Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: uRBguPFSEp5t2uFjtvls4I2KqlGzMDLNEZp+HS+/6DU=
Subject key identifier: E3:CD:49:43:1D:51:3D:80:E8:82:07:F0:4F:18:D5:56:7A:D9:E0:44
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 019683918773B660548ABD56E66938770E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 117A
Signing time: Tue 29 Apr 2025 22:01:14 +0000
Manifest this update: Tue 29 Apr 2025 22:01:14 +0000
Manifest next update: Wed 30 Apr 2025 22:01:14 +0000
Files and hashes: 1: 9sTlJL6XI1F8_6pTnGvYUoHPjLc.roa (hash: p/q9OdpuOMeCTpoZABPBjgzLHhfpzMbQS5v48+zxKpQ=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: 43V7GUqXnrj2gNQWRq/l/i4xu+ql5QKNRaFI6QpqQ+Y=)
3: ob104eCQJ_C_ID7VnPR1GOcDcA8.roa (hash: 0O8ntyVniHu4kxwME5VY5LDqj4fbOYlq5O01qeomItA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:87:73:b6:60:54:8a:bd:56:e6:69:38:77:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Apr 29 22:01:14 2025 GMT
Not After : Apr 30 22:01:14 2025 GMT
Subject: CN=e3cd49431d513d80e88207f04f18d5567ad9e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:6c:7b:d1:e4:b2:05:fb:72:d0:96:17:b1:
2e:7b:18:a2:42:d8:73:b5:e8:60:58:9c:b5:42:d1:
7d:e2:da:77:40:14:0a:94:3f:02:70:80:f2:10:c5:
3d:aa:9b:6a:59:3a:d0:d3:b5:20:59:56:ef:37:d8:
c0:1d:01:47:c5:56:5f:9b:00:52:41:ea:15:91:61:
2c:b1:9c:5e:98:14:98:55:d2:53:fb:c7:83:ea:5a:
13:7f:d9:6d:ec:b1:fe:75:fd:3d:fd:cc:87:64:cd:
fa:5a:dc:6e:28:a5:95:e5:3d:e7:ff:51:67:a4:d5:
e4:7b:6a:85:95:e7:fa:fa:2d:a1:3a:2b:ea:a1:3d:
35:45:7b:a1:de:32:37:3c:c3:9a:d5:06:fd:61:bd:
6f:b9:92:51:17:99:26:2b:4c:65:6e:bb:42:f0:49:
61:50:3b:67:ac:11:1d:39:3e:f1:a6:67:1c:7e:fe:
bc:d5:1c:d5:7a:0c:c3:bf:ee:3f:00:db:f1:21:f6:
b1:57:af:00:ec:0f:66:15:ba:95:41:ec:7f:48:58:
b8:00:13:5e:39:a8:4b:47:74:f7:78:06:7a:76:8d:
6e:b2:8e:74:b0:7d:e3:2a:9d:90:58:20:24:e7:6d:
67:51:e1:3e:8d:26:ad:46:f0:11:66:00:f8:51:d5:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CD:49:43:1D:51:3D:80:E8:82:07:F0:4F:18:D5:56:7A:D9:E0:44
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4c:d0:dd:15:37:db:b6:c6:59:42:5f:5d:fa:7b:00:a2:7f:
bb:88:a8:b4:7e:81:64:d7:26:ab:f2:8c:6d:43:26:0c:43:d6:
fd:4c:87:ad:8f:77:9c:ff:1b:97:63:2e:94:28:07:90:57:fc:
6f:a8:ee:97:f6:b7:d2:31:41:15:bb:75:5e:91:eb:59:d4:d4:
0a:ef:2f:04:cd:b4:92:e6:3b:11:2b:61:a4:2f:38:1c:1d:9c:
77:f6:83:7d:6c:6f:69:53:6d:99:53:42:55:7c:39:6f:5b:ee:
c1:60:cb:f3:76:5b:a3:f8:fc:4d:fe:21:21:97:8d:69:16:b9:
04:8b:51:ac:0e:78:45:87:48:1c:3b:88:c2:28:a3:6b:e5:20:
da:66:2d:be:fd:f6:de:93:cc:e4:fb:a0:7b:99:dc:11:44:20:
42:c9:97:f2:51:a4:6a:28:08:ea:12:01:1f:a1:f4:05:af:7c:
61:da:70:94:10:37:00:39:1b:6e:0e:03:43:32:f3:23:e7:c1:
f7:c6:79:d2:2e:37:59:f9:e4:f7:7f:af:d4:a8:d8:7b:93:32:
49:5f:7c:e4:c5:58:21:95:03:3c:27:7e:3c:a5:cf:96:ce:be:
55:80:1c:e9:a9:bd:ef:8b:e0:70:e8:51:05:95:cd:ad:4a:54:
2c:f7:61:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:10:38 2025 by rpki-client