Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: sNi8TyJTHJPpMxDwX/RuU683P5IeMh8KHE/7URQId6w=
Subject key identifier: 4A:A5:65:10:A9:90:E1:E5:68:3B:40:24:44:F5:BA:59:88:61:1C:70
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019674C2BBD7709533A47DB1957A37847E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0A62
Signing time: Sun 27 Apr 2025 01:00:41 +0000
Manifest this update: Sun 27 Apr 2025 01:00:41 +0000
Manifest next update: Mon 28 Apr 2025 01:00:41 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: +F4Lj9rZPI5MOdZDdU3G8zXkDBuKgY8ZwVUrRASVAug=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:bb:d7:70:95:33:a4:7d:b1:95:7a:37:84:7e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Apr 27 01:00:41 2025 GMT
Not After : Apr 28 01:00:41 2025 GMT
Subject: CN=4aa56510a990e1e5683b402444f5ba5988611c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d5:38:12:49:af:0b:02:29:bb:f6:35:c2:5a:
8d:5a:57:4d:15:0e:26:20:73:58:69:ec:9a:ce:89:
ff:04:04:99:b3:28:ed:7f:cf:d3:c1:9b:e2:e2:aa:
19:11:e6:3e:b6:cc:2a:56:07:98:65:2f:e7:44:04:
9f:f5:24:6e:cb:61:b4:b2:66:50:82:ee:b0:fc:0d:
5a:5f:7d:47:a0:ff:4c:a6:01:7f:1a:07:54:e2:4e:
2f:41:a5:a5:e5:5f:3e:2c:70:6a:57:ff:38:dc:4c:
50:26:51:f4:4e:d1:e8:4c:37:54:77:8e:b1:7a:3c:
42:9d:a0:4d:a0:8e:62:8a:93:62:f4:03:62:0c:68:
ef:9f:9a:11:54:f1:fc:d8:7f:47:77:2d:75:9a:64:
b8:26:74:a2:fb:e4:d0:dc:1d:37:f3:03:f5:74:25:
1c:65:c3:5e:20:80:c0:2a:ce:59:97:ec:b4:c9:c9:
1a:86:f7:16:9d:d1:a2:8b:f2:9a:b5:b4:dd:cf:06:
3e:63:96:93:5c:6b:25:32:5f:49:1a:9f:ca:e5:0d:
1d:eb:39:00:93:59:eb:9a:a7:59:41:67:c6:68:d9:
7b:8a:b0:ff:1a:5a:80:b4:e0:dd:22:c5:f6:56:c0:
a2:17:75:e1:cb:01:c9:56:60:b0:d6:78:65:92:17:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A5:65:10:A9:90:E1:E5:68:3B:40:24:44:F5:BA:59:88:61:1C:70
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bf:05:fa:8c:37:0e:db:d5:40:5c:7e:bc:94:12:58:64:6e:
e9:1d:32:8f:f7:37:b9:22:87:4a:85:45:da:ce:40:ad:b5:ee:
15:2d:e6:93:55:70:84:e1:fd:08:5c:5b:06:15:90:c8:c6:d2:
59:34:d3:9d:e2:67:f2:52:4a:32:6d:89:a4:dd:74:63:1d:ad:
2f:7a:8e:2b:96:35:47:81:7c:51:1b:62:9d:4b:0a:d3:00:0d:
91:8d:19:f8:43:a0:55:c8:87:89:b6:08:48:1b:09:26:1d:12:
98:1e:95:98:fe:78:29:0d:c1:30:9d:2e:50:6e:92:ab:7c:6f:
32:07:ea:6e:27:87:e1:d1:27:76:a9:40:b2:4b:ff:22:75:7c:
75:78:55:6b:29:ed:60:2d:5c:93:79:c6:46:bd:4f:73:33:2f:
cb:23:4d:f5:d4:84:20:b9:47:28:d6:73:fa:17:0d:ae:65:87:
73:78:53:fe:1d:9b:f3:3d:35:d0:58:b4:9e:a1:dd:a6:3e:5e:
f4:13:17:77:d7:45:ff:99:7e:d3:9f:3d:28:f8:72:6d:3c:ae:
38:f0:d1:34:a1:6b:0e:13:6b:13:43:f1:08:32:49:e5:0f:6c:
a3:ff:ba:e0:a0:33:a8:29:7c:2d:fe:3b:3e:f5:37:13:0a:9a:
80:02:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:46:51 2025 by rpki-client