Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: 2+3Ti3thzekpjrpuqHs1hu6FlbhYBJrhiA/SnAC51tE=
Subject key identifier: FD:75:62:40:F9:C4:34:61:12:9C:CB:47:1C:42:4C:B0:84:37:1C:86
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 01976EF5300F5CB41F222CC343A841C36CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 10E7
Signing time: Sat 14 Jun 2025 15:00:51 +0000
Manifest this update: Sat 14 Jun 2025 15:00:51 +0000
Manifest next update: Sun 15 Jun 2025 15:00:51 +0000
Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: /pSzS3lgtUCNROJMeZfevlmvieBV0q624E5wE6GkFmM=)
2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=)
3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:30:0f:5c:b4:1f:22:2c:c3:43:a8:41:c3:6c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Jun 14 15:00:51 2025 GMT
Not After : Jun 15 15:00:51 2025 GMT
Subject: CN=fd756240f9c43461129ccb471c424cb084371c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:da:d4:31:a9:94:f3:a5:79:e4:33:ef:a3:
63:ce:1e:c5:69:ea:48:dc:38:46:98:e6:76:4c:bb:
73:d2:81:9f:e7:d6:66:f4:79:96:5d:43:2e:bd:78:
b1:07:82:b6:c5:1d:e2:7c:a0:1f:93:54:01:08:f1:
73:23:b8:08:75:b8:41:19:a2:2c:b4:27:bb:26:b0:
ef:55:94:3f:a7:9b:db:ce:06:b8:a1:68:a4:2d:20:
35:c3:50:49:6b:3a:c2:59:80:f0:fb:ec:72:08:fb:
55:6c:dc:18:c4:70:08:cc:78:7e:fc:ed:dd:d7:44:
83:45:f9:54:12:7e:27:68:f9:47:88:70:6a:3d:6b:
ac:ae:22:b6:e2:18:7b:18:70:d5:ed:8d:81:9e:3c:
3b:78:3a:0b:b7:7a:64:9a:01:07:ce:3d:ac:c3:76:
34:b2:96:f9:7f:7d:8d:ad:d0:87:bc:f2:b1:07:d9:
b3:98:bb:e5:a6:80:95:b9:68:90:c4:13:0d:ac:94:
33:d8:b5:cb:dc:6a:2b:07:83:52:05:8f:85:f6:51:
05:52:19:c0:ce:94:55:7e:7b:d9:d5:43:18:22:4d:
64:93:00:7c:88:e8:63:68:e8:08:eb:28:17:a5:14:
10:55:14:2f:76:bb:62:38:ea:f4:b3:10:4d:9e:fa:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:75:62:40:F9:C4:34:61:12:9C:CB:47:1C:42:4C:B0:84:37:1C:86
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:eb:ab:15:6f:e9:0e:09:e8:98:51:2d:f3:1f:d1:b4:33:ee:
30:4b:3c:aa:3a:74:41:e6:40:10:eb:bd:fd:89:fc:5a:a6:8b:
6b:45:31:44:61:3b:a5:36:50:c0:6f:05:e4:1a:ae:d1:04:3e:
76:4d:c7:bb:aa:09:98:9b:b8:2c:b0:80:22:f6:1c:2a:ba:cb:
29:ab:ae:20:39:cb:8f:49:4b:3c:42:66:31:01:5f:e4:56:f0:
ad:ba:e9:90:9c:f8:af:b0:0f:41:18:72:a6:ba:3e:7d:80:8c:
b6:2b:d0:f9:66:5c:1f:b2:ba:47:20:3e:4f:f4:7d:fe:29:6f:
d4:c7:e6:7c:cd:fb:62:b5:7f:68:88:37:d8:e2:aa:c2:40:3c:
cd:26:28:99:f8:69:f1:56:af:39:c8:5e:7b:b4:d7:ed:dd:eb:
b2:a3:22:14:d9:9d:23:d9:86:b9:11:7f:b0:39:d3:89:07:cf:
78:d2:32:ee:d1:7c:1c:bc:97:74:d2:bb:b6:91:dc:58:0f:48:
70:34:d1:3c:8b:da:40:d9:8a:66:6f:67:c2:ae:e3:c8:50:de:
75:a7:e8:80:64:88:0f:5b:11:7a:ba:bc:93:02:77:b2:41:68:
04:cf:8a:8c:e5:4e:9d:26:bb:06:94:33:08:a9:c4:4d:29:9c:
b8:31:0a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:25 2025 by rpki-client