Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File: 4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier: SluLQr5RWxGSnOIzU3fqz0K0kr9KgWHeYf5QGon4Wi0=
Subject key identifier: 57:D3:9F:B9:C4:33:0C:ED:68:A3:E7:3F:4B:48:EA:BF:ED:B2:E7:E9
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 0196BCA492193E775D0CBF57BEFB4B64258C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number: 0DE5
Signing time: Sun 11 May 2025 00:00:23 +0000
Manifest this update: Sun 11 May 2025 00:00:23 +0000
Manifest next update: Mon 12 May 2025 00:00:23 +0000
Files and hashes: 1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: xk9OziR0aVYORH1IHD4Rl1nCZxlHaGDANgHcUm72syc=)
2: Mz3zdOLpdrQGVZtJncItYpvPliE.roa (hash: 6F2PNmZ9ECufEFXZhtjXXLlbHL0vIzCdtjQEK5a/NJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:92:19:3e:77:5d:0c:bf:57:be:fb:4b:64:25:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: May 11 00:00:23 2025 GMT
Not After : May 12 00:00:23 2025 GMT
Subject: CN=57d39fb9c4330ced68a3e73f4b48eabfedb2e7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:76:0d:f4:71:fe:a6:22:b5:6d:7c:45:ca:
ab:5d:98:97:c1:39:2a:c4:be:22:35:f2:b4:b0:51:
ce:a2:20:e8:55:4d:eb:de:2e:ef:fd:6b:b6:d0:16:
f3:89:be:08:9c:95:c4:48:84:1b:a6:96:48:07:08:
13:a8:53:37:a3:a1:21:4e:bb:6a:8b:02:33:52:db:
51:3c:1f:7c:df:de:ce:6e:0e:24:2f:0f:44:3e:66:
e6:97:1f:ff:1f:06:78:07:6b:b3:83:71:3f:7d:9c:
16:b5:5f:88:fe:bb:98:5e:77:4f:a8:2f:9a:39:70:
67:b9:66:82:5c:92:04:d4:43:9f:19:c9:8c:1c:98:
92:5f:a2:4a:19:ae:0c:55:e3:62:2a:80:58:65:2d:
96:37:cf:54:98:b2:96:50:e8:9c:8a:aa:82:d6:70:
7f:18:15:c2:57:96:8c:01:72:37:b6:79:a8:ee:0d:
de:6c:65:ac:09:b6:94:2b:fd:fb:84:9d:63:1b:3c:
b6:e6:21:61:99:f7:48:bd:9d:f1:46:80:e9:8f:77:
72:0b:eb:8a:66:3c:7c:a4:33:79:83:27:3b:94:03:
ab:6b:cf:10:53:be:11:9e:c8:cd:3a:9a:9b:62:44:
ca:66:6a:ac:83:b9:de:ab:f7:c3:9a:d1:a2:83:70:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D3:9F:B9:C4:33:0C:ED:68:A3:E7:3F:4B:48:EA:BF:ED:B2:E7:E9
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:98:34:ff:cc:c5:98:a7:3c:3e:47:ed:39:25:d8:da:ec:57:
af:7d:96:a4:1b:ed:b8:55:e1:13:19:74:45:28:da:e2:8c:92:
a6:ec:f3:ad:f4:03:a7:93:6b:c3:ee:1e:b5:71:78:4d:ff:bd:
a0:4b:92:ff:95:7e:04:39:a6:2d:94:35:56:86:5d:e8:17:33:
cc:0c:19:94:6b:a4:f4:9e:66:7c:54:d5:68:1e:9c:ae:e8:33:
8b:bd:ab:4d:10:3a:f2:a4:96:6d:79:15:eb:39:44:e2:38:2e:
ad:62:1b:3c:93:d7:ca:a9:1b:78:35:69:32:5f:17:27:be:74:
ff:c9:a1:72:e7:a4:d3:f4:d4:6b:4b:08:f0:9c:ee:b2:d0:91:
89:4e:28:59:30:e3:88:93:e6:03:27:e7:c6:f8:51:81:33:0e:
b4:17:6a:33:f0:e4:36:e2:20:4b:c9:80:80:bf:96:e5:73:e4:
5b:bd:03:f3:d2:d5:c8:80:a1:94:44:93:10:7a:a2:c6:32:bd:
45:fb:77:5e:f4:41:04:c7:a4:97:5c:37:47:43:4e:37:cf:5b:
6e:68:78:f2:56:3e:2a:ec:4f:d7:36:98:06:b2:d7:57:3d:cc:
92:ea:61:c4:9e:e6:ad:e3:9a:74:fc:a4:01:23:45:8e:d0:2d:
b8:2c:d4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:30:28 2025 by rpki-client