Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
File: 4e2SJYT2My2woOpx4XX2ql6NN54.mft (raw, json)
Hash identifier: 08mr0KhoZEn9pCevemCtkzdcmimf6ZsXwi/BIQIjpXc=
Subject key identifier: 77:94:E5:C3:23:9B:0D:6E:F6:15:D7:70:AC:71:E2:7A:F7:95:F8:F6
Authority key identifier: E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
Certificate issuer: /CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Certificate serial: 0196BB91B8F120F42B54682C79EB87357035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
Manifest number: 0667
Signing time: Sat 10 May 2025 19:00:11 +0000
Manifest this update: Sat 10 May 2025 19:00:11 +0000
Manifest next update: Sun 11 May 2025 19:00:11 +0000
Files and hashes: 1: 4e2SJYT2My2woOpx4XX2ql6NN54.crl (hash: R3ovZAJVCw1VCiL/iOWVZY/k6QflUsZ44neb+K2nHCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:b8:f1:20:f4:2b:54:68:2c:79:eb:87:35:70:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Validity
Not Before: May 10 19:00:11 2025 GMT
Not After : May 11 19:00:11 2025 GMT
Subject: CN=7794e5c3239b0d6ef615d770ac71e27af795f8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:23:b5:26:8b:6b:11:d8:c5:8d:6c:21:7a:
79:e1:60:c2:8c:6e:3e:cc:a4:22:7a:91:80:eb:e7:
e0:98:3c:8a:47:07:b2:9e:99:55:99:c2:03:67:df:
fd:3b:e7:48:19:a3:e2:40:b8:54:60:e2:90:cc:ee:
c1:1c:7e:25:6d:4a:4f:dc:cf:63:ac:82:03:b8:16:
40:9c:8d:8b:b8:19:76:77:13:9f:a4:59:43:8c:ad:
0f:6c:8f:e2:42:ef:09:36:b5:05:61:3b:8b:cb:3c:
99:6a:f2:10:e7:83:b7:9d:55:50:b6:3c:c8:e2:4d:
3d:01:ae:11:c5:d0:c5:0e:09:ca:c2:f5:4b:6f:b8:
57:03:dd:68:7f:d9:ec:0d:c9:b8:4a:5b:6b:19:80:
38:85:bc:1d:7e:94:6b:91:62:a2:2b:c4:55:0d:e2:
eb:15:d1:95:f0:58:8d:b0:e4:9c:d8:de:fc:44:3a:
0b:36:31:bd:1f:3f:f4:53:12:98:ba:d0:8b:25:35:
79:9c:fe:5d:34:16:52:a6:a3:31:f1:69:70:65:ff:
3f:43:17:c4:9c:b5:67:8c:3c:f4:38:36:9d:cc:6a:
70:3d:fb:1e:2e:f9:f6:b3:a5:5c:e7:ab:7c:92:36:
73:0e:66:ab:e0:97:15:92:e6:88:8a:d0:8a:85:b7:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:94:E5:C3:23:9B:0D:6E:F6:15:D7:70:AC:71:E2:7A:F7:95:F8:F6
X509v3 Authority Key Identifier:
keyid:E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c4:7c:5a:b4:ca:59:76:38:1c:42:79:12:34:e9:61:4d:40:
ff:62:66:94:53:a5:d8:c7:60:57:2c:3f:a7:eb:5e:4b:13:a3:
17:f6:28:95:da:c1:a0:9d:c7:07:61:68:69:06:3e:ff:73:59:
3c:0a:de:55:bb:59:c1:ca:97:19:3f:cc:b8:35:37:17:37:86:
32:17:91:26:1a:3c:c0:5f:78:29:39:0e:a6:14:7d:dc:f5:80:
db:3f:c7:ea:c6:ca:0c:c0:f1:2d:38:ce:54:3c:6f:9f:8d:ff:
46:44:aa:8f:ed:39:fd:1b:39:c6:2c:00:47:3a:e1:e8:77:62:
1c:bf:1e:ce:0f:8a:0e:59:07:44:56:c1:5a:64:7b:eb:1a:88:
73:4f:b5:d3:99:56:4d:15:27:28:29:2d:3a:8c:55:3d:8d:03:
e3:75:a3:4d:02:1d:10:bf:44:cc:5d:d6:f9:10:a0:eb:06:04:
78:0a:df:29:ab:8b:82:f8:24:6b:df:d6:7a:4b:e1:e1:2e:46:
65:b9:66:fa:e1:33:32:bf:3d:d7:08:1a:cd:78:83:e3:cf:c3:
4f:ab:02:54:40:07:27:e9:33:3c:d3:97:4d:ac:a8:17:ab:94:
4a:c7:da:7f:08:c6:f4:7b:aa:68:ca:42:b7:4b:70:0f:35:0e:
a7:67:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:48:33 2025 by rpki-client