmIw=)
2: YKTSjuC1HFTX7b7hXOaQuasHjw8.roa (hash: DCJ4Y27xyiCClFTgENixBHPREjuVymaDjhE/h8glQl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:ed:64:24:19:98:1c:27:02:34:48:0a:ac:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: Jun 14 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=0d87aa427d9cb6e26c961b085a4532dc412c1ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:60:83:dd:fb:c8:a0:da:55:5d:0d:ea:57:
1d:47:17:7e:44:fc:82:a3:5a:b2:0c:0c:ac:90:77:
de:22:c8:bc:3b:b0:f7:aa:4a:76:36:03:aa:83:cd:
e6:b4:e5:56:d2:eb:cb:34:6a:54:84:0b:b2:09:03:
c4:15:52:10:19:3c:8b:62:05:a6:86:6e:a6:ec:66:
d0:7c:e7:fe:88:47:63:b8:9d:ce:43:02:50:96:b9:
3c:a5:63:43:e3:aa:81:2c:db:72:cc:c4:d9:eb:25:
3c:47:8c:4b:5f:c1:79:4b:5c:5e:b4:3d:3c:5f:61:
67:17:43:30:de:63:e1:d4:0b:8e:4e:be:0c:90:75:
45:61:1e:8d:a2:9a:3c:20:d1:21:e2:99:22:64:71:
24:41:b4:bf:0f:94:4e:e3:a5:ab:7f:f1:11:f6:73:
10:8e:46:ca:f0:84:ec:f7:c8:d0:bd:70:90:d3:af:
f5:fd:95:7b:d6:45:b5:f8:52:41:c5:98:dc:37:43:
28:5a:08:26:d3:b4:32:73:e7:07:02:7f:67:a3:9f:
67:64:54:3d:e4:9c:b8:d6:a9:ea:39:39:a4:9c:2b:
c5:46:6f:8b:3a:74:c8:c4:7e:49:1b:7c:78:70:2b:
0b:36:b1:46:16:ae:48:a8:b5:1a:fc:72:0b:a2:71:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:AA:42:7D:9C:B6:E2:6C:96:1B:08:5A:45:32:DC:41:2C:1E:F8
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2b:53:a2:e6:b4:b9:8a:c3:79:a9:a8:f6:66:58:d8:7f:6b:
89:4a:ca:af:f8:cd:2e:ef:ed:7e:af:50:f5:9b:a6:40:6a:d9:
19:bc:48:9c:4f:70:b5:10:e6:5c:3f:f2:ca:71:92:20:da:28:
33:8a:8b:3a:68:97:a4:a4:9f:e9:ee:32:bb:8e:d7:ce:38:4f:
fc:d9:5b:77:c0:ac:6a:d1:bb:21:90:1d:e3:e6:54:84:f4:5a:
45:a4:1f:af:0f:30:e0:a5:4a:b4:11:fb:d5:c5:a5:37:7e:b9:
e7:3f:89:b6:61:a6:71:54:64:08:01:6f:fc:d7:31:3b:17:ed:
ba:06:8d:76:1b:05:cb:7b:bc:e6:8b:6f:24:bb:b9:ba:92:32:
6e:ce:3c:73:e7:36:07:46:a7:b2:b3:ed:13:5b:a8:11:74:a4:
e5:26:57:84:a2:ec:ec:88:fd:76:9d:ba:42:95:90:d7:d0:8e:
5f:aa:84:71:f0:2c:63:e3:ea:53:56:db:56:75:43:c4:8f:ee:
4e:9d:c5:91:42:9f:03:c0:81:89:ce:04:6d:ca:08:28:00:ac:
5d:85:a3:84:2f:0a:a5:43:3d:09:ac:a1:1c:dc:b7:b7:b3:03:
d0:6f:d7:0d:b3:b3:83:d2:43:86:84:e3:bc:a7:69:9c:50:9e:
8e:69:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:24 2025 by rpki-client