Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: 8G5Upj0SbsG094xpkGFIrZUo5EcxK2Jm7WNYpGwuT/M=
Subject key identifier: FE:64:C7:27:CC:F5:78:DA:86:C3:8F:E4:E8:4A:CD:12:68:B5:A5:5F
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 019674F9E97F7A50B50D52235CDC41C816DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 0F09
Signing time: Sun 27 Apr 2025 02:00:57 +0000
Manifest this update: Sun 27 Apr 2025 02:00:57 +0000
Manifest next update: Mon 28 Apr 2025 02:00:57 +0000
Files and hashes: 1: PHtHgmSOY6QlNjsIyECg_KW7ZYU.roa (hash: cSzW9+Tdn6riD70yyykVu3Jxk7SzmVYuL8aIL6ZeXmM=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: E0iw0NfUO+5Fo4sUdQ3vWo6r9jEbrFsCrfHCU2fHCUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:e9:7f:7a:50:b5:0d:52:23:5c:dc:41:c8:16:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Apr 27 02:00:57 2025 GMT
Not After : Apr 28 02:00:57 2025 GMT
Subject: CN=fe64c727ccf578da86c38fe4e84acd1268b5a55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:55:38:98:3a:0f:76:60:c4:c0:65:ee:6e:
2f:90:c1:c1:81:03:d6:8b:6f:34:5c:61:e9:29:9e:
28:17:e9:7b:11:4f:06:6f:34:85:a3:2d:51:8e:e4:
cc:7f:ac:0c:a7:92:3a:f6:fd:39:1a:4a:45:ab:8c:
74:dc:32:56:86:b3:36:61:2f:63:a4:67:5e:25:da:
ef:ce:8d:45:8f:77:aa:3c:83:05:ef:9f:87:58:f8:
3f:a4:a9:54:06:54:54:cc:53:33:26:5e:3e:6d:b2:
3f:30:b3:ea:0b:16:7a:8c:ec:df:68:ed:16:3d:bc:
4c:5b:f0:c7:4f:ad:09:bd:6f:f0:eb:ca:f5:75:8c:
62:e4:ee:25:83:13:73:63:fe:38:21:96:c9:0e:46:
44:e5:40:6b:69:61:2c:70:0b:69:b6:45:31:77:cb:
20:b4:e7:89:c6:e8:7c:ce:e1:ca:6d:7f:88:02:b6:
25:98:32:3a:50:e2:9f:f7:83:04:82:d2:4e:09:53:
f9:42:47:c7:4e:48:d0:f3:46:fc:7c:15:25:b6:c5:
04:4e:dd:6b:d3:ec:fb:05:21:4b:42:d1:a7:1e:2c:
f9:97:99:5d:6c:b3:1d:6b:11:c7:a8:d4:9d:c9:cc:
3d:92:e3:15:fe:c4:94:b8:59:b8:1b:2c:5a:58:8b:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:64:C7:27:CC:F5:78:DA:86:C3:8F:E4:E8:4A:CD:12:68:B5:A5:5F
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d6:a0:6f:81:a8:d5:71:74:59:53:ab:28:8d:4f:2f:e1:a9:
d6:d1:4e:1d:c0:6c:f3:7f:5b:3b:26:86:07:c7:21:38:f8:7d:
b7:09:71:92:ca:7b:18:de:58:fd:cb:3f:b9:b3:ed:e6:ec:16:
48:b8:10:0d:b5:e1:6a:20:29:9f:98:e6:71:9d:0e:de:fa:0c:
81:73:cb:6d:d6:a7:fb:a6:1c:33:82:d2:9f:a6:2f:6d:a1:36:
87:a8:cc:c2:fc:3f:34:f5:64:9c:4a:1f:dc:24:93:27:05:17:
5a:b1:3b:1e:34:7a:26:7d:04:42:5f:bd:46:a5:65:4e:a5:42:
91:75:ef:b3:5d:3d:b2:22:95:46:ff:87:e9:c5:15:d7:44:b8:
d4:09:e3:1f:4c:2a:83:bb:fd:e2:8d:70:a9:3d:23:52:e3:ae:
66:6c:aa:3e:df:ae:5a:ef:55:4d:86:e6:2e:57:41:4d:70:53:
31:9e:3d:10:0b:3a:4a:bb:2e:e6:e1:9a:ad:cb:77:11:19:ee:
4f:3c:e0:eb:79:0a:d6:3f:c9:6e:2d:ee:5c:4d:98:47:cb:e8:
27:bb:99:c3:cb:e0:bb:e5:ac:e6:40:9c:65:9e:ab:bd:da:07:
39:25:1e:7e:8b:fd:de:57:62:eb:15:11:c4:a3:13:f5:66:3a:
95:9d:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:25 2025 by rpki-client