Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json)
Hash identifier: E6moQlTKbjcztMMsgNdXbVbnINgUhXK0B/pmm22Grqg=
Subject key identifier: 0F:43:C3:49:83:67:12:E6:94:39:D0:46:39:13:25:46:8A:ED:CB:91
Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Certificate serial: 019685118E769645BB0A27F57656FC76514F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
Manifest number: 68
Signing time: Wed 30 Apr 2025 05:00:42 +0000
Manifest this update: Wed 30 Apr 2025 05:00:42 +0000
Manifest next update: Thu 01 May 2025 05:00:42 +0000
Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: SCKl0ei9v17nureeavezWB/XaABFqNtqCI5CxvWHHdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:8e:76:96:45:bb:0a:27:f5:76:56:fc:76:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Validity
Not Before: Apr 30 05:00:42 2025 GMT
Not After : May 1 05:00:42 2025 GMT
Subject: CN=0f43c349836712e69439d046391325468aedcb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:bb:28:8e:12:41:0d:c4:c5:cb:f3:af:ac:
56:c3:f9:29:43:5e:07:d1:d6:46:60:45:3e:f5:43:
91:f7:36:5b:cb:80:4e:d7:a2:7c:97:35:70:b6:57:
f9:7c:f0:dd:26:0c:2f:3f:52:9d:52:ff:d5:8d:f6:
0b:b0:6e:62:87:3f:1c:76:25:e6:34:9b:26:28:2f:
20:83:04:e5:3e:93:b5:ec:d3:c7:a3:a5:a7:77:0f:
a0:88:dc:5a:c3:5a:e9:8f:fb:bb:85:9b:1e:28:a0:
5e:4f:77:af:19:75:2b:44:95:bc:bc:1a:05:93:82:
5b:91:ab:40:ba:ac:87:74:f0:04:3f:2d:91:3f:52:
83:e3:7e:93:2b:4c:0c:93:28:21:f3:e4:db:02:31:
aa:54:be:e9:24:e6:4c:a3:9b:d7:7e:8a:df:d2:38:
41:30:68:fb:a1:22:0e:13:ca:d7:dd:7b:95:2e:fe:
f1:00:b3:1f:ad:cb:96:59:b6:82:a4:bf:cb:fc:2b:
ee:d5:95:45:76:75:99:50:a6:9e:bd:52:30:63:ed:
ff:79:a8:af:79:67:7e:73:db:40:0a:08:60:ac:8e:
75:8f:bb:27:b5:f8:03:52:97:27:dd:2d:cf:96:92:
83:30:c1:28:d5:23:ff:65:ed:b4:c5:bf:43:68:5c:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:43:C3:49:83:67:12:E6:94:39:D0:46:39:13:25:46:8A:ED:CB:91
X509v3 Authority Key Identifier:
keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:de:07:cc:6e:6d:79:72:ea:10:aa:65:86:2c:bd:a4:a4:4e:
c0:47:76:90:f9:7e:00:6d:62:47:d9:a7:6a:75:a6:a2:f9:02:
e3:17:6c:4d:ad:0e:c2:06:4a:8e:21:b1:87:c9:10:f1:95:02:
bd:eb:41:9e:34:59:25:03:7c:4f:73:5e:49:3a:da:2d:7c:52:
ce:47:e7:f3:75:b0:83:dd:5c:98:59:ad:85:67:d4:e5:fc:d1:
3b:b1:53:1b:19:bb:b2:db:51:f4:a6:c1:ad:05:c9:db:f2:24:
71:94:6e:5e:d0:db:c2:71:b6:3f:d6:91:5e:0e:46:dc:fe:e6:
ea:2c:ea:0b:0a:74:0b:0f:7b:5d:1a:f7:14:f2:bc:56:3b:48:
51:ed:e5:32:99:1a:68:a7:a3:bf:e0:c8:41:3f:51:36:78:90:
92:34:84:c9:03:1d:bb:80:4e:87:c5:5a:57:82:e2:08:20:ed:
d4:63:de:0a:12:7d:df:2f:5c:ef:51:19:66:80:d2:fc:d3:33:
d9:56:8a:2a:a7:56:fd:79:37:61:19:9e:83:5f:0a:88:a3:2a:
44:b3:2d:5f:8c:4e:ba:9d:1c:ca:4d:ea:19:f5:9c:df:ee:14:
bf:40:22:14:c3:34:40:4f:e1:c0:71:d8:41:dc:b5:02:d6:a8:
86:c5:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:13:41 2025 by rpki-client