Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: R+Vu1kqIIs8ZRGPVJK3sUbR5V+0NN/ufUoLJaM+hQk8=
Subject key identifier: 3A:80:59:6F:36:9A:8D:19:68:98:77:B9:A9:4B:7C:09:E1:9B:05:6A
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 0196C2DDA77FEB126D998E4AAB21634ED81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: CC
Signing time: Mon 12 May 2025 05:00:28 +0000
Manifest this update: Mon 12 May 2025 05:00:28 +0000
Manifest next update: Tue 13 May 2025 05:00:28 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: BQ7VcMDMYwgzrtigEaV9znxJNsk66NWTIXHFtoglwtg=)
2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:a7:7f:eb:12:6d:99:8e:4a:ab:21:63:4e:d8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: May 12 05:00:28 2025 GMT
Not After : May 13 05:00:28 2025 GMT
Subject: CN=3a80596f369a8d19689877b9a94b7c09e19b056a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:79:87:57:a2:c1:0c:a4:df:ed:5c:f2:17:
73:b4:10:2c:03:96:f8:6e:7a:86:6e:d6:af:96:ed:
5a:30:ee:f7:21:39:52:42:99:8c:e2:6a:05:22:a5:
76:f4:4b:f5:c1:43:20:c0:41:49:03:8a:32:09:50:
15:9f:f2:ac:4f:31:4a:e7:4c:e3:43:09:6f:b1:25:
d8:02:06:bb:9d:08:83:36:b5:92:2c:73:0a:59:65:
96:24:8a:03:9c:d8:a3:bc:42:3b:68:27:79:5a:0b:
58:37:d0:e6:c8:b0:80:23:5d:d0:b1:56:66:00:6b:
da:74:82:a5:3c:74:f6:cb:09:08:8a:82:12:1a:fc:
6c:ff:ce:98:a4:31:7b:6d:ca:e3:69:dc:3a:e8:33:
61:64:f2:c8:48:4e:49:76:fe:96:eb:b4:84:88:32:
b8:cd:4e:ff:86:8d:d1:89:7e:d8:c0:9e:de:c7:fd:
6b:66:eb:52:7f:5b:23:91:30:1d:41:d0:77:94:34:
d4:4f:d1:4b:5b:8f:91:b6:37:77:ef:7f:8e:98:3c:
ed:a7:bc:d3:af:57:c2:5a:3a:fa:1e:e0:d0:d0:29:
bc:b2:4b:a8:cd:02:22:02:5c:2c:1c:b6:f8:dc:c3:
9f:84:50:79:bc:d6:20:b1:1d:97:ac:d0:81:bf:df:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:59:6F:36:9A:8D:19:68:98:77:B9:A9:4B:7C:09:E1:9B:05:6A
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:65:11:28:7b:f7:b6:1c:33:2c:d3:f0:40:c3:84:af:8d:
de:58:07:4d:0a:cb:ae:35:cc:cd:20:17:ad:18:b7:66:22:04:
a7:20:b2:73:46:d2:41:a2:d5:a8:d6:1e:89:39:38:78:67:e3:
89:87:b4:7e:1c:45:d2:32:f2:df:e8:cb:89:87:4c:16:4f:63:
9d:0d:6e:dc:58:72:36:f1:5a:b7:bf:ef:8b:6d:4d:35:be:2b:
ee:f1:95:c4:12:1f:28:f8:54:ed:24:3a:49:2e:9f:1d:6a:df:
62:bf:94:08:bc:87:b5:56:5b:ee:8d:8a:1a:fe:51:fa:22:c2:
5a:a9:82:19:9e:ca:94:06:e2:3f:21:23:e0:a5:d3:54:1e:74:
1f:69:11:c3:a7:6b:2d:f2:5c:95:84:e9:b8:30:01:4f:09:39:
ae:17:0e:6e:40:5c:a6:4e:95:e6:57:9c:18:99:bf:77:64:05:
16:df:ae:79:b2:69:49:64:98:b6:32:56:c9:83:4f:1b:06:06:
03:83:43:79:65:32:13:14:5a:ca:71:65:94:4f:65:d2:6e:72:
aa:be:44:ee:0c:d9:a7:96:a9:03:75:8b:99:dd:60:5a:bd:0a:
86:9c:b0:a2:ef:49:32:81:77:70:4e:4c:3c:4f:9b:34:1d:18:
35:8e:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:06:28 2025 by rpki-client