Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: CxSxBJvgg9Gx6PfvUYim2lJIOCDbIWa5TXpOFYMH9mE=
Subject key identifier: E1:CD:6D:89:5D:73:FC:D6:4B:EA:4D:65:E1:E7:F4:81:A4:31:99:C6
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 01976929F9D067BB61C7EA12F86FAB79E2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 034E
Signing time: Fri 13 Jun 2025 12:00:48 +0000
Manifest this update: Fri 13 Jun 2025 12:00:48 +0000
Manifest next update: Sat 14 Jun 2025 12:00:48 +0000
Files and hashes: 1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=)
2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: dsmSCPuJKbB6XgPxu8Rn+is61Dtaqxa20yyPd3imcgo=)
3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:f9:d0:67:bb:61:c7:ea:12:f8:6f:ab:79:e2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Jun 13 12:00:48 2025 GMT
Not After : Jun 14 12:00:48 2025 GMT
Subject: CN=e1cd6d895d73fcd64bea4d65e1e7f481a43199c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:a0:d6:9a:66:f9:60:fe:97:40:55:00:a9:
c9:c8:98:88:45:5d:ae:9d:32:39:ec:cb:b7:9a:29:
93:0a:5a:f3:ec:51:d3:4a:0f:f7:af:76:21:ab:ed:
62:a7:76:b7:0a:c0:fd:d5:a7:30:83:9f:5f:b7:0f:
5f:00:99:93:d5:ad:65:43:6c:11:df:e4:0c:52:e3:
77:b1:8c:f0:15:2c:89:6f:09:2b:06:9f:be:27:ab:
b1:31:b6:04:d5:be:6d:72:a1:5f:de:fa:85:74:d9:
f5:98:4e:98:13:ab:1f:42:93:11:8f:41:7a:b4:a5:
58:72:64:ad:12:e7:ed:f3:00:94:57:12:4e:51:8b:
9f:4e:8f:82:7a:89:a6:14:bd:41:22:79:c6:27:37:
13:e9:26:72:78:d9:1e:b8:44:e6:54:3c:94:a3:f5:
68:63:82:fa:6d:80:03:fd:15:f0:56:3b:e2:24:c2:
d9:25:a7:45:0d:6f:97:4b:ca:8d:57:63:58:0d:a0:
35:2b:15:c3:c7:09:14:ea:5e:2e:45:a4:53:20:ab:
c7:be:b8:dd:03:2f:79:5a:4e:eb:f8:6a:40:d6:ff:
7a:5f:ad:86:64:11:5d:d6:81:20:e8:92:90:e3:f9:
a4:e5:70:af:8c:c7:af:8b:cf:ba:ce:0a:fa:95:3c:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:6D:89:5D:73:FC:D6:4B:EA:4D:65:E1:E7:F4:81:A4:31:99:C6
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8b:88:ea:09:29:21:2d:08:50:c6:12:a7:a4:1a:28:13:15:
f6:bc:05:c2:02:9e:e7:b7:17:ae:d1:b3:91:7b:47:b6:4a:78:
bd:a6:82:4d:22:ad:83:ff:b6:30:ea:65:a1:7b:40:06:d7:fb:
3c:d8:75:58:31:f9:f5:82:fa:41:06:da:03:fc:a8:a7:b5:c9:
c1:e5:74:6b:ed:dc:bf:2c:04:1c:33:0d:98:df:71:21:49:58:
64:2c:6a:56:9c:e2:60:81:5e:77:73:0d:a4:f4:81:86:8f:47:
ef:b5:76:64:8b:cd:56:15:da:5d:22:22:e2:36:db:e6:d2:c6:
72:5b:88:8f:03:5b:f4:29:23:4d:7c:c6:46:c1:d2:8c:91:80:
d6:5e:63:6a:68:3a:c3:d1:87:96:48:3b:6d:87:61:21:af:57:
d8:1a:c3:f3:57:13:2c:d5:2e:49:00:19:ba:2d:e2:51:04:f8:
12:24:b3:ea:40:26:5c:bb:7f:89:49:7c:b2:d0:82:41:a0:bb:
88:da:c5:08:36:53:1a:1e:87:1b:cb:2d:28:f8:b5:80:0b:a9:
e5:87:7a:1d:fe:d5:a4:7f:5a:03:5d:cc:26:31:09:2a:b1:d5:
9d:e9:c0:c4:af:45:a8:35:3a:45:2e:6e:8c:f2:74:4f:2d:3e:
b7:11:f4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:56 2025 by rpki-client