Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: 5T24Zsa42LzqMdBHmpgM+MCOuDXQqeui4KKrCKH4NDE=
Subject key identifier: B3:7E:D0:0F:91:4A:29:55:31:24:8F:19:1D:4F:85:C3:B2:03:CE:B6
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 01976E8733CE5CE80629EF8E64CA532620F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 06D9
Signing time: Sat 14 Jun 2025 13:00:43 +0000
Manifest this update: Sat 14 Jun 2025 13:00:43 +0000
Manifest next update: Sun 15 Jun 2025 13:00:43 +0000
Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=)
2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: 18S9Kux81Sd7kWbXC2JOfcOp4s1zxbs/S1s9a94+2Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:33:ce:5c:e8:06:29:ef:8e:64:ca:53:26:20:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Jun 14 13:00:43 2025 GMT
Not After : Jun 15 13:00:43 2025 GMT
Subject: CN=b37ed00f914a295531248f191d4f85c3b203ceb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:bb:04:24:17:ac:38:ef:21:1b:c2:83:5a:
38:04:cd:3c:e4:cb:79:6a:f7:43:f3:15:14:5b:b8:
c9:54:77:9e:46:7c:57:20:7d:a7:e1:42:74:c9:97:
36:7b:62:c0:11:82:b6:8f:1e:1f:80:c7:b1:c1:a3:
e7:e0:7a:24:ac:09:87:73:e1:6f:4e:8b:99:3d:fa:
16:33:f1:99:c2:d3:e5:e5:59:26:6c:94:d7:72:3b:
d2:44:2e:b4:42:12:75:20:2e:30:89:2c:47:f9:97:
76:21:c3:96:ba:6c:7e:ff:bb:54:88:e1:ba:92:88:
53:1f:6c:45:d0:8f:b8:59:86:89:d0:87:78:47:26:
dc:7e:e0:b2:a7:ce:c9:42:20:b4:07:9e:b7:b3:22:
2c:d7:d4:f0:e7:96:fa:61:ed:47:ab:15:1e:41:21:
08:00:b8:47:c8:49:48:aa:2d:a7:ee:36:30:e3:cf:
a8:e7:27:b2:54:92:3a:23:f2:71:9d:5f:2a:0e:4c:
cd:e9:2c:b5:18:4a:a0:b4:e1:78:eb:d0:21:1a:97:
c6:ae:f9:73:e4:cd:d7:ad:05:e5:84:ba:21:a2:9c:
17:61:d5:40:18:f0:cf:8d:ca:43:f8:b8:58:04:8d:
63:76:82:ed:a3:b5:29:d4:a4:29:e4:72:b7:fb:b8:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7E:D0:0F:91:4A:29:55:31:24:8F:19:1D:4F:85:C3:B2:03:CE:B6
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:5d:8a:c8:66:dd:37:12:87:95:42:95:7a:51:ed:5a:ec:
df:e5:aa:4e:4e:b6:77:69:71:38:0f:be:8c:6f:80:4a:69:58:
3b:63:cc:79:b4:54:05:91:d8:2b:29:56:9c:7f:57:ba:15:f6:
22:a1:b3:7a:a9:98:9a:f1:25:6a:74:d1:2c:dc:e2:06:c9:12:
7c:6b:5a:38:fd:f3:83:1b:d8:88:d4:21:8a:82:67:0e:1a:ae:
ea:11:66:c9:e9:b2:93:25:aa:cf:06:61:a2:c4:f1:10:a2:d8:
b0:03:cf:89:22:f0:6d:02:3f:ad:fe:d1:f4:b9:3a:80:24:7a:
09:69:a3:47:92:c7:86:fc:16:c4:17:cf:49:52:64:93:a5:9e:
09:87:b6:9e:0e:bd:7c:06:65:34:01:a7:c1:0f:08:4a:36:d9:
85:a0:7e:1c:01:b5:82:81:d0:51:d3:63:64:92:9c:fa:ac:d8:
e9:52:18:50:6a:94:40:4b:5d:71:d0:c0:22:ce:9d:de:6b:97:
d5:2f:5b:76:98:56:95:51:6e:64:d9:81:33:1d:3c:43:75:32:
be:0c:19:83:a1:15:56:35:29:a1:f2:2b:30:34:9f:65:96:39:
f9:d4:49:2b:3e:cc:3b:a3:de:f6:22:8b:b7:ee:47:bd:e1:cd:
92:20:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:55:01 2025 by rpki-client