Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier: WHHknom+JNQzDMGxtFWW+PNsbWGkpqyKftpb3KeMqMQ=
Subject key identifier: BF:D9:18:45:B6:84:59:32:60:AF:94:DC:48:52:3A:C5:50:92:F6:87
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 0196BC6DF56F3DE3EB93BDAA70156828B1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number: 024E
Signing time: Sat 10 May 2025 23:00:44 +0000
Manifest this update: Sat 10 May 2025 23:00:44 +0000
Manifest next update: Sun 11 May 2025 23:00:44 +0000
Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: FdrF8rBdkNli34STc0cu2g6kb4mmu80AH+C+LeUr8uQ=)
2: MVPwNZ1sWh_qT3u_yevkatHjGzM.roa (hash: C2EFQTV5AK3R2J2AxwzeI6jL/kPjrl3mk/7AjDMYss0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:f5:6f:3d:e3:eb:93:bd:aa:70:15:68:28:b1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: May 10 23:00:44 2025 GMT
Not After : May 11 23:00:44 2025 GMT
Subject: CN=bfd91845b684593260af94dc48523ac55092f687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:01:39:09:b9:f1:c2:6b:bd:fe:c3:f5:5e:
a6:0d:9e:d5:39:8a:3a:98:34:71:53:82:a8:0b:c5:
c7:04:cd:24:fe:a4:e8:41:03:36:9a:bf:f5:21:a9:
41:dc:a9:e7:1c:9d:88:b9:d7:d1:f0:f8:c0:28:93:
20:8c:a0:50:81:74:68:7e:1a:0a:f4:16:b7:9e:0e:
3c:5d:b5:3f:d8:a4:26:c3:9d:9a:10:bc:56:b1:e2:
24:d2:3f:27:03:73:c5:05:f2:65:d1:33:f3:11:c3:
68:2a:d2:73:ee:be:aa:8e:f4:ab:7f:33:a3:81:e8:
94:61:a5:b5:34:c5:4d:6a:80:09:21:a2:81:e7:3b:
3a:ad:f8:a2:70:c0:c6:87:93:aa:c7:9b:8d:8d:5c:
32:65:6b:90:08:e7:b2:82:6f:0f:e2:8d:93:a6:46:
8a:dd:85:17:44:70:fd:54:55:cf:52:77:23:36:a3:
e2:9b:78:a6:b7:94:e0:2c:7a:42:a9:f8:64:af:25:
31:e1:8e:7d:45:f3:b9:fa:0e:29:08:b7:be:9b:07:
c6:a3:a1:19:79:cd:24:84:91:6d:f1:5f:71:cc:ce:
ff:48:d9:c1:62:0a:03:40:b4:f8:f1:3e:f6:00:de:
0f:eb:65:a4:0b:75:cc:b6:d7:d0:6c:8c:4c:6d:ad:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:18:45:B6:84:59:32:60:AF:94:DC:48:52:3A:C5:50:92:F6:87
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:85:a6:7a:8d:6e:c3:39:63:8a:92:5c:d2:9a:05:4c:ec:31:
fa:b7:00:b1:60:7b:bb:c7:79:16:d6:8a:0b:91:84:e3:1a:92:
c4:11:88:68:74:e7:92:ef:65:5c:9e:a3:91:f3:e8:46:19:aa:
59:97:8f:42:08:3b:74:1e:93:0b:c0:c7:b9:1c:75:e5:8e:28:
05:a4:2e:d7:a0:3d:96:24:6f:d3:98:2b:f5:e7:9d:c5:1d:bb:
49:01:0e:dd:6e:54:ec:0c:c2:1f:ee:e1:72:42:df:02:df:89:
95:82:f8:a0:24:a8:2c:5c:a0:ae:e8:93:e2:1a:c8:67:ad:ab:
78:a1:ea:c4:df:56:29:ac:29:ec:2d:8e:76:68:50:a9:92:cf:
d7:82:2e:5c:8d:10:7e:3e:0e:b7:8f:66:ad:1a:a5:4f:4c:48:
1d:a2:27:73:a2:39:89:93:70:1d:b5:51:0d:3a:1d:30:9c:17:
d9:50:10:a4:19:fc:7a:48:78:0f:da:cc:55:05:b3:7b:30:36:
8e:fc:70:f6:20:00:20:11:c0:f4:b0:c6:ff:c5:17:e8:a4:5b:
69:df:82:87:95:90:16:ff:96:60:71:d2:61:27:e1:36:ae:f3:
fe:49:a9:a9:0c:55:e8:9c:0f:4a:68:0c:42:e0:ba:54:91:2e:
36:df:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:38:50 2025 by rpki-client