Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: WUEO+1nxN+4TwcVpAVXQfTx+OQGSFBxSc6knU85PprE=
Subject key identifier: C9:CA:C9:55:03:EC:6D:0D:1D:FE:98:94:71:A8:5C:BA:8E:C7:0D:80
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 0196AA673C1583F14117DE8B6C85B1626EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 0450
Signing time: Wed 07 May 2025 11:00:14 +0000
Manifest this update: Wed 07 May 2025 11:00:14 +0000
Manifest next update: Thu 08 May 2025 11:00:14 +0000
Files and hashes: 1: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: EdrnH+6AA1OMxV5cXl6xrid4or6oz9cz8kt+n5DKqaY=)
2: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (hash: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=)
3: mB8BgJX73rlkXVf4rQjQxZFmQ74.roa (hash: QKAp2j6WZ6bfCIMjIxWmPLwb9wQaET9IBZN0Uj+49mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:3c:15:83:f1:41:17:de:8b:6c:85:b1:62:6e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: May 7 11:00:14 2025 GMT
Not After : May 8 11:00:14 2025 GMT
Subject: CN=c9cac95503ec6d0d1dfe989471a85cba8ec70d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:2a:4f:75:9b:5e:33:d5:a6:11:e8:8a:b1:
2c:f2:6b:cc:7e:f5:8a:6c:6a:7b:f6:7d:64:f4:f7:
39:9b:51:6b:8c:0b:00:e0:a9:3b:27:b7:1d:4b:5b:
10:f1:3b:72:8d:69:ba:2c:69:ef:8b:86:ae:56:59:
51:91:05:f6:1d:c0:81:81:a1:18:39:52:59:08:70:
6c:83:8a:31:c0:f2:f2:e5:9d:55:9d:1a:df:7e:a0:
29:a3:17:bb:e4:4b:34:3c:6e:44:e4:1e:76:ea:2b:
33:d6:af:99:76:5d:3a:38:b7:69:1a:0f:f8:ab:fc:
48:d9:c5:e5:c8:a1:01:f6:3b:53:f6:70:c1:b8:96:
db:62:63:19:ad:f3:18:39:2c:19:73:47:56:99:ce:
79:35:d8:5a:c6:7a:8d:9d:c2:6a:a1:d6:0b:83:31:
2b:82:a4:7f:94:56:bb:f5:7d:0a:75:46:29:59:56:
1e:15:3a:dd:60:1d:4f:f8:88:2a:5c:97:83:17:67:
b5:39:b5:be:14:83:99:14:e7:b1:6b:28:e7:6a:d1:
02:af:0d:ed:c5:67:0b:ac:e4:64:30:5c:93:fb:ae:
98:d2:04:97:2f:e7:09:50:96:44:8b:57:11:9a:2d:
4a:fe:8d:36:18:e7:31:27:e1:d7:8d:1e:24:bd:a8:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:C9:55:03:EC:6D:0D:1D:FE:98:94:71:A8:5C:BA:8E:C7:0D:80
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2f:88:b6:07:fb:7d:4a:30:c3:9b:8d:db:a1:50:51:29:68:
7f:32:2a:5c:85:f3:9b:65:5b:85:23:e0:7b:e5:d7:ab:73:7b:
dd:64:9c:5c:69:ad:e5:68:86:ff:f0:71:e7:90:97:fe:44:52:
73:7e:fa:0b:12:41:59:f5:b7:d7:6c:5d:99:be:ba:f6:25:0f:
36:47:62:af:66:ed:cb:96:ef:ee:21:b8:81:ca:8f:95:eb:a1:
3b:a2:fc:1d:da:af:77:ce:c4:1c:41:c7:12:0a:a6:11:d7:69:
9d:3a:ff:e7:96:63:72:76:0b:f6:74:be:f4:79:51:56:ed:86:
96:a1:c2:8e:38:40:6e:20:11:e2:6f:85:07:f2:a4:0e:b5:fe:
ba:48:e9:08:c8:b2:ae:e6:68:02:34:c6:e7:1c:34:48:1d:2f:
13:04:91:9c:8d:36:2d:1f:3b:02:61:2f:3e:e3:5c:a5:5b:e2:
0a:30:86:7e:42:b2:9b:fc:4b:28:b3:b5:ed:f6:60:26:8a:42:
8b:5b:c7:b2:b7:88:e5:d0:0a:60:9f:50:d3:b9:69:3c:49:02:
c7:04:2c:ad:0a:12:26:cd:b5:5e:35:ad:75:c0:62:8a:b6:01:
2f:e4:d6:c5:36:fa:7c:fc:cb:99:0a:48:2c:bc:ea:3e:9b:af:
7f:07:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:48:01 2025 by rpki-client