Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: bW+OjRqfeddvOb0eTds45Sdr9HLOOJYeOe5qw2Oq7tM=
Subject key identifier: C2:32:EF:7E:55:CC:CD:61:61:2F:5A:1B:B1:E9:D2:FD:22:0B:35:0E
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 0196CB3C18064B549655C33EE79D629F81E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 20:00:35 +0000
Manifest this update: Tue 13 May 2025 20:00:35 +0000
Manifest next update: Wed 14 May 2025 20:00:35 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: Bknyy0p4BgW/yA/SPBpKIlfYkkzWtm/YN5C/ixXJNKQ=)
2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3c:18:06:4b:54:96:55:c3:3e:e7:9d:62:9f:81:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: May 13 20:00:35 2025 GMT
Not After : May 14 20:00:35 2025 GMT
Subject: CN=c232ef7e55cccd61612f5a1bb1e9d2fd220b350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:9f:cd:3e:5c:9a:b9:97:c0:9f:64:48:cd:
3a:19:0d:9c:82:7a:10:63:61:ca:86:da:51:96:be:
53:5f:52:4e:6c:de:2f:09:ad:6c:89:c7:b7:05:4f:
26:35:18:c9:cb:c7:45:23:f1:6d:1b:1f:b4:5e:1f:
49:f5:b3:ce:4a:e1:ae:25:ac:7b:37:62:9e:9e:fe:
6b:ea:b9:38:90:bd:e7:db:8b:da:d0:1d:93:d8:9c:
7a:77:47:52:77:e4:01:6c:66:44:85:ca:e1:b9:e5:
4a:06:6a:4e:95:1c:f4:45:c8:bb:26:43:29:d8:fe:
b4:9a:8b:7c:2e:e6:41:c0:a4:74:e0:fe:db:78:01:
92:ab:dd:03:5c:e4:82:10:35:f9:d8:cc:b6:d3:90:
fd:c4:57:24:5e:99:f4:0f:5b:7e:ea:64:17:88:46:
77:6e:c2:79:ba:99:94:4e:3d:4a:f9:d5:36:df:1d:
c5:3d:c4:b6:1f:73:59:8e:20:93:c4:7f:5e:5d:62:
b8:60:b9:76:c1:f8:95:8c:91:3c:c2:6c:a6:4f:f3:
6b:ce:74:b9:34:1e:f1:be:6c:d1:34:26:36:f7:4f:
c1:13:cc:0e:20:08:96:f0:98:2a:25:3d:b7:e5:53:
9a:bf:b9:35:34:c5:8c:b5:62:40:d6:e0:95:e7:1e:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:32:EF:7E:55:CC:CD:61:61:2F:5A:1B:B1:E9:D2:FD:22:0B:35:0E
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:08:89:06:24:16:dc:1c:7e:4f:f4:d8:c9:8d:1a:3b:84:bd:
86:c5:ee:19:14:6a:43:05:89:0d:c3:6d:0a:5e:12:6b:96:3c:
54:17:3c:a9:61:03:b4:a4:b3:5f:d5:e7:02:6a:20:af:1e:4f:
5c:c0:4b:9e:25:0c:95:12:45:5f:d0:e3:42:d4:90:7d:a7:e0:
a6:d3:7d:76:ec:4b:d5:28:ea:97:5d:a0:55:ef:85:44:10:aa:
4a:58:c7:e2:ea:29:e0:d0:33:8c:b7:8b:b6:0d:fe:4d:1f:f9:
94:cb:4b:ae:79:69:30:b3:66:cb:99:86:1a:29:66:dc:87:be:
9a:46:a3:fd:46:46:42:bf:6d:ea:ad:bd:a7:70:82:8f:fe:e0:
8c:ec:9b:be:f9:b3:4a:c4:d9:0b:c7:40:f6:dc:a7:d7:10:17:
c9:46:40:fc:50:8b:ed:bb:ad:48:b5:fe:1f:c4:77:3f:a1:16:
ae:00:ae:6f:87:00:c7:88:e3:2f:4a:f8:49:6c:04:c2:73:43:
d9:b8:0d:25:35:7f:43:b8:28:84:1a:32:d5:a7:51:bd:f6:9d:
40:4f:5f:a9:53:24:07:fa:60:16:1e:09:56:a3:2b:e6:30:69:
09:e9:51:4f:a5:c6:90:95:87:0e:0f:08:ca:b6:21:27:1e:d0:
22:df:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:33:31 2025 by rpki-client