Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: PhPMxKaaFYQ2929FMcKDB/ydpKrPqQV3EvdNQlWERss=
Subject key identifier: 50:C6:FC:6E:8B:A2:5B:80:2C:80:13:3C:10:AB:05:61:2C:75:C8:EA
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 01976960C09BAD7E4822DC2CCA547DE348F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 135B
Signing time: Fri 13 Jun 2025 13:00:37 +0000
Manifest this update: Fri 13 Jun 2025 13:00:37 +0000
Manifest next update: Sat 14 Jun 2025 13:00:37 +0000
Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: nDCiJNpGTNUmb+9bPNVxWKbpZnAXKxp4fvIr+VMEC58=)
3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:c0:9b:ad:7e:48:22:dc:2c:ca:54:7d:e3:48:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Jun 13 13:00:37 2025 GMT
Not After : Jun 14 13:00:37 2025 GMT
Subject: CN=50c6fc6e8ba25b802c80133c10ab05612c75c8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:be:f3:98:fe:c8:4d:2e:60:74:4c:47:39:
8b:4e:6b:67:31:96:bf:5d:dd:2b:63:75:fd:db:01:
d8:96:56:42:27:57:d9:dc:c4:5c:de:9f:2f:ee:3b:
a7:8e:ce:83:cb:5d:07:97:90:30:6b:a9:5d:f0:b3:
c7:28:e1:41:1c:ff:f5:a7:5c:f4:a8:40:dd:79:d1:
f9:7c:20:39:0c:3d:66:8d:b7:6e:0d:79:79:74:28:
12:fd:63:98:3c:6f:6d:9f:b0:0f:51:30:2b:8f:8a:
41:4b:d7:54:26:4a:64:7d:a3:b7:e6:be:f6:4c:de:
30:12:63:4a:ab:bb:42:28:1f:28:94:a2:04:17:da:
1f:9c:bd:85:5c:07:b7:a9:71:99:79:03:a6:3c:6b:
ba:83:95:25:b2:6e:e4:18:0c:4b:96:1b:47:c5:48:
df:72:38:3e:43:54:4a:78:21:a2:37:d1:a1:26:49:
a7:19:00:5d:3a:a9:24:22:cf:d8:45:9e:82:de:cf:
b8:bd:bd:bf:9b:26:81:b3:47:ee:46:83:f8:4a:04:
ff:df:a8:b0:48:5e:05:70:5f:70:00:35:c6:7c:98:
bd:9a:f3:f5:b3:6f:2b:20:28:6d:d5:70:3f:0d:ef:
a2:b9:f7:ee:b3:b7:f4:b9:3c:58:99:c7:61:f7:8e:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C6:FC:6E:8B:A2:5B:80:2C:80:13:3C:10:AB:05:61:2C:75:C8:EA
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f8:d6:7e:96:16:de:92:3a:a6:13:a1:e5:e6:d5:61:15:1e:
1e:ed:e9:cd:ac:b9:e6:13:a9:a3:10:ea:4e:a1:0b:06:99:8b:
51:32:47:11:98:11:95:1b:59:fa:c6:95:f6:7c:1f:64:18:22:
d7:40:af:cc:fa:50:49:7b:dd:13:df:2b:51:68:77:7f:f0:11:
cf:23:d5:31:90:fe:30:d7:48:63:25:a6:13:64:52:88:0c:6d:
ec:c2:a0:67:7f:9f:bd:6c:cd:44:96:10:ce:fd:50:23:c5:01:
7f:2f:99:5a:e1:c2:6b:8c:09:0a:3c:b7:d5:3d:5e:3f:bb:66:
b4:6a:84:f6:3f:e5:54:bd:8c:28:be:f1:4a:b4:0e:ea:2d:b7:
c8:b2:d1:f9:68:9a:5f:9b:8a:80:7a:ca:de:71:c5:ef:25:20:
89:9c:bb:d7:76:5c:d6:c8:e7:d6:f4:32:30:45:48:78:d3:c5:
4c:54:4c:22:87:e9:9f:e4:55:75:b2:59:0b:e0:48:12:40:d8:
a9:fa:f6:fa:01:1e:3a:4e:17:51:ee:d1:ec:78:3a:cd:f3:17:
8b:c2:f7:b9:76:57:56:bf:5e:ab:1b:d6:d1:f8:1f:4a:c4:67:
c5:73:f7:28:2f:95:cd:0f:b9:2d:09:a5:da:b4:82:03:c7:d8:
e0:dc:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:50 2025 by rpki-client