Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: jzFVuol8r65m37C2DhzLQr9tX6H8/hVdQoDDF1ZSgvQ=
Subject key identifier: 96:46:A1:03:D1:9C:51:A6:86:F0:5F:1D:86:5C:33:B3:0F:75:03:7B
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 0196BD804EE84FF8DB2AF2136A6EC46A98CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 04:00:24 +0000
Manifest this update: Sun 11 May 2025 04:00:24 +0000
Manifest next update: Mon 12 May 2025 04:00:24 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: qSu3FjR7vkdqPGhbtI3Z0xAmZOZBpVIUGn99818tsag=)
2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:4e:e8:4f:f8:db:2a:f2:13:6a:6e:c4:6a:98:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: May 11 04:00:24 2025 GMT
Not After : May 12 04:00:24 2025 GMT
Subject: CN=9646a103d19c51a686f05f1d865c33b30f75037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:dc:5a:a7:14:ce:79:0c:2c:76:c3:5f:04:
8e:0d:2f:34:72:db:c9:74:f3:cf:47:be:55:b6:69:
8d:35:01:a9:4f:a3:83:21:36:ed:62:44:f6:60:ef:
50:37:8d:e8:e9:06:59:4b:60:b4:49:fc:b5:e4:4a:
6c:0d:b1:36:05:2d:10:6b:c0:87:cb:a8:fb:ad:40:
1f:a2:b2:8f:30:05:58:4e:79:01:51:86:54:b8:ce:
54:42:f9:0f:52:87:28:0c:de:99:5f:8c:db:d4:17:
ff:21:e2:02:a3:a6:6f:4e:fc:7d:0e:08:79:7b:74:
cf:3d:79:ff:83:56:0c:7c:c1:4b:60:ca:24:66:fb:
84:04:d7:a6:8a:82:ca:02:67:a7:2d:80:23:45:66:
ca:51:ae:ea:d9:d9:f5:14:50:69:36:c4:c6:c1:00:
0e:2e:8e:64:83:a8:89:19:39:a8:1d:59:39:d3:02:
9a:cf:cd:5c:db:3e:66:c4:25:1b:9e:19:32:d6:16:
e3:b3:3c:48:ba:7a:18:4c:c6:cc:d8:37:46:8a:bc:
1c:2f:d6:88:8f:f5:ab:51:ba:02:5c:3e:8f:3a:2f:
e3:06:32:57:b4:5d:79:57:75:03:15:fb:72:90:b3:
2f:56:92:ec:60:b0:ce:e8:c6:80:4d:e6:b9:a7:25:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:A1:03:D1:9C:51:A6:86:F0:5F:1D:86:5C:33:B3:0F:75:03:7B
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:aa:5b:42:c7:cb:23:a4:66:b8:29:51:e8:3b:72:03:1e:32:
0e:82:e1:67:3d:7f:f8:43:49:a6:5f:42:dc:65:10:46:5d:46:
15:07:11:31:e2:ba:5c:67:1b:84:51:15:7a:2d:98:a3:78:7f:
f4:f8:d5:36:7e:b9:d1:26:b2:7d:64:1f:a6:ec:07:ff:22:8e:
14:be:fb:ff:9e:7c:bb:eb:4e:f7:f4:56:34:46:ba:82:88:dc:
bd:bc:13:af:d9:e8:1c:c1:cb:a1:53:7c:46:33:4b:05:c4:9e:
f8:4c:54:94:64:6c:a0:e4:f3:34:43:d2:98:d6:f3:28:63:24:
8a:d2:14:8b:e2:f3:84:33:71:bd:ea:e5:a2:8c:d3:11:c9:21:
81:97:e0:8b:90:ce:bf:4a:87:79:03:d7:6c:dd:f8:8f:15:f7:
a5:aa:9b:ce:d7:3e:de:b5:e6:1d:15:f5:9b:f0:79:72:15:71:
fa:02:19:e9:20:9e:85:fc:ec:4c:68:85:dc:ce:11:78:70:ac:
b0:c5:ad:fd:95:ad:33:ad:8f:f4:ee:a6:75:0d:a0:1d:ab:ae:
36:da:ca:9a:fe:5b:9c:86:3e:0a:e6:23:93:13:f2:e0:18:10:
7d:c7:ed:10:36:50:6a:cd:e6:78:bc:5e:01:3d:34:bf:cd:ff:
00:6d:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:07:35 2025 by rpki-client