Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: ifZJAiiLrrWckKyKZsZX6zC3IHh7nz9fsEJ1utTluZE=
Subject key identifier: 95:0F:3E:EB:BE:DE:1E:9F:FB:F4:E7:41:B3:77:25:B0:4D:C0:22:B5
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019682474F08C11D4D26A4DD4B26FF4AFE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 0DFE
Signing time: Tue 29 Apr 2025 16:00:33 +0000
Manifest this update: Tue 29 Apr 2025 16:00:33 +0000
Manifest next update: Wed 30 Apr 2025 16:00:33 +0000
Files and hashes: 1: HO5kHHVnIPEFaMxltsULzo8s2Vc.roa (hash: Pi2xNmIKaW+pbH3+gTOC2OW0sYYGJ1NWu+Za1hJg9Rk=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: X33tKnj49GXUgCCgd1yacqeUqBqBm6IeFI2roksQflk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:4f:08:c1:1d:4d:26:a4:dd:4b:26:ff:4a:fe:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Apr 29 16:00:33 2025 GMT
Not After : Apr 30 16:00:33 2025 GMT
Subject: CN=950f3eebbede1e9ffbf4e741b37725b04dc022b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:7f:ad:b2:ea:52:81:8c:88:54:a6:b0:f3:
13:1d:db:5e:b7:74:2c:ba:bb:b9:93:16:e7:d2:1d:
7a:ab:52:d5:32:b3:2b:ec:4e:3d:d3:4e:93:c3:cb:
9e:25:8f:19:76:3e:f7:e3:e2:ee:23:0a:c8:41:c5:
7e:6d:70:52:dc:66:90:23:10:ea:41:49:27:34:9c:
24:f0:1c:c3:3f:74:83:16:74:2d:d8:b9:ec:ec:b6:
1c:96:08:8f:9b:7a:59:23:82:3c:17:60:a2:76:2a:
51:29:fb:b2:67:41:a0:9e:8d:24:90:46:ee:e7:49:
a9:99:19:b0:d9:4f:42:a1:85:b1:ab:54:90:d7:d9:
25:48:f2:d4:26:94:8c:e9:b4:41:86:95:6e:c9:5a:
0d:db:4b:3b:d5:1e:0f:2d:ae:9a:17:b2:b8:dd:d4:
00:10:a7:62:cd:20:32:72:87:d1:6b:25:4e:7a:e6:
eb:bd:73:16:a2:ae:80:e5:0c:81:91:6b:8b:6f:df:
1f:f9:76:fc:10:e7:2c:2e:24:25:bc:f2:42:1d:dc:
94:a2:29:53:00:32:86:3c:d6:c1:c7:d8:4b:bc:d6:
1b:bc:42:a5:6d:ea:05:0c:58:cb:1a:2b:f6:b5:40:
de:80:e1:31:8e:bd:b1:32:44:3c:28:f6:24:02:b4:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0F:3E:EB:BE:DE:1E:9F:FB:F4:E7:41:B3:77:25:B0:4D:C0:22:B5
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5c:3a:65:5d:05:fc:30:c4:11:a4:69:8b:bf:f8:97:cf:3a:
ae:2b:f8:29:0d:50:ce:f5:2c:60:7e:c2:62:b8:7b:1f:36:c5:
df:30:00:f7:b1:0c:78:ce:6d:7e:e8:00:26:5f:5f:c8:e2:43:
f4:01:38:7c:7e:8d:e4:8c:9d:f7:dc:2b:e9:5d:84:a3:57:db:
ce:83:d4:67:72:6a:50:95:d8:aa:fd:8f:db:e4:b7:a3:f5:34:
89:ca:28:6f:3e:d7:ea:05:2a:54:bf:3b:10:5b:48:6f:8b:da:
c4:b4:35:0b:89:c0:f3:49:33:cd:55:32:4e:74:46:a3:6e:8b:
61:1d:73:6b:b0:0e:be:40:a9:1d:d7:98:a2:87:53:a0:ea:ad:
22:75:c7:1f:2e:83:d5:ca:66:13:2d:93:be:b1:2a:92:10:4f:
d0:e0:cf:88:1a:12:be:48:19:eb:73:7b:ec:c4:ed:c0:93:64:
b4:94:44:b5:9b:d8:24:18:d3:4a:64:98:6f:d9:b7:70:4b:a6:
cd:ba:bf:dc:7f:d6:35:fd:7d:9c:b9:43:b3:a4:2e:5d:af:ff:
8e:18:45:45:f6:44:23:80:1a:ae:9a:5e:df:5f:a6:48:61:e5:
fe:31:06:43:df:b9:45:cc:11:93:75:6b:1d:4d:ea:73:4e:a0:
65:88:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:41:06 2025 by rpki-client