Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: pWODCVCz6evm+HcJzvblSynNRjNgq9um7OwyKyj2BOk=
Subject key identifier: 02:86:BF:EC:71:5C:5C:10:1D:42:CC:8B:DE:4F:79:E8:26:B2:2B:67
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 01967567C70ACAEA3E5A6DDE1CADED09C1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 04:00:57 +0000
Manifest this update: Sun 27 Apr 2025 04:00:57 +0000
Manifest next update: Mon 28 Apr 2025 04:00:57 +0000
Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: xmSpdDvHnHyJW8AW4UQEEXP1hLUd65R7zdfGsTmOyL0=)
2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:c7:0a:ca:ea:3e:5a:6d:de:1c:ad:ed:09:c1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Apr 27 04:00:57 2025 GMT
Not After : Apr 28 04:00:57 2025 GMT
Subject: CN=0286bfec715c5c101d42cc8bde4f79e826b22b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:b1:b9:3c:a7:6c:c2:4e:a6:47:f6:05:3c:
48:c8:6d:05:4f:37:75:a0:28:7f:a1:26:97:a5:4c:
57:d8:36:a0:c7:78:71:80:5c:c0:85:67:d7:cd:83:
4e:50:d0:9d:5e:35:33:8b:c9:f3:e4:5f:51:59:8b:
89:6d:9f:55:97:d9:c3:12:77:e0:17:5c:d1:35:22:
7c:b1:1a:dc:6d:73:93:a6:fb:c6:53:8d:95:c1:10:
28:1c:b8:ce:4d:2f:50:63:f1:85:72:00:6b:72:c9:
25:86:2a:2f:61:99:28:8c:fb:62:16:b7:6e:2c:cd:
bf:24:77:91:4a:4a:57:4f:df:f9:a2:e9:d8:ec:cf:
a8:90:1c:96:50:f9:f8:f4:51:f4:de:af:b5:4d:42:
6f:81:ec:95:32:ef:fd:e8:58:83:24:e1:54:a8:a5:
0f:08:34:52:c0:df:49:53:cf:57:93:9a:57:09:c3:
6c:21:d5:9b:25:1d:b7:0c:f0:3e:4b:d0:1a:ab:84:
9b:3a:fc:33:1b:42:95:22:e1:ef:d8:ea:a7:01:98:
ae:65:d6:45:5a:05:4b:52:3a:2e:c2:9a:82:b3:15:
4e:cc:7b:1b:73:79:e7:10:61:89:8a:01:04:53:ed:
03:3e:3a:92:9d:5f:d7:d4:41:70:42:28:e3:37:c2:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:BF:EC:71:5C:5C:10:1D:42:CC:8B:DE:4F:79:E8:26:B2:2B:67
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:47:9e:4c:b6:5c:42:ad:1a:ab:d8:62:af:b2:c6:25:dc:f8:
9c:1a:ba:22:95:7f:1d:f2:f7:1d:b4:c4:ce:94:6d:e3:7d:9b:
d5:91:86:91:64:3a:f4:cc:11:dd:2c:b0:47:ad:14:df:dd:ee:
01:96:bd:bd:99:e8:3c:22:a2:40:07:0f:76:11:28:20:2a:0e:
15:de:99:ff:23:57:07:f3:ba:f5:53:3d:4f:6a:1c:4e:fc:53:
9b:15:e7:d2:d1:e6:a1:29:8d:a3:cf:20:b8:f7:8e:c4:2e:e7:
c4:08:84:e0:ba:c9:48:28:63:7b:34:1c:92:d0:5b:df:1c:9c:
c8:7e:d1:16:22:52:fe:25:8f:c6:09:21:09:ba:f2:02:d6:9d:
cc:0e:6a:f5:ee:75:0a:bb:79:ea:5f:71:ab:c1:7c:41:3e:69:
9b:96:77:77:7f:61:3a:a8:72:ee:63:13:02:39:b7:7a:f6:87:
b2:c5:d1:e7:b8:d8:75:e1:d0:b6:31:68:7e:78:d6:1e:bd:61:
5a:e7:14:a0:6c:7f:36:3d:10:cb:1c:dd:92:44:e4:2a:8a:3a:
0c:81:28:12:b3:3b:6d:5f:e2:8a:9f:6f:bd:4a:9f:b1:6f:85:
de:5e:24:59:f9:c2:1e:5e:ab:c0:de:82:50:11:17:02:1e:c8:
78:0b:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:51 2025 by rpki-client