Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: KyZTEXJTcMRt+uUbaodpSsL5Ka2LSxUF0SLEcyPve4c=
Subject key identifier: 01:25:21:32:2F:25:1A:B6:0C:11:AD:71:DB:22:82:45:1C:EA:FC:E2
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 01977B300AD4D8D94DCE68247AD5CDDBA4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 0241
Signing time: Tue 17 Jun 2025 00:00:35 +0000
Manifest this update: Tue 17 Jun 2025 00:00:35 +0000
Manifest next update: Wed 18 Jun 2025 00:00:35 +0000
Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: 5JmafYbOJQA60mSohwfFPAbs9OT8qkeDKIBxHAKCu9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:0a:d4:d8:d9:4d:ce:68:24:7a:d5:cd:db:a4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Jun 17 00:00:35 2025 GMT
Not After : Jun 18 00:00:35 2025 GMT
Subject: CN=012521322f251ab60c11ad71db2282451ceafce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:11:91:50:14:22:f0:61:f3:61:b3:50:d8:
6b:b7:99:ca:e9:45:40:8a:89:82:9c:2f:98:f2:3f:
26:4a:db:22:4b:61:02:f1:b6:d3:fb:8d:19:48:b9:
f5:b2:66:bb:2b:46:05:23:ae:81:8e:f7:4e:69:af:
a0:f3:4a:1a:8d:0a:3d:f3:5a:64:a5:c4:d0:69:2e:
4c:54:45:2e:00:4c:b8:5b:70:5e:11:4c:67:4b:9f:
25:cb:37:87:37:88:aa:05:13:73:8a:6d:81:e7:29:
fa:82:09:e1:4a:e2:6c:75:8b:75:b7:59:fc:7a:59:
bf:39:47:3a:05:0a:5b:1a:00:12:2a:aa:4e:e3:d5:
2b:47:c8:e8:2e:91:59:f6:57:e7:e6:eb:06:39:35:
c2:30:54:d9:07:90:38:07:2a:e9:24:18:cc:6b:68:
fd:0a:2b:da:62:0b:54:25:b2:3a:f3:de:b0:ff:f2:
2d:36:96:18:85:c7:d4:1b:f6:ed:3b:e7:6e:4c:17:
3c:57:dc:e4:81:f7:98:cd:e9:65:0a:e3:9f:93:e7:
9f:39:b4:eb:96:55:14:bb:9b:1d:db:20:64:2c:c5:
22:7c:e3:cd:67:a4:90:c0:e7:53:8a:f9:db:53:09:
15:1f:6f:90:ca:5b:76:35:be:a7:8c:21:66:9e:2a:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:21:32:2F:25:1A:B6:0C:11:AD:71:DB:22:82:45:1C:EA:FC:E2
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f7:77:a9:e2:2e:2e:68:3c:4d:ec:bf:63:01:7e:03:f8:d8:
b7:35:3b:19:6b:8d:f4:d6:bb:30:ab:18:a5:7f:cd:63:b1:dd:
86:61:3e:e5:f5:17:3b:8c:b7:b1:c2:7f:31:5b:37:94:2a:d2:
53:72:70:7b:95:b2:2a:2e:a7:41:55:3c:36:76:34:aa:52:f1:
13:c2:ca:dd:e4:0f:de:cd:90:77:2b:68:64:0a:62:56:41:45:
35:9c:eb:6b:81:f6:1d:a6:33:c8:40:6b:08:f2:00:23:0b:06:
b6:94:b7:f5:94:80:3b:c2:ba:23:c5:b9:30:4e:21:23:be:41:
b0:e7:fc:cc:ad:d3:70:87:8b:ed:da:09:7f:4e:f9:74:6b:b4:
6a:dc:6f:a2:05:af:d6:ed:f3:7e:f2:24:22:e7:a0:4b:e4:09:
73:60:c2:4a:a3:f3:2f:a4:b4:cc:d5:b2:47:e4:58:3e:4a:18:
3b:8c:65:02:04:8c:e6:2e:dc:4c:20:3e:ec:25:6d:30:8c:a3:
4e:34:76:54:fe:c9:8a:82:06:f9:50:7c:f7:16:d8:0a:15:27:
1c:3c:44:d6:8e:f0:f4:db:36:ff:df:d1:5d:18:dc:2d:64:ce:
0a:ab:4e:31:45:3f:a3:9a:f9:90:02:69:e0:9b:3d:d0:46:14:
5c:12:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:01:58 2025 by rpki-client