Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: HhhGNguLRencu1yYS+6mDCMY3RS6KridyNjThCW/2WU=
Subject key identifier: 99:B4:C1:62:62:E6:71:12:B2:B2:5D:F7:18:4F:C4:FE:DD:51:C3:2E
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 0196BE935E9F0CB5C3C3B813B1A02AD6A8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 1209
Signing time: Sun 11 May 2025 09:00:51 +0000
Manifest this update: Sun 11 May 2025 09:00:51 +0000
Manifest next update: Mon 12 May 2025 09:00:51 +0000
Files and hashes: 1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: JBS97ZS2s7yWt5KTTfMh0ukY3MednutAjWpRwzNemS8=)
2: Gwy6_uUvgZKl_FsgbK0SBR2765s.roa (hash: e+42Dv5ZMct1RmCP3DiJKtyiBUgVYfDjN9qagjZj7ck=)
3: RoGLSCET83zk1v-3GNDAGUmNCf4.roa (hash: TK8/4ls6e1537IxcrmPC8DEH8k32Or5yu+pxFNpz4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:5e:9f:0c:b5:c3:c3:b8:13:b1:a0:2a:d6:a8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: May 11 09:00:51 2025 GMT
Not After : May 12 09:00:51 2025 GMT
Subject: CN=99b4c16262e67112b2b25df7184fc4fedd51c32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:0a:be:85:5c:ae:75:c8:b8:d6:17:3f:1e:
0a:ff:4d:27:4b:90:6e:e5:02:86:aa:ea:2d:99:80:
37:7d:fc:86:2d:ff:b3:8c:a9:d8:0d:fd:64:7d:49:
41:d4:d4:be:e5:c6:b1:35:42:85:27:0e:dd:e7:01:
fa:cf:44:b7:ae:19:a3:1a:95:ba:3f:a1:c0:8c:d6:
ce:f5:bd:e0:e0:84:f7:08:38:20:d8:2a:d4:39:9f:
70:04:cc:64:c6:6b:f8:1e:08:1f:b0:81:9d:e2:47:
a0:d3:aa:05:e5:99:56:97:3b:4e:d4:82:ae:b6:30:
a6:58:8d:46:a3:81:76:f9:23:52:09:ba:39:c1:83:
16:55:44:fb:74:24:b4:fa:f2:ed:77:79:84:23:da:
c1:60:35:57:7a:ae:73:c2:20:e4:88:fc:5c:37:3b:
28:43:a0:b7:ee:e5:4f:ea:2d:5b:ba:fc:c6:57:42:
90:09:cb:36:04:75:76:ec:3f:22:6e:55:bd:01:90:
2b:f6:1a:f8:6c:cb:83:7a:57:a8:e4:8c:3a:1f:e0:
0c:f3:7d:5d:df:a5:bb:e0:32:83:08:86:92:92:89:
25:7a:4f:ac:8b:2b:82:6d:5f:d8:88:f8:a2:e2:dc:
7a:21:f7:e4:24:d9:bf:aa:52:ce:30:75:96:d4:c5:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B4:C1:62:62:E6:71:12:B2:B2:5D:F7:18:4F:C4:FE:DD:51:C3:2E
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:14:3f:43:ae:c8:a2:d6:ac:84:80:3a:04:a4:a5:12:06:38:
bd:4d:c6:9a:33:16:33:4e:85:21:00:06:1a:b3:60:c6:f5:5e:
7c:3d:d9:7e:20:81:2b:34:aa:ba:1c:01:0f:7a:d4:7d:29:3e:
2d:91:f5:11:5b:fa:2b:40:13:89:d6:5d:00:15:36:39:04:b3:
59:20:ce:cb:9e:76:e6:a6:84:4c:67:cc:5a:9c:29:ba:39:cf:
d9:98:90:79:32:e7:6d:24:dd:b4:cf:64:6d:f5:a9:f9:c0:83:
ce:93:e9:75:1e:1a:ba:d5:76:5c:21:4c:e1:f4:b6:7c:4e:51:
71:cc:ad:50:de:8c:2b:f5:18:7f:93:97:83:6f:03:42:99:0b:
3e:a9:5b:ef:c0:7a:b1:11:3a:58:59:57:1c:6c:2c:1e:9a:59:
c8:77:2c:c3:7b:44:4d:44:b4:f3:7e:91:87:aa:97:58:98:c5:
00:7c:50:7d:ad:66:25:72:98:ef:19:9f:f0:74:2d:b5:6c:16:
61:47:f1:3d:e3:aa:67:09:bc:14:e6:c9:ba:e5:8c:ba:6a:b7:
d3:93:1c:e0:bd:3d:9c:46:cd:f5:b7:1e:b0:6c:9a:a2:6d:00:
e2:a6:31:1c:78:2f:9b:41:10:0b:00:dc:08:67:09:65:e6:de:
e2:fb:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:26:39 2025 by rpki-client