Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: zACl6CD5dgVepAZolap0UXoux4i+Zd94hQoq4esVrfw=
Subject key identifier: 4B:26:28:0C:D3:D2:37:DB:FD:E1:A6:CF:D5:BF:78:0E:8F:BA:1D:3D
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 01967567D0998B0607DF72FBCF58F2B399BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 04:00:59 +0000
Manifest this update: Sun 27 Apr 2025 04:00:59 +0000
Manifest next update: Mon 28 Apr 2025 04:00:59 +0000
Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=)
2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: 4Jc+2Ez7TV3AWPGlwD6ThCCRVSDAQFjE5Eqew2fDemA=)
3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:d0:99:8b:06:07:df:72:fb:cf:58:f2:b3:99:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Apr 27 04:00:59 2025 GMT
Not After : Apr 28 04:00:59 2025 GMT
Subject: CN=4b26280cd3d237dbfde1a6cfd5bf780e8fba1d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:97:7b:f4:43:67:90:3d:ec:6a:f7:d2:5d:
48:99:c5:0f:76:de:5a:11:48:77:0e:d7:d9:01:bf:
1d:b0:9d:e7:83:1d:36:ab:84:ca:01:93:63:f3:45:
88:f6:01:f3:30:46:d5:54:cf:f1:29:ef:52:53:b9:
13:f3:94:18:8e:61:f9:d0:db:68:52:bc:d4:31:cb:
7c:e2:48:30:ea:23:93:3a:a2:c3:b9:1d:3a:62:4b:
6f:e9:da:64:01:d5:3a:b8:2b:fa:a4:5f:f7:98:6a:
20:a6:e0:5e:22:41:0b:19:fc:d2:9e:35:0b:27:d0:
ee:85:ef:61:a4:b1:bb:95:dd:6a:be:d4:63:f4:7d:
ec:b8:f6:bd:12:c4:9a:2d:38:bf:8e:b7:85:c8:3f:
b3:a8:8c:85:9e:f9:5a:e8:90:aa:8a:15:5c:ee:14:
16:88:6b:33:81:9d:f9:d4:a3:89:b8:b7:d4:17:5a:
1e:b0:e5:7e:23:56:fb:51:b1:b3:29:04:b1:0d:c3:
ca:cb:f5:1d:a7:31:81:ec:82:e3:a1:55:f1:71:6c:
7c:a5:1f:67:11:26:b1:9c:12:59:3c:0b:e7:72:16:
b2:3d:4e:64:3a:57:c7:90:ac:5b:b4:ca:9a:c1:3a:
a5:ea:a6:53:0b:a0:ac:cd:9c:2e:ba:e5:be:a8:7d:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:26:28:0C:D3:D2:37:DB:FD:E1:A6:CF:D5:BF:78:0E:8F:BA:1D:3D
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3c:fe:0b:cb:83:46:60:5a:ca:b5:eb:47:04:0f:85:81:7a:
77:31:65:e7:fa:aa:91:df:57:5e:e7:fa:cd:80:58:4d:04:30:
e9:de:e3:e5:c0:d3:ea:e8:9e:57:e8:58:da:2a:7d:c5:4f:8d:
67:d8:c4:36:35:63:8b:9f:4d:91:10:62:c5:13:fc:ca:47:6d:
74:71:1d:ae:76:2a:ea:42:54:00:71:0b:54:e2:11:4f:5f:22:
2d:cb:55:c7:ca:cc:91:6c:e4:93:a0:63:8c:db:b2:a7:e7:be:
e4:49:7d:90:e0:89:5f:ee:38:0f:5a:db:bb:eb:23:4f:a4:32:
d1:db:25:c2:c8:ed:6b:e7:67:61:4b:0d:bb:4c:bc:a3:28:c7:
78:8d:76:63:c7:58:ba:ff:e7:10:c5:75:49:31:59:21:dd:07:
71:e9:cb:0d:a8:4f:dc:30:b9:79:2f:bd:7e:55:4e:97:79:c8:
89:24:5c:26:df:1e:38:62:f6:f0:61:a9:70:a0:2e:51:2f:24:
c8:ab:19:95:9a:e5:e3:76:3b:24:6d:c5:3e:cc:29:37:e3:63:
d1:c1:90:44:57:c6:55:09:58:1a:56:d3:e1:00:86:ad:38:84:
2c:8b:7d:27:fb:ee:13:8e:ad:0c:6a:f6:c0:29:d3:ea:fe:34:
14:02:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:30:22 2025 by rpki-client