Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: RSrf1TzcU825PJ0b6vtSAXS6jCD2+seSIUc7xuzbH54=
Subject key identifier: 19:8E:68:D7:25:88:97:85:77:11:58:80:F7:F4:C3:FB:8B:99:84:3E
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 0197700820797BFF1C6EA1044C23CB940D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 0F8B
Signing time: Sat 14 Jun 2025 20:01:09 +0000
Manifest this update: Sat 14 Jun 2025 20:01:09 +0000
Manifest next update: Sun 15 Jun 2025 20:01:09 +0000
Files and hashes: 1: PHtHgmSOY6QlNjsIyECg_KW7ZYU.roa (hash: cSzW9+Tdn6riD70yyykVu3Jxk7SzmVYuL8aIL6ZeXmM=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: W8wvEVvF2Haef8VQr1G4hnW5qQDoqYyixN2WLnx8a/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:20:79:7b:ff:1c:6e:a1:04:4c:23:cb:94:0d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Jun 14 20:01:09 2025 GMT
Not After : Jun 15 20:01:09 2025 GMT
Subject: CN=198e68d72588978577115880f7f4c3fb8b99843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:c6:c9:08:fd:c3:37:66:0f:11:78:69:3b:
be:0c:07:1b:29:e1:3c:9c:d9:9f:64:bf:d3:a9:d3:
fa:d8:97:9a:dc:7d:44:f2:f6:3f:d5:12:87:06:3d:
ca:1e:41:4d:17:65:9a:d5:bd:12:8b:23:6f:67:dd:
42:8f:cc:1a:d8:d8:a1:25:2e:fd:22:90:fb:03:b5:
62:87:f2:af:8b:72:16:02:a2:fc:64:6f:51:a1:08:
a6:51:97:65:f4:27:47:a8:18:74:6d:9d:f0:fb:df:
f6:77:a0:71:63:66:9b:a3:cb:39:8f:35:e7:3a:fb:
fc:10:34:e1:44:d6:56:26:26:9c:0b:64:41:93:5b:
a2:91:f8:ab:f0:ea:ed:68:83:b8:25:c4:9e:18:b6:
b2:1e:80:66:b4:7e:d9:bd:31:13:f7:b3:a8:eb:32:
14:99:19:70:9c:c4:61:a8:d5:c3:f2:d0:69:87:f4:
c7:3c:b4:33:53:c3:f7:2c:f3:21:c9:cc:55:8d:6f:
0f:17:45:ff:41:98:27:7a:fe:94:ae:f1:1b:7e:e8:
a8:7a:6e:b2:c5:27:2a:ba:11:b2:6e:67:29:58:08:
cb:20:e1:e2:2d:45:3a:15:0f:2e:55:1b:29:23:74:
37:ac:aa:56:eb:ed:f1:45:75:a7:e9:9f:74:59:9e:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8E:68:D7:25:88:97:85:77:11:58:80:F7:F4:C3:FB:8B:99:84:3E
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8d:b0:d7:b1:b9:33:f5:7d:8e:19:4c:f1:a3:b0:14:48:d5:
f6:b3:16:87:24:93:4f:3d:48:12:96:bc:1a:14:12:37:c8:fa:
1b:bc:24:b1:83:e3:e7:49:66:07:be:ac:f5:38:8a:a8:20:ca:
59:2f:68:0f:38:74:09:41:66:bc:80:a6:a8:ed:10:08:20:56:
e1:5c:b3:cf:ca:d8:39:38:93:fd:2c:4e:9e:14:c7:4e:dc:58:
69:49:ec:e8:bf:b7:4f:11:e8:a1:fe:40:19:ad:c2:e1:df:44:
f4:e1:50:5a:1c:92:31:50:54:8c:76:fd:07:1b:ee:5a:ab:53:
50:30:6a:ec:92:f2:db:56:2c:50:32:82:bf:41:3a:31:24:fe:
f5:d8:4e:ca:2b:ac:60:83:8a:89:6a:73:e1:e9:a0:e9:6c:13:
be:33:a2:14:1d:a9:2e:1c:01:9a:06:34:58:57:da:c9:9b:56:
3d:4a:90:e9:6c:e2:3e:aa:00:39:b8:7f:9b:47:03:80:c8:72:
d3:d5:42:c9:24:60:ed:9c:2d:c0:77:74:66:e6:e8:99:6e:5a:
a9:33:91:9b:85:05:bb:a7:37:25:6f:69:fb:5b:37:b1:28:bc:
cd:32:ba:18:d3:ee:0c:47:a6:1d:18:c5:f4:d8:03:b6:ee:17:
f0:25:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:19:18 2025 by rpki-client