Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: sQfi8MjeXMFkLcYy+/M6684SAifCpKLw7H3ylHpRh6Y=
Subject key identifier: 22:B1:86:4E:09:3D:CE:5F:E2:99:34:DD:2E:4B:6A:A5:29:9C:EC:34
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 019682EBEAB049AF72F6EF79B994EFD03931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 065F
Signing time: Tue 29 Apr 2025 19:00:21 +0000
Manifest this update: Tue 29 Apr 2025 19:00:21 +0000
Manifest next update: Wed 30 Apr 2025 19:00:21 +0000
Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=)
2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: jx/1UBDJFtQIVlDUOwqOLiMWvCwoRp1NIvVwBA6sZTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:eb:ea:b0:49:af:72:f6:ef:79:b9:94:ef:d0:39:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Apr 29 19:00:21 2025 GMT
Not After : Apr 30 19:00:21 2025 GMT
Subject: CN=22b1864e093dce5fe29934dd2e4b6aa5299cec34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:03:ee:42:87:bf:7f:31:de:c7:a6:55:2f:
fd:e6:cc:e0:c6:66:5a:f5:5a:4e:43:43:7f:6a:b0:
03:76:27:fe:31:30:a8:f8:db:12:95:40:bb:6e:43:
11:7f:db:fd:e7:39:2a:73:62:2c:bb:0e:bf:ea:86:
07:75:f9:46:39:6c:6e:14:14:0f:9b:13:49:fb:4f:
2e:73:24:4c:87:f9:a4:33:14:50:78:63:80:dd:c2:
64:8a:21:86:cb:72:9e:74:49:30:04:cc:61:cf:31:
e9:b8:d5:b7:65:75:ba:15:72:18:2c:47:cd:bd:03:
5b:ea:20:e5:11:b0:a4:59:dc:51:a9:9d:9e:c2:1c:
10:e9:1a:b9:46:02:c1:d2:47:0b:bb:54:c1:c5:60:
7f:60:49:37:a3:3d:30:d1:87:82:dc:db:1d:9b:55:
e8:24:bd:d7:63:0d:2d:8e:81:ef:15:16:02:74:4c:
ee:02:ac:ee:11:bb:f8:56:62:43:f7:50:27:c6:e8:
e0:af:ef:5d:0a:e6:23:be:c7:b2:59:dd:84:57:78:
d4:14:33:f2:6f:6e:c8:81:17:73:11:ab:62:a0:34:
9d:b7:7e:27:ef:64:da:37:33:e4:29:52:3e:b9:af:
d6:c8:82:31:5a:c9:f2:d5:eb:43:15:04:e8:b2:42:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:86:4E:09:3D:CE:5F:E2:99:34:DD:2E:4B:6A:A5:29:9C:EC:34
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c9:14:27:41:9f:f7:fc:3e:79:a4:37:15:62:81:3c:d7:08:
49:cb:a3:86:3d:5d:d2:e8:8d:26:e3:84:22:ec:37:62:b8:0b:
66:0f:1c:22:21:1d:45:00:02:96:f0:e7:01:a1:f0:02:ef:33:
40:88:06:b2:0c:e1:4e:5a:8b:cc:c1:f9:42:55:4a:33:03:4d:
0e:e2:ff:0b:0c:ad:c5:c9:be:21:f0:9d:03:1e:a5:dd:e2:7c:
56:5a:23:d6:5f:dc:7a:42:de:3a:36:d1:83:44:85:40:15:9f:
03:41:bc:fa:94:b1:be:4f:e5:d6:50:71:ee:71:4d:13:4e:fb:
e9:62:e0:6d:7a:e1:6d:b0:1c:59:c2:e3:e5:24:5a:dc:66:ff:
dc:65:f2:71:4f:91:62:ce:c4:e7:a3:46:4b:34:a6:56:34:ef:
42:ed:0d:03:46:56:e6:18:67:8c:e6:6c:b0:fc:32:0c:a4:9b:
ca:53:a6:00:f9:71:93:67:8d:c8:5b:6f:8f:c6:ad:16:ee:9e:
48:6b:08:2e:b8:77:2e:88:1d:14:06:d9:6c:f8:26:21:a2:62:
97:12:66:72:d9:69:5b:81:c5:32:32:7b:94:5d:41:e4:d6:b3:
f8:ce:76:42:84:87:ba:68:e6:21:77:2b:fc:8c:33:81:f8:6b:
9a:b6:62:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:16:42 2025 by rpki-client