Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: 4fbHmZ2TI9wqS1YI+1TTPD434ONapUdmrtSaXbrtVKg=
Subject key identifier: 34:76:40:F0:41:10:12:D5:59:0F:D4:93:57:A4:31:A1:B5:06:58:D6
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 0196B0A0F1DD30ADB804C761A315E6FDDA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 08A3
Signing time: Thu 08 May 2025 16:00:59 +0000
Manifest this update: Thu 08 May 2025 16:00:59 +0000
Manifest next update: Fri 09 May 2025 16:00:59 +0000
Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: agihraw8v7L0mqGmIuAdFtaBVlTHb3+vW1sFAL/o9qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:f1:dd:30:ad:b8:04:c7:61:a3:15:e6:fd:da:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: May 8 16:00:59 2025 GMT
Not After : May 9 16:00:59 2025 GMT
Subject: CN=347640f0411012d5590fd49357a431a1b50658d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:3d:23:95:0f:22:51:ba:73:5f:28:a1:ba:
fa:d2:ba:e6:80:2e:c7:18:47:3c:ca:f7:67:23:81:
4c:46:a3:49:62:13:c1:bc:c0:cd:e6:b0:bf:e6:b4:
be:28:db:d7:64:c4:cb:b0:5c:d2:3c:9c:01:94:4f:
aa:13:8e:30:80:70:55:2d:32:55:7d:5c:34:15:20:
1b:d9:5f:b2:cd:9e:5f:34:66:43:c8:36:5c:16:70:
c3:e6:bb:f5:38:aa:09:15:a9:7b:54:fe:81:d6:4a:
23:83:e5:82:a3:03:7a:7b:fa:53:5d:d6:ac:05:57:
fd:ed:62:63:0b:56:57:c6:0a:a2:34:62:4c:9b:c9:
f1:87:2d:91:28:db:90:41:50:06:3d:3a:d5:24:a4:
5a:13:1a:05:00:c9:fe:a0:e5:33:2d:43:65:1f:36:
95:4c:3d:dc:50:3a:2c:ee:62:10:8c:a4:ff:8d:97:
7d:e2:21:99:80:51:6d:60:a1:59:eb:ca:19:68:c3:
d4:50:3e:61:ee:c6:c2:6d:24:1f:9a:34:cc:ea:81:
34:95:03:9e:71:a2:1e:56:5d:c8:3b:e0:60:a1:b9:
51:28:77:d1:76:f5:53:e6:89:dc:c9:a5:a3:ca:91:
9f:87:3c:a8:8c:07:a0:df:85:71:ad:c6:ba:b2:99:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:76:40:F0:41:10:12:D5:59:0F:D4:93:57:A4:31:A1:B5:06:58:D6
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3b:99:8a:aa:25:4b:ec:4c:79:1f:3a:17:b0:b2:2b:be:0e:
d7:91:37:e6:9b:e5:df:c0:13:33:17:64:d6:90:1c:ae:09:48:
b8:66:46:c1:9d:52:65:8a:ef:ae:1c:10:26:48:27:eb:5d:b3:
9a:2e:33:fc:e3:3c:d4:ee:e2:80:06:40:18:1f:22:21:24:aa:
de:30:2c:0b:4a:bc:eb:d7:80:12:67:6a:a3:cb:f7:12:be:0b:
de:62:6b:f1:08:04:af:04:f6:ea:1b:d7:2c:66:ce:78:f8:ed:
0e:4d:92:31:c3:db:a9:cb:cf:2f:3e:4c:7b:1d:40:d3:76:58:
3c:3f:63:12:97:e1:8f:61:7e:30:af:54:ec:e0:e9:7b:6f:89:
e1:88:d3:eb:4e:9c:ef:3f:41:f4:e9:4d:2a:af:1b:d7:4d:d6:
0f:2e:44:54:da:9b:40:8a:57:16:81:c3:4e:de:92:65:c8:53:
84:6b:40:50:1e:00:44:fc:a6:d4:ed:16:61:50:f1:40:c7:0a:
80:38:cc:9b:ba:82:3a:0b:a3:ae:95:92:c3:8d:7f:18:a4:bf:
80:39:01:49:61:57:81:19:f5:be:1a:9f:c7:68:6d:39:be:b0:
aa:fc:2a:50:77:2b:01:ba:0f:45:66:ee:7c:c0:20:0a:c0:dd:
9c:4e:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:47:17 2025 by rpki-client