Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: +8ktDWRAPWKW/KcCDjbpDuRmEX8sMWmsOwN70KfK2PE=
Subject key identifier: 59:80:E7:10:1D:09:25:4D:0A:8B:BB:D9:A5:31:D8:72:83:AE:A6:52
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 01967755C27FBDEB0CEDFB852C34DA889E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 047A
Signing time: Sun 27 Apr 2025 13:00:31 +0000
Manifest this update: Sun 27 Apr 2025 13:00:31 +0000
Manifest next update: Mon 28 Apr 2025 13:00:31 +0000
Files and hashes: 1: 3M1TxPnQnA1R328Hu_a_wxQuHzg.roa (hash: wZ4I7gpvm8WkSPRAAsw+HtDMICYMh2x7/+qhpYWtEVk=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: 6t/J1x6QDsj+IT03BH+UIBwPq1laIlRp9ja3HUftCdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:c2:7f:bd:eb:0c:ed:fb:85:2c:34:da:88:9e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Apr 27 13:00:31 2025 GMT
Not After : Apr 28 13:00:31 2025 GMT
Subject: CN=5980e7101d09254d0a8bbbd9a531d87283aea652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:a3:a0:4a:6a:e6:84:38:e0:a3:14:35:30:
05:c8:6f:50:2d:fa:27:e6:4a:f5:7f:32:68:ea:94:
61:21:39:85:77:a6:e8:06:76:e9:75:0e:6c:50:23:
93:b0:55:f1:7f:bf:e8:2e:cf:46:de:e2:37:55:f8:
3d:f8:8a:21:1c:24:2d:89:79:0d:22:3c:51:94:38:
64:b1:26:62:41:47:95:f6:38:0a:29:aa:56:60:8e:
15:bf:ce:33:4f:5e:75:6e:64:93:df:3e:af:75:a7:
90:f5:0d:5b:1a:23:fe:63:2f:aa:ed:17:5b:fc:3d:
d2:90:eb:84:b5:6f:83:07:8f:2c:a3:49:7e:80:f4:
a4:03:d1:be:24:c7:5a:8b:80:c9:47:c1:36:4b:8c:
6c:bd:36:56:44:1f:9d:9d:bf:7e:54:90:02:82:1c:
6a:92:44:a9:d7:cf:5c:87:28:4e:b3:95:15:79:4e:
58:ac:11:51:23:63:03:b4:46:98:7d:24:03:4c:6a:
07:d0:4c:02:9e:9d:20:73:02:63:4d:12:96:66:bc:
d0:9e:d5:5c:bf:53:89:82:1e:d5:57:ee:76:00:9b:
0d:4b:2d:76:3a:04:83:53:aa:05:e9:6d:71:70:6b:
05:1c:c1:ba:b6:08:65:c7:e4:d5:b8:74:68:5b:99:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:E7:10:1D:09:25:4D:0A:8B:BB:D9:A5:31:D8:72:83:AE:A6:52
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8c:54:e9:23:17:11:6c:45:91:25:d4:22:f8:18:3f:50:be:
c6:fc:fb:5c:a4:93:9f:34:b4:4e:43:34:03:79:da:12:b3:82:
5d:19:89:78:b1:f2:60:b6:5d:1c:84:a6:db:0d:d4:0b:a4:5a:
2f:66:81:ce:1d:a7:a6:72:ba:ea:7d:66:94:02:f1:a4:26:04:
4a:a7:11:87:7d:8d:74:f6:cb:a0:4c:e2:84:66:07:a2:04:f6:
d0:0a:0a:f8:44:61:64:1a:77:64:2e:c0:8c:0b:0e:bf:bc:fb:
e4:8b:2b:05:86:24:d9:b8:a2:28:38:b4:0f:ce:d6:6f:26:61:
e1:c4:fb:e2:c5:89:df:44:9e:0d:1c:3e:9c:98:36:21:b4:a7:
37:82:fb:91:34:72:67:6c:4e:6d:35:65:b2:6f:d3:a3:dd:88:
e7:63:61:4f:2b:42:b4:1f:be:da:de:d7:e6:44:71:9b:76:87:
99:c5:6a:c3:c2:04:54:5b:f4:9f:5a:d9:54:a1:5d:fa:21:a4:
b9:86:e5:1d:14:eb:89:01:9f:97:c9:da:f1:05:94:0c:92:23:
dc:08:49:04:1b:e9:44:c7:3f:a7:19:b5:4f:db:1d:72:43:a8:
93:37:dc:21:04:eb:e9:96:54:45:9a:71:a5:95:02:3a:39:4a:
f2:cb:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:29:31 2025 by rpki-client