Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: DrBnQsI5ShVxwmTChsA8HsnCHcHmANmX1NdNosJ6oos=
Subject key identifier: 29:95:17:79:07:F3:42:3E:DE:9B:F8:7F:1E:9E:44:14:22:68:1B:5E
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 0196C0B85D59E79284D4801D240F54413723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 04F9
Signing time: Sun 11 May 2025 19:00:30 +0000
Manifest this update: Sun 11 May 2025 19:00:30 +0000
Manifest next update: Mon 12 May 2025 19:00:30 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: 85LORkxrXzyDe6FbfQNc8PAoCpvTV1S4fG+z4AXcqOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:5d:59:e7:92:84:d4:80:1d:24:0f:54:41:37:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: May 11 19:00:30 2025 GMT
Not After : May 12 19:00:30 2025 GMT
Subject: CN=2995177907f3423ede9bf87f1e9e441422681b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:fd:2d:57:00:b9:e4:ba:e6:7f:f0:02:6c:
b4:b1:61:cb:9c:1b:4c:ff:a7:54:c7:03:a9:44:da:
68:87:d1:51:3f:b0:56:9d:27:37:b6:df:14:37:93:
71:a2:74:9d:43:ec:35:b6:ba:55:d4:29:84:f3:75:
1f:d8:07:4d:ea:54:a1:40:61:cd:77:70:36:86:be:
21:08:31:15:0d:65:62:9d:55:7b:76:ef:61:27:2a:
71:9e:9a:1a:43:af:d1:30:3d:71:6a:e9:b1:c3:75:
02:9d:3d:b6:60:69:bb:be:71:87:c5:eb:ce:93:b6:
8c:fa:28:7a:47:16:d7:c3:07:c6:9d:d4:c7:25:23:
be:99:a4:70:74:25:4b:db:56:05:3d:c7:1d:65:79:
a5:74:e5:c8:55:e5:ac:ce:f2:48:3d:f8:90:15:98:
32:b6:fd:af:71:55:23:37:1f:3d:23:3f:26:2e:a0:
cf:6b:03:2b:ea:b4:d8:4d:ef:b4:28:72:ab:3c:7d:
82:53:98:aa:05:af:6f:c3:34:5a:6c:fd:b6:aa:64:
75:d0:0d:af:e2:57:66:71:17:69:a0:fa:ad:b5:c1:
de:3f:fa:11:10:ff:4b:46:a3:5a:4b:55:8d:41:14:
1e:87:6e:40:1e:00:dd:c3:9b:5b:85:d1:a6:fe:06:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:95:17:79:07:F3:42:3E:DE:9B:F8:7F:1E:9E:44:14:22:68:1B:5E
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2e:fe:49:4f:e1:d7:26:c6:bd:2a:f0:c5:85:66:9f:e6:f3:
04:4b:b1:1c:24:bf:e1:f3:b4:8e:cc:25:ec:f6:b9:24:4f:2d:
44:8e:9b:8b:58:13:1e:98:58:1f:53:75:c1:60:41:06:eb:17:
68:7d:45:b7:62:35:ae:37:d9:c6:46:5c:3a:07:ff:11:a7:15:
81:c6:c3:c4:05:b6:33:74:6c:9e:d5:ab:48:bf:18:ac:a8:7e:
a7:64:aa:0a:22:fc:7b:fe:c1:cf:da:6c:16:fd:6c:72:d0:82:
bd:ef:2f:d7:e6:41:00:a5:bb:d2:00:26:32:57:80:f4:03:5c:
d4:40:47:5e:fe:cf:97:62:51:32:10:48:63:ee:33:2f:46:a5:
ee:c6:1d:71:7b:ce:a2:75:5a:51:48:a6:a8:df:9d:24:95:81:
13:7a:a1:7e:05:b4:19:e8:17:5e:9f:0d:82:33:c0:34:20:c4:
cf:2c:ab:07:c1:db:2c:f6:dd:0d:75:80:e6:b3:a1:cd:f3:b2:
85:4e:ff:3f:38:34:5e:16:89:5c:57:13:f7:dd:48:5a:27:aa:
53:98:0c:97:e8:dd:a3:9f:8c:04:c0:10:df:38:6f:0f:ff:b8:
0f:54:8b:da:08:17:52:f5:59:74:d2:9a:20:df:7d:3a:a1:77:
86:34:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:09:14 2025 by rpki-client