Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: 74gJDMQkzGj26j7h+/4YLFEcn+0rIh7VswL2+inf2+s=
Subject key identifier: A8:6C:57:91:0E:6C:BC:4C:CE:99:8F:F4:C3:8E:F4:AC:A2:F7:42:34
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 0196775575731B1AAE8A3B19DA4558CB9730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 0E39
Signing time: Sun 27 Apr 2025 13:00:11 +0000
Manifest this update: Sun 27 Apr 2025 13:00:11 +0000
Manifest next update: Mon 28 Apr 2025 13:00:11 +0000
Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: jepDGIcAMGJCexRxFvZUDbnvXP47VeVzVBMyMC8TtCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:75:73:1b:1a:ae:8a:3b:19:da:45:58:cb:97:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Apr 27 13:00:11 2025 GMT
Not After : Apr 28 13:00:11 2025 GMT
Subject: CN=a86c57910e6cbc4cce998ff4c38ef4aca2f74234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:f7:d7:26:9d:3b:64:3a:23:1a:67:81:7e:
8e:99:eb:10:c4:bc:1c:ea:fd:55:71:6a:45:9e:1e:
83:9f:13:b6:43:b6:f2:1d:18:fe:ab:57:c7:7d:27:
c6:97:b8:71:46:de:da:3d:4b:c6:e6:67:24:75:f5:
52:d9:2d:58:86:54:04:57:03:ae:77:e4:e3:26:89:
f6:58:dd:d8:75:0a:85:f7:6e:1d:20:9b:77:cc:10:
20:96:14:2d:8d:d2:c3:32:1a:72:39:6d:94:bb:f8:
cf:54:63:05:e8:f7:3c:37:2e:23:81:b8:af:d9:65:
af:74:37:ad:cc:a0:44:45:78:86:4c:b1:b8:44:73:
f5:00:5d:09:9e:aa:91:14:df:ed:f9:df:cb:83:90:
d6:a0:56:1d:df:11:e0:34:26:41:e5:c0:b2:ef:b5:
47:80:02:cf:65:bc:dd:9c:1d:e6:ce:39:9b:49:7e:
c4:3b:b9:9e:d5:c1:26:9e:69:b0:e9:d3:da:0c:56:
a7:ad:19:80:90:aa:41:a3:a8:21:c9:ae:70:54:bf:
0c:49:b6:71:48:10:dc:85:72:68:5f:8c:5e:80:ab:
41:e6:4a:63:ce:60:f3:42:59:0a:57:d8:1f:6b:7c:
4f:c0:a1:07:99:f0:67:c5:9c:a4:a0:1a:63:84:00:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6C:57:91:0E:6C:BC:4C:CE:99:8F:F4:C3:8E:F4:AC:A2:F7:42:34
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:08:0f:fd:71:af:3f:0e:df:ba:2f:ed:61:5a:3f:13:d1:46:
4d:e6:19:94:09:52:9f:d2:cc:50:b3:dd:69:7c:93:79:8e:3f:
b7:51:30:22:73:af:57:7d:ee:28:7d:02:5d:da:e1:8d:76:62:
29:c9:87:f0:0d:9f:bb:2f:6c:09:a9:3e:19:5a:a5:2e:db:00:
5d:d7:cd:db:78:fa:80:65:0e:cf:2f:6a:7a:cd:cf:8a:16:1e:
b0:62:4a:25:d6:bc:62:2f:9c:42:94:d2:47:47:de:39:ed:7d:
52:51:42:66:06:7a:ba:00:14:df:f7:c7:90:37:a3:3c:b6:83:
87:6a:b4:06:6d:a3:8d:d7:db:f5:a6:e0:a1:d0:cf:b7:38:2f:
36:cc:1d:08:0e:20:8e:64:32:96:24:ef:e7:4f:58:c1:f4:7b:
4a:23:db:36:36:2d:80:bc:b8:f7:ff:7d:74:a9:4d:dd:b5:f5:
73:4b:9b:86:8b:05:8a:7e:87:b8:70:5d:ad:16:97:a2:ce:e8:
b4:dd:9a:22:80:64:ee:c6:63:24:8e:15:36:0a:84:cf:0b:bd:
3a:e0:e2:18:70:a8:6f:20:15:3b:ca:ed:9f:80:9e:05:78:f1:
13:6a:8f:50:8c:11:a0:54:88:9d:66:e0:1d:58:55:42:eb:9b:
74:82:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:25 2025 by rpki-client