Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File: T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier: ajDlYs6m/i21axu3nMmh05AgNXYT9S4LBUtzGrKPn3Y=
Subject key identifier: B6:E8:3E:6C:9F:75:0A:4D:AE:8A:93:DA:A5:BF:AB:7A:E7:DA:0F:09
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial: 0196759EB78A5516A1F70984C3AE13DC62FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number: 04B1
Signing time: Sun 27 Apr 2025 05:00:57 +0000
Manifest this update: Sun 27 Apr 2025 05:00:57 +0000
Manifest next update: Mon 28 Apr 2025 05:00:57 +0000
Files and hashes: 1: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: lavKYqevvr4GYJGA5mIfB6u+ZZEPJ2dgrUg/RjMG6eI=)
2: q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa (hash: ol9vwFP2kye7kweAuJ86LI17vpYzbBP1gC/LI4vVUEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:b7:8a:55:16:a1:f7:09:84:c3:ae:13:dc:62:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Validity
Not Before: Apr 27 05:00:57 2025 GMT
Not After : Apr 28 05:00:57 2025 GMT
Subject: CN=b6e83e6c9f750a4dae8a93daa5bfab7ae7da0f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:76:dd:9b:e5:34:18:53:63:c2:68:4b:3d:
cb:83:e5:45:5f:06:86:2f:78:4c:5a:5f:1a:40:5e:
1a:96:40:9e:03:c5:27:b8:04:97:90:e5:d7:71:5d:
a6:a8:61:eb:50:e8:e8:1f:b4:5c:da:da:5c:69:f9:
48:80:8c:76:65:c9:4a:f8:e5:20:e5:8a:fa:d3:23:
ca:7b:70:17:de:fb:8f:8e:8e:41:9f:85:46:7e:67:
65:89:7c:0c:63:02:b6:0a:ed:2f:cc:c2:89:6f:8f:
3e:92:0a:bd:f2:39:29:59:e1:6f:86:88:42:fe:fb:
3f:d3:82:ed:6f:29:2e:46:de:9a:4c:c6:04:c4:cf:
fb:8d:b8:89:91:6d:32:6b:4e:86:81:74:c4:87:51:
fd:38:8d:17:b2:3e:09:d8:dd:32:09:2c:76:7c:9a:
57:eb:f2:24:ba:8c:48:68:1d:d4:0f:aa:56:ac:0c:
71:20:bb:26:ec:7e:8d:de:3c:5d:80:bf:d9:06:84:
92:9c:8f:8d:5f:7a:17:fc:87:78:79:13:9e:b7:ea:
93:4f:95:18:80:96:34:66:a5:f8:9f:3e:7c:c4:fb:
59:3f:70:c1:a2:c4:36:5b:ab:89:38:5a:8a:76:f9:
65:58:35:4a:fa:63:e0:fe:f2:dc:9b:47:38:95:03:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E8:3E:6C:9F:75:0A:4D:AE:8A:93:DA:A5:BF:AB:7A:E7:DA:0F:09
X509v3 Authority Key Identifier:
keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4a:55:be:37:cc:22:b4:e8:fe:aa:61:dd:11:c7:a8:4b:2c:
12:14:e3:ad:95:ff:f3:ed:4a:8f:7b:13:22:33:cb:84:57:24:
2b:f0:a9:ce:8a:81:79:a0:27:41:86:b5:ac:cd:e3:7c:a4:15:
0a:d6:d2:03:06:96:fd:1e:b5:34:95:83:70:fa:d8:16:2b:60:
56:75:27:0a:cb:59:f9:5d:43:5d:cc:65:bf:a9:58:aa:e9:ce:
a2:56:b0:cc:c2:49:96:33:15:2e:50:e7:87:65:b9:b1:f1:44:
5a:d6:1f:49:43:c8:f6:be:84:e8:43:de:21:ab:1d:be:47:df:
d3:42:4d:b3:1a:67:16:38:39:6c:9d:6c:d0:17:99:36:22:06:
fc:f1:cf:35:ec:4e:89:4a:45:60:c2:09:a3:5c:b2:f3:25:11:
c1:a6:63:ff:1a:86:f4:b3:83:4c:ff:59:67:86:c6:4c:ce:ce:
f8:a0:c4:0c:4b:f2:d5:25:54:e2:e1:e2:9d:78:35:67:82:0e:
b1:93:39:24:94:93:fa:88:f6:3d:66:21:0c:14:f1:ac:8d:21:
d4:2c:a7:8d:a1:50:a3:2e:e8:36:60:4e:04:cf:36:86:c8:e5:
56:88:57:63:af:ea:b2:34:7b:fa:f3:85:53:1e:1c:37:24:2e:
2e:fb:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:15:48 2025 by rpki-client