Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: W+U0vWCvn30AOA52OEcpK24hNmUjZLlaAR+PPaQxesk=
Subject key identifier: 4F:BA:F4:39:76:E0:12:10:E1:10:21:A7:02:D4:08:9C:A7:86:31:1D
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 019686FFB5C4F2153459929D6B5582CB1429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 14:00:27 +0000
Manifest this update: Wed 30 Apr 2025 14:00:27 +0000
Manifest next update: Thu 01 May 2025 14:00:27 +0000
Files and hashes: 1: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: zxMadjgBVL0kNNFB+dsFka3q05E266yF313CjIbNVGc=)
2: qMVYOgqIzk9KMROylZiVtF-t3Zc.roa (hash: xqIRDpc2sFOdr1/l4Pzbo0nNaeEXShJ8C0GuGpTGneI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:b5:c4:f2:15:34:59:92:9d:6b:55:82:cb:14:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Apr 30 14:00:27 2025 GMT
Not After : May 1 14:00:27 2025 GMT
Subject: CN=4fbaf43976e01210e11021a702d4089ca786311d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:cc:6f:a4:52:f3:b7:a7:6e:c0:a2:a7:60:
04:77:46:31:bf:55:a7:c8:1d:96:a2:f4:1b:7a:a4:
cc:90:3e:34:c8:a4:09:9d:65:58:0c:f4:73:ea:92:
9e:1a:60:f9:8b:d5:2b:3f:9b:7a:37:81:27:ce:bd:
60:9e:f1:29:66:72:a4:48:6f:e3:53:f5:91:e5:a5:
4a:ce:17:28:84:b0:8b:23:c9:b8:ae:a9:db:f7:22:
4e:94:b0:f0:f2:d6:01:fd:51:cc:8c:90:f8:81:f0:
e6:85:93:33:b8:6b:af:53:a7:ff:69:0a:1f:c5:f2:
e5:e7:86:55:aa:e2:df:ab:e5:96:88:38:64:0d:11:
d8:df:ab:f1:48:eb:e4:89:e0:15:e6:d9:24:8b:18:
8e:dd:e7:61:3f:38:ca:97:d7:1d:eb:61:c1:26:ef:
45:c4:a7:5b:05:65:23:2a:7f:e3:3c:0a:46:6c:59:
bf:25:7f:76:81:db:2f:94:e3:dd:b0:cb:5b:5a:4d:
71:bc:5c:0f:cb:db:49:7b:d8:85:b4:23:86:3c:c3:
81:e2:45:09:28:ff:a2:5e:49:9c:09:43:7a:c6:77:
79:7a:30:df:47:e3:ad:b5:c6:1c:4d:ff:31:9a:0f:
e9:e2:30:89:1b:7f:9c:75:a6:3b:6d:ec:24:c0:b3:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BA:F4:39:76:E0:12:10:E1:10:21:A7:02:D4:08:9C:A7:86:31:1D
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:06:1b:03:4f:85:c0:5c:9b:e5:21:3b:bd:d7:ad:e8:c5:a2:
bf:d1:25:0e:05:02:63:0e:50:53:95:43:1a:1e:67:7d:13:59:
78:49:b8:6b:0f:18:5b:2c:bb:2d:6a:fb:4c:cc:cc:ac:8b:e2:
fa:f4:e2:f9:91:61:4e:3b:b6:cc:06:9e:f7:94:c8:1e:95:fc:
8d:8d:c3:d3:f3:d3:35:39:38:2d:72:1e:03:4c:be:cb:01:45:
45:97:7e:58:c8:d3:8a:90:34:66:ae:0a:09:fd:98:1e:19:aa:
16:25:d9:47:60:79:e4:cb:31:be:75:20:4f:d4:1b:d0:9c:44:
11:75:18:11:6a:fe:75:52:2c:2a:80:97:20:d1:42:eb:80:f0:
16:ac:83:c6:8e:58:47:5b:4b:fc:db:5a:e9:58:93:9c:69:53:
67:f9:16:58:fe:61:a4:27:96:39:cd:9d:8c:b2:88:03:91:f2:
22:98:3e:5d:7a:02:09:66:ec:3a:9f:71:03:e1:95:f4:21:95:
d2:d6:64:e8:89:0a:61:33:be:17:b4:0f:25:7b:63:43:b2:ba:
3e:f8:d9:b7:0d:c6:bf:dc:5d:19:11:df:78:b9:e3:71:bc:e7:
f2:fe:f4:ca:d9:a7:df:f4:b2:26:44:93:b1:3e:ee:76:98:2e:
d5:98:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:59 2025 by rpki-client