Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: oGigqaN3sQvx0D+ZpQbgO2fLjsNN2JwHBQbACftvXuE=
Subject key identifier: C9:74:CC:49:72:88:38:2E:84:6D:98:D4:0F:F6:ED:73:72:B8:52:23
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 0196AC8CD8AAEF2E6406D26B4F407AA592C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 0FB5
Signing time: Wed 07 May 2025 21:00:33 +0000
Manifest this update: Wed 07 May 2025 21:00:33 +0000
Manifest next update: Thu 08 May 2025 21:00:33 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: jxDy9+OxjZiRSu1+8pe6VD4adMNI7mtq2uM7d9LkNQ0=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8c:d8:aa:ef:2e:64:06:d2:6b:4f:40:7a:a5:92:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: May 7 21:00:33 2025 GMT
Not After : May 8 21:00:33 2025 GMT
Subject: CN=c974cc497288382e846d98d40ff6ed7372b85223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:0c:61:93:d3:16:ac:de:a4:4b:dd:ad:bb:
a1:ac:90:57:0a:84:9d:91:67:a9:26:1d:ab:2f:de:
38:e6:b9:76:8d:08:f3:76:f5:49:3e:c3:3d:fd:f4:
c8:54:1b:c6:97:bc:cc:7e:8c:0d:36:38:59:c4:b6:
e3:09:39:2d:51:fe:ee:79:90:6e:6b:54:36:eb:b6:
f2:ed:2d:47:41:04:2b:9a:99:36:83:c4:fa:9f:14:
3f:d5:a4:d9:81:d5:85:93:90:82:e4:90:ed:ba:24:
fe:15:1d:d7:27:a8:98:7d:c0:0c:be:b5:62:f7:95:
d5:50:1c:e9:13:a1:fd:4a:a4:71:eb:ce:13:36:9a:
84:f4:50:ca:be:43:2a:92:a7:9e:58:86:80:ec:41:
f1:08:51:d8:92:6f:da:12:1a:81:2c:af:e0:35:d8:
b4:b4:25:d9:73:ab:67:76:c4:66:15:06:99:c7:4d:
fc:68:20:14:5c:76:61:f4:2f:99:f0:b9:f3:e0:88:
79:42:ce:97:a2:27:f6:f3:85:ce:95:af:75:ce:f1:
5a:22:4d:73:5a:a6:41:7c:8b:02:20:a1:63:a4:93:
2d:43:ad:44:f6:be:f6:d7:4b:48:6a:5e:17:7f:bb:
55:6e:4d:78:45:fe:f8:3c:e0:88:b1:27:91:80:5f:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:74:CC:49:72:88:38:2E:84:6D:98:D4:0F:F6:ED:73:72:B8:52:23
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6c:5c:e8:fc:2b:a8:a7:0c:29:da:2a:e4:85:36:63:93:ee:
75:2d:4b:e7:e0:ce:21:6a:8c:2a:61:96:0b:42:82:eb:af:6c:
4d:96:0c:ed:53:3f:d5:64:6f:36:99:fd:1a:8a:cf:4e:05:92:
b4:ff:46:2c:e6:46:74:06:57:a4:56:70:3a:72:e8:64:7e:b3:
12:de:0d:1e:d0:79:cd:ec:b8:e7:43:a2:7f:5d:2d:02:73:d5:
a1:13:bc:10:78:14:a0:a0:f1:ed:cc:57:b1:a5:7f:0a:a1:8b:
d8:10:4e:16:aa:c1:39:35:6d:02:7d:11:09:41:6d:63:89:ab:
aa:f4:9a:28:8f:44:d0:80:a7:65:10:36:bb:bc:82:f5:c6:29:
f2:35:b7:92:10:5a:7f:0e:69:2a:98:70:d1:40:2c:93:67:ec:
5e:4c:1d:f1:6f:2b:91:25:f9:3e:30:5d:07:ee:8f:3d:7b:75:
cd:76:65:dd:7d:87:2b:80:31:9e:18:08:ae:2a:1e:d3:fe:99:
de:1b:99:92:d5:30:7a:16:39:f4:69:8e:3b:d7:2e:ac:0d:ad:
ac:c7:69:67:e8:58:40:85:45:04:23:4f:00:59:f1:71:53:10:
44:19:c4:d1:7a:d2:66:69:b6:37:fe:b7:86:c9:69:d5:ae:ee:
da:c2:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:55:56 2025 by rpki-client