Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: 60Huql1xixou4+ZqxiZDlpiu/ckyKt7WcIIFJSGDHPE=
Subject key identifier: 43:61:6A:AC:CC:E4:BF:DD:E7:72:DB:03:8E:A3:20:04:E4:4D:A8:08
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 0196BE25A3600D2773FAF1D745086FCFD4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 03EE
Signing time: Sun 11 May 2025 07:00:59 +0000
Manifest this update: Sun 11 May 2025 07:00:59 +0000
Manifest next update: Mon 12 May 2025 07:00:59 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: 7PJR39bJKvCkQ1May0lPC07SPF3z3KZfNnD0/kViExU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:a3:60:0d:27:73:fa:f1:d7:45:08:6f:cf:d4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: May 11 07:00:59 2025 GMT
Not After : May 12 07:00:59 2025 GMT
Subject: CN=43616aaccce4bfdde772db038ea32004e44da808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:49:0b:06:46:f9:d6:03:a9:c7:43:27:36:0d:
60:b0:89:0b:d9:5f:9e:d0:36:27:55:c2:b2:3d:73:
0f:c8:47:79:c0:f2:31:03:bb:60:48:7b:25:d5:c3:
97:a3:90:ce:2b:9b:1f:05:97:cb:5c:fa:a3:6d:63:
d1:99:9f:04:24:57:2d:b0:20:ae:97:d8:26:18:6b:
4a:91:4e:17:ba:81:61:a4:00:ec:17:9b:9c:46:67:
53:f0:59:c5:dc:ff:65:f7:9f:a3:10:38:96:a8:92:
9a:02:49:b8:00:e7:91:df:dc:d4:30:27:d3:cb:b4:
72:89:d7:25:8a:8e:9a:41:ad:be:7d:16:7d:49:11:
35:4b:fc:62:46:97:40:43:2d:a0:44:8d:8b:b5:47:
4b:9a:20:90:52:ee:e8:6b:44:d0:56:c8:07:20:f2:
55:68:63:28:41:02:02:84:b3:e8:d6:1f:de:1b:1b:
78:85:07:e6:76:fb:c0:1e:60:b1:ac:67:20:51:8f:
ba:f9:cb:1c:a9:f3:d3:11:fb:83:50:32:4f:19:26:
b9:61:e5:5b:4b:77:23:2f:d4:92:a5:95:16:84:59:
97:72:60:4e:43:cc:29:9a:70:66:1c:a6:fb:57:0a:
2c:73:ae:8d:50:b0:37:94:1b:51:aa:e3:1c:1b:aa:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:6A:AC:CC:E4:BF:DD:E7:72:DB:03:8E:A3:20:04:E4:4D:A8:08
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:45:c0:3e:72:68:0a:97:e5:ae:12:35:53:85:3a:4c:ed:df:
ae:d5:43:0b:3b:09:78:e2:2c:d7:c7:95:fa:8a:c7:ee:a0:8c:
72:cd:75:9d:9d:6c:4e:64:36:c7:a2:5a:54:5a:30:b3:9c:33:
d0:09:e1:12:89:06:48:5e:31:7b:ab:f4:55:83:97:5b:f2:61:
06:a6:6c:bb:84:34:1c:92:2d:f8:27:ea:fd:24:c5:5d:93:fd:
80:9c:81:99:cc:b1:50:79:70:15:7c:46:cb:ba:69:d6:38:b1:
e8:74:bc:ea:84:2d:84:5b:d5:0e:84:06:b0:55:ea:60:ce:86:
39:5d:3c:62:35:05:b8:e9:42:22:ca:5f:31:31:b7:6e:1e:dc:
54:76:b4:ec:45:e6:33:d5:69:b1:3f:24:32:6e:33:52:ed:68:
69:52:45:e1:88:86:b1:f2:ab:68:0e:9f:5c:e5:a1:6f:37:3d:
7f:19:22:cf:1c:02:42:2a:39:e2:74:27:79:7b:f3:1e:f0:f1:
93:09:50:a0:77:92:3f:5a:7a:4f:fc:3f:93:7e:7e:53:24:ba:
cf:d8:cc:57:67:3e:21:ff:ec:16:65:f8:c5:9c:62:5f:22:40:
62:80:2d:83:53:8b:ae:9e:fb:9d:6e:79:fe:d3:e0:12:99:88:
0c:d1:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:12:29 2025 by rpki-client