Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: bEXxd/L/JgeHFj7zQxxHnprQSysbhx1EA+w97ZAXNKE=
Subject key identifier: A2:99:E8:F3:43:29:15:EA:8C:14:94:8A:EA:4B:92:C7:FD:50:8D:8A
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 01976D3D54229E4D1A7A9873D162ED79DE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 11F3
Signing time: Sat 14 Jun 2025 07:00:25 +0000
Manifest this update: Sat 14 Jun 2025 07:00:25 +0000
Manifest next update: Sun 15 Jun 2025 07:00:25 +0000
Files and hashes: 1: 9sTlJL6XI1F8_6pTnGvYUoHPjLc.roa (hash: p/q9OdpuOMeCTpoZABPBjgzLHhfpzMbQS5v48+zxKpQ=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: z3QCZkuDOd0js+6q6uBKdVCfXuuKeaJfg81uoyeKHsA=)
3: ob104eCQJ_C_ID7VnPR1GOcDcA8.roa (hash: 0O8ntyVniHu4kxwME5VY5LDqj4fbOYlq5O01qeomItA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:54:22:9e:4d:1a:7a:98:73:d1:62:ed:79:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Jun 14 07:00:25 2025 GMT
Not After : Jun 15 07:00:25 2025 GMT
Subject: CN=a299e8f3432915ea8c14948aea4b92c7fd508d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:5d:4f:79:94:55:7d:ad:92:49:6c:e2:a2:
55:65:8e:54:f1:09:06:34:43:18:90:e8:ab:67:b7:
6c:fd:ac:f2:87:38:76:a5:6c:20:ed:25:8a:35:2a:
73:25:f2:f3:48:99:fa:ba:48:12:7c:8b:5b:92:45:
33:67:14:7e:c3:3a:ee:e1:d2:87:f9:73:7f:67:b1:
b5:9b:45:5f:1d:d7:c3:21:bc:b6:c8:25:15:24:23:
4b:f0:8b:09:e3:a1:e2:c5:21:97:1b:69:a0:54:4c:
2b:e3:6d:e7:0e:18:14:ad:34:06:ed:4f:79:a7:16:
aa:9c:ef:8a:65:b9:31:06:9e:f1:9b:ac:08:6e:4e:
c6:d1:57:16:a9:5c:be:7f:02:5b:41:c3:6c:cc:5c:
77:8f:e8:c4:fe:fa:dd:ef:e8:f8:f8:35:79:17:d7:
af:c0:49:d8:bf:06:d0:c2:23:bb:ac:b6:ec:a4:5e:
44:67:88:4d:6a:94:53:c8:53:bf:5e:97:60:6f:a0:
4b:f8:03:e6:89:fb:51:4e:c1:45:d8:a0:68:33:b9:
7b:44:db:96:95:3e:32:e8:bd:1d:df:a0:f7:a6:5d:
48:d4:81:a9:5e:65:3a:96:71:ed:62:fc:7c:56:c1:
25:b4:a7:d2:db:fa:9c:70:b0:92:1b:df:70:be:b3:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:99:E8:F3:43:29:15:EA:8C:14:94:8A:EA:4B:92:C7:FD:50:8D:8A
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d3:1d:71:41:ee:2b:45:4c:db:4b:c6:7e:89:3a:78:cc:39:
3e:c2:5d:5d:21:3e:c4:7b:36:dc:b3:91:ff:10:80:cf:86:cc:
a2:48:f0:a4:5f:9a:56:82:20:03:b8:87:d4:0a:d3:46:3a:cc:
b8:4d:d0:21:97:92:14:00:41:e7:f0:36:f2:98:a3:3f:ae:17:
a0:63:92:eb:72:7a:f4:a8:b9:f0:5f:5a:a3:4d:5b:ed:94:02:
42:b4:9e:4f:2d:4c:ac:60:96:96:9c:47:3e:a0:3b:07:f2:67:
e3:12:45:34:a8:8f:9f:db:18:2a:cd:e3:7d:38:3e:0a:34:c4:
cf:50:d6:f3:02:a3:09:c2:83:20:1f:af:8e:00:56:cf:b4:4b:
9b:04:ea:02:4d:ff:b3:2f:19:11:e7:40:75:f5:ce:57:74:8d:
5e:b2:ee:0d:d7:c6:c8:e8:af:18:a9:25:84:2d:be:10:7c:3d:
b9:73:7e:f1:bc:03:39:bc:af:be:5a:af:a5:2b:53:9c:41:c4:
88:1b:34:f3:b6:c9:ca:2b:8e:6e:60:3e:19:74:9f:78:d9:87:
2b:92:ac:69:7c:10:bf:fe:5d:d0:73:71:d6:97:ba:dc:ff:77:
0e:97:1d:15:43:08:0b:36:40:03:30:c8:d0:96:3e:aa:e3:db:
71:45:0e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:12 2025 by rpki-client