Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File: T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier: 7erM+jBg6x/b8zNe29F0ESLaJbvrmiFnHKr2UIThzcU=
Subject key identifier: 91:46:1A:4C:D3:78:7D:4D:43:8B:FC:D8:49:57:F9:93:57:8A:EE:7A
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial: 01976FD0BB29F13560BFAB9ABEEE0877704F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number: 0103
Signing time: Sat 14 Jun 2025 19:00:39 +0000
Manifest this update: Sat 14 Jun 2025 19:00:39 +0000
Manifest next update: Sun 15 Jun 2025 19:00:39 +0000
Files and hashes: 1: MtCu6sFrD1432kk0IRfc5KNTGfc.roa (hash: mq6V3hOgU2VesW7dh8aKsr7RVyaB9UHKkJnet/uS01g=)
2: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: Sxy6RuvPRUyET0ZJIcWL6iLm6b757Cy9fjexL6RoDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:bb:29:f1:35:60:bf:ab:9a:be:ee:08:77:70:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Validity
Not Before: Jun 14 19:00:39 2025 GMT
Not After : Jun 15 19:00:39 2025 GMT
Subject: CN=91461a4cd3787d4d438bfcd84957f993578aee7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e8:03:82:55:75:d2:9d:eb:3d:01:6b:46:18:
45:2e:46:07:d6:c7:e9:fa:12:1e:0f:cb:34:e7:4a:
8f:49:fb:dd:72:5d:04:5c:14:6e:d3:69:be:79:76:
cc:71:9f:fb:63:7d:13:7d:cd:10:1f:3e:35:05:80:
9c:33:6e:ed:36:b9:bb:01:61:ae:2f:b9:c0:d1:53:
bc:5d:73:be:60:e3:3e:f3:65:3f:fd:44:a2:fd:bf:
5b:77:e8:92:08:3e:44:ba:2d:df:3c:fc:d6:2e:47:
61:c4:f4:4b:3b:c4:01:48:e2:67:5a:71:1e:7b:b2:
7e:cc:2c:e4:c8:12:fc:5d:f6:8a:5c:06:97:01:02:
e5:58:13:f7:a0:69:f3:3e:e9:97:38:29:14:88:59:
2b:52:48:93:7a:0f:2e:0c:c7:37:09:e8:a5:e4:fe:
3e:be:fa:2e:74:a6:a2:c8:6b:74:ec:50:19:d7:57:
5d:95:f1:7d:81:ec:69:26:5c:e1:01:13:4e:23:ed:
91:89:6b:e4:ed:17:8b:ff:3b:16:c2:ef:2a:e8:96:
e3:48:ae:df:eb:cf:d8:f8:36:b7:4b:8d:01:4b:ee:
05:a1:0f:1c:81:a2:12:27:5d:93:db:33:9e:c8:b0:
8d:ce:30:9e:09:ec:9f:9c:26:7f:01:c2:ec:bc:2d:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:46:1A:4C:D3:78:7D:4D:43:8B:FC:D8:49:57:F9:93:57:8A:EE:7A
X509v3 Authority Key Identifier:
keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:63:8e:c9:6d:30:01:2e:28:a4:99:0d:ad:e3:7c:7c:fb:79:
f5:cc:5a:cf:d1:66:f0:19:1c:b6:82:bf:1a:c0:43:4c:85:62:
92:09:66:72:14:36:db:1a:b2:34:e6:4d:2d:f1:83:a8:53:13:
b3:44:04:be:44:dd:9c:47:69:e3:37:9d:b7:1a:20:60:d0:67:
0d:2f:62:19:3c:00:8c:e9:0e:20:35:00:1f:a4:22:99:22:2a:
d8:9c:af:e1:db:81:25:be:05:92:27:c9:48:18:45:b4:e9:da:
5c:54:99:53:d3:9b:e1:4a:ab:64:14:fa:f3:a4:e9:65:c2:5d:
25:3d:5f:92:73:2f:f8:ab:64:4b:e0:4b:56:3e:6e:0e:3f:1c:
46:24:7a:76:08:9a:2e:4c:5b:9d:b6:ac:7c:c8:46:fd:9f:17:
22:fd:1b:ea:0f:df:1c:14:90:53:c3:e0:7d:26:4a:2c:03:3b:
1d:4a:fc:5a:fa:d9:7b:23:ce:fe:6e:df:9a:57:b8:9e:1e:1f:
bf:d6:52:7e:0d:48:07:53:c0:d0:68:03:16:7c:56:af:2a:9d:
9a:13:72:8a:7f:7b:f0:93:0d:1c:21:d1:d3:77:09:5c:4a:5b:
2a:f7:69:1e:a6:b4:8a:00:94:2d:df:5a:1f:70:7f:0b:54:39:
44:38:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:18 2025 by rpki-client