Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: 67M3y0BB0mn4t6SZu3oPwz0xwwzaBNWexoYlc6IRboc=
Subject key identifier: 25:10:62:D9:06:AE:3F:9E:2A:5E:CA:93:6B:A3:10:45:32:F2:DD:A3
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 0196C3F0DC3F134CB1F0074F0DDAD0C58003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0BEF
Signing time: Mon 12 May 2025 10:01:04 +0000
Manifest this update: Mon 12 May 2025 10:01:04 +0000
Manifest next update: Tue 13 May 2025 10:01:04 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: utRTVSCVzNkXO5scDau4RzNbbejUc4uPFc+W53+fRDM=)
2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:dc:3f:13:4c:b1:f0:07:4f:0d:da:d0:c5:80:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: May 12 10:01:04 2025 GMT
Not After : May 13 10:01:04 2025 GMT
Subject: CN=251062d906ae3f9e2a5eca936ba3104532f2dda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:49:fc:65:12:68:af:4d:f8:a9:52:ad:7f:
4f:d3:c1:7a:60:e6:17:48:7f:7c:da:38:dc:70:c7:
1b:43:a6:b0:ee:6e:51:1c:7b:6b:e6:76:e5:69:b3:
a2:3d:29:f8:23:83:c7:29:56:92:41:ba:7d:47:25:
e9:22:b7:b1:5f:5d:42:9a:93:6c:c7:bb:5f:85:0c:
96:4e:3d:53:b5:70:62:f0:1b:fb:07:8f:a9:a0:20:
01:e3:da:35:f0:44:f9:d8:1a:6e:bd:d5:aa:cf:78:
07:b9:f5:74:a3:7f:b9:0c:29:01:29:6f:11:aa:f1:
a6:fc:87:fa:ef:bb:bd:7d:57:88:fd:67:1d:3a:39:
36:07:0c:60:92:bd:fd:17:c7:29:25:ad:ec:f8:d4:
48:4b:ec:a9:d7:c5:55:b1:51:61:28:87:bd:88:70:
f7:f4:28:56:ec:8f:7d:be:5a:3a:6c:f6:80:13:b9:
4e:cb:70:5c:47:f4:aa:47:99:00:ea:41:4d:4b:de:
4c:c9:7e:48:de:76:33:c8:05:77:4b:dc:f8:bd:7d:
95:bc:b1:d5:7d:2d:82:a7:45:4d:5c:4f:8d:c6:21:
8a:01:26:22:7a:89:78:15:67:62:a3:57:55:fb:31:
7a:7a:ea:c0:c4:0f:9e:b2:f8:c8:93:fd:7b:0b:95:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:10:62:D9:06:AE:3F:9E:2A:5E:CA:93:6B:A3:10:45:32:F2:DD:A3
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:77:0a:cd:f5:31:a1:1f:21:40:e6:b4:f7:34:9b:8b:66:e2:
f9:be:98:d6:93:9c:68:9c:be:66:a9:2d:5b:db:32:95:89:88:
41:16:70:66:d9:a1:c1:3b:99:51:78:ac:d1:64:60:7d:37:45:
11:7e:49:82:91:71:80:d6:ee:79:bd:03:2c:a1:79:c6:99:32:
16:1e:64:cd:14:0c:55:30:3f:60:bc:1e:48:0c:b0:a3:e8:fa:
fb:04:93:f1:c7:52:68:31:75:8b:9a:3d:ad:9d:0f:d9:1a:f9:
f5:8b:c9:56:0a:5a:99:a5:c1:db:38:28:3c:d2:04:58:c0:e8:
9f:ed:fe:cc:f7:d2:8f:a4:c3:7e:78:e1:e1:f0:af:f7:b3:5c:
c2:77:e3:bc:7c:f9:3c:9b:6f:23:03:2e:b4:98:af:16:c7:a8:
15:94:f1:17:d1:28:3d:30:0a:5e:2a:f1:c3:d0:72:41:53:b4:
55:40:6e:cd:4c:55:7f:ce:1d:77:b3:9d:16:3e:c2:25:7a:fd:
2c:52:64:d6:1a:80:17:b3:e3:35:56:93:78:45:3f:41:42:ff:
9f:c6:97:66:00:ab:d3:c0:63:d9:eb:88:44:fa:fd:56:01:3e:
7a:02:96:2a:9f:e7:34:95:d4:1e:f2:0f:62:39:a9:32:4e:35:
98:fc:cb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:57:10 2025 by rpki-client