Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier: kY3kqHa9rbzQwZeUefus2Vaxye034WVv4D+Dx0WUL4A=
Subject key identifier: 38:BD:1D:C4:6C:9D:BF:E8:32:D6:6A:36:36:55:2F:CA:E1:F8:9D:9E
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 019681A23E82C8CB13F4BDA91DF60F241CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number: 0CC4
Signing time: Tue 29 Apr 2025 13:00:15 +0000
Manifest this update: Tue 29 Apr 2025 13:00:15 +0000
Manifest next update: Wed 30 Apr 2025 13:00:15 +0000
Files and hashes: 1: QjtOOOK5pwQKBGSkxklhdFksgp4.roa (hash: mBFc78U/Py4iQS+BrsEjELYMOU1hEEh06mY9X8mzPLw=)
2: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: TaBl/+zmMOHbofMvcO7LRQsil48gipGVHEGBJjE2IIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:3e:82:c8:cb:13:f4:bd:a9:1d:f6:0f:24:1c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Apr 29 13:00:15 2025 GMT
Not After : Apr 30 13:00:15 2025 GMT
Subject: CN=38bd1dc46c9dbfe832d66a3636552fcae1f89d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:09:65:77:f2:5e:6b:19:6c:f6:48:be:7c:
61:75:e2:4a:47:21:28:c8:f8:4e:f6:eb:8c:20:bc:
a9:6e:22:7b:16:04:5f:a4:5b:11:44:46:a6:70:1f:
f5:d6:0d:9c:76:e3:a0:e2:54:d2:7c:bd:e1:4c:b4:
e2:44:52:38:3c:9b:65:eb:5b:b8:64:5b:6e:e3:fe:
77:ec:d9:e8:d8:cb:0d:14:2b:a2:fc:02:8a:0d:57:
e1:2e:93:57:9f:eb:10:75:21:f7:bd:3e:9e:e8:74:
0a:1e:67:60:8d:23:a3:dc:e4:5d:ac:79:fa:aa:4e:
7c:41:db:8f:bd:e0:71:43:46:e4:29:11:2b:83:e0:
71:f6:3d:37:9a:47:89:ba:0a:84:03:2a:9b:cb:a2:
fe:5f:19:35:a4:3b:26:91:fb:71:e3:86:52:69:06:
14:74:70:4a:0c:84:63:af:ec:57:8f:94:ba:e7:d8:
9d:83:b0:9a:c9:aa:59:06:37:b5:8a:72:9f:96:0e:
64:e7:6d:c0:45:27:bc:aa:74:80:92:cd:6b:2f:a8:
f2:e8:00:87:18:7e:b0:83:6a:85:75:54:1f:42:38:
22:55:d2:d8:63:48:d9:43:3b:58:af:3b:1c:d6:ec:
f9:b0:41:12:47:f0:9d:34:b6:61:d2:55:7b:d0:41:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:1D:C4:6C:9D:BF:E8:32:D6:6A:36:36:55:2F:CA:E1:F8:9D:9E
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:74:c0:33:c2:f7:10:3c:e6:dc:de:92:03:52:29:89:90:66:
71:31:4b:31:73:e3:47:2c:ae:89:cb:81:12:3a:a2:9e:95:f4:
42:e0:57:8d:47:ec:c2:6e:6b:35:30:1b:7f:48:c3:67:b8:89:
c3:85:1a:c8:c2:94:fc:c6:38:3a:b6:a3:0f:9c:c6:28:9e:ce:
8c:b8:1d:df:09:de:ac:56:82:f5:b5:28:c4:fa:55:ab:0d:9a:
a4:04:16:eb:69:81:8e:4e:b1:1c:9e:b1:06:8c:41:60:d2:62:
1c:a7:55:c1:d6:d1:fc:17:95:6a:d7:75:d5:10:44:24:16:27:
ff:ab:d1:be:d3:f6:12:5c:87:12:b6:52:ce:41:a4:30:ad:f2:
5e:97:d3:9a:40:c0:21:e2:ad:29:f2:ef:9b:30:c4:96:1f:1a:
25:a5:b6:78:6b:3e:91:e2:d1:a6:86:ed:db:7f:a3:72:1c:b5:
0b:7d:e2:8f:c5:0b:91:78:5d:a0:4f:fc:b5:fe:56:91:8f:11:
a8:4d:e9:5f:d6:c4:b4:13:ca:77:cb:c1:b6:6f:ac:16:8d:48:
92:be:42:9c:56:e7:97:85:95:e5:14:a3:53:8d:a6:4f:cf:c7:
b1:a1:f2:e4:1d:bd:bd:9e:ec:50:ca:fb:2f:18:67:f5:0f:15:
e0:cd:d7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:18:41 2025 by rpki-client