Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
File: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft (raw, json)
Hash identifier: +H7T/SvFJZeqbKaItL6D3Kf8kr0TG9Vj492G1/AeFNU=
Subject key identifier: D7:11:38:94:CC:F4:53:E1:D7:3C:87:AA:B5:AD:F3:07:A9:B5:B5:99
Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
Certificate issuer: /CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Certificate serial: 01969FE43CE4A5E038DD36B149B1A0C7E971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
Manifest number: C1
Signing time: Mon 05 May 2025 10:00:56 +0000
Manifest this update: Mon 05 May 2025 10:00:56 +0000
Manifest next update: Tue 06 May 2025 10:00:56 +0000
Files and hashes: 1: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl (hash: 9IWe6igTVYbfuZuysU1GuLQV4SOQmo8t3IVv1+lZuQ0=)
2: V9qSkag-yPFb6kdg7t_bXdafQY8.roa (hash: /gE5NbLPMb6fQQc04np3UK1UkGHwo2L/kFXUOBu9e5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:3c:e4:a5:e0:38:dd:36:b1:49:b1:a0:c7:e9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Validity
Not Before: May 5 10:00:56 2025 GMT
Not After : May 6 10:00:56 2025 GMT
Subject: CN=d7113894ccf453e1d73c87aab5adf307a9b5b599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:20:d9:28:28:b8:3f:07:99:0e:0f:db:da:
56:37:6a:f8:1b:05:e3:7e:91:2a:93:7c:d0:a7:52:
cc:16:f4:fb:2b:6f:d4:7e:84:23:54:17:a7:65:c7:
94:ab:dc:80:b8:98:4e:92:69:9e:b5:cf:39:39:87:
f3:e4:4b:5a:c1:5f:cd:86:3c:88:33:77:a5:1c:e8:
19:fa:e4:a7:03:66:8d:9e:fe:96:be:64:24:63:49:
d8:64:5c:b4:c1:b6:9c:20:fc:24:f2:93:e4:6d:ef:
be:85:21:d4:fb:32:8c:81:6b:e3:45:fe:55:c4:16:
21:65:94:4e:64:90:24:16:f4:92:98:00:00:78:db:
7c:24:55:af:71:9e:11:a7:d1:d6:ba:27:b2:8e:6e:
2f:c2:30:0a:33:da:c0:d4:5a:fe:c9:9b:76:24:06:
91:66:4b:30:8e:22:a8:38:94:29:8c:1f:2c:80:5d:
6a:22:ed:70:d1:4f:be:98:89:40:34:83:56:43:2b:
22:be:6b:3e:36:74:21:a8:04:3f:7c:71:af:61:b3:
62:59:e5:77:ae:e9:d4:83:59:4d:bb:fc:66:d5:65:
c7:b9:e4:92:e1:3c:5a:d3:52:98:bf:c6:48:29:f2:
01:b9:80:bf:45:89:06:88:61:f2:88:11:0a:41:12:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:38:94:CC:F4:53:E1:D7:3C:87:AA:B5:AD:F3:07:A9:B5:B5:99
X509v3 Authority Key Identifier:
keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ef:7e:a9:ec:49:45:66:6e:64:f3:ca:93:98:ae:6b:ee:d6:
17:c1:5e:9d:ef:a4:6a:c0:54:ac:dc:da:e8:83:d4:c2:e3:40:
0b:0e:5a:4c:00:45:60:db:2c:90:fc:5e:c9:55:85:30:bf:37:
45:4d:7d:18:d1:51:84:d3:a7:62:02:9c:4b:0f:1e:40:c1:30:
d7:37:86:8b:38:be:a1:21:59:3b:64:f2:8b:fe:71:9b:1a:78:
0f:26:57:7b:46:65:9b:ae:fd:79:9d:f7:e0:70:56:fc:5b:91:
2b:27:14:ec:08:01:6c:3c:dd:23:29:61:0a:49:33:51:c1:50:
2a:ab:a9:66:b2:a9:ac:61:5c:0f:6a:33:48:5a:69:1c:25:21:
ae:1e:95:68:b5:bd:76:ca:0c:e7:8d:78:19:b0:e0:d6:5d:cb:
9a:bf:2d:e3:77:54:b3:77:e7:af:6c:55:b8:92:74:31:0a:f9:
9d:69:37:2a:6d:4c:42:21:79:2a:00:ff:8d:60:26:6a:d7:57:
72:ad:ff:46:fe:4a:5c:a0:5d:0a:8c:a6:76:8f:57:c4:3a:f5:
3d:b8:10:02:8c:95:6d:14:91:30:85:c6:ef:cd:4a:01:94:5d:
43:e9:09:90:96:9e:0c:82:91:d3:d5:d7:23:b1:f3:cf:2e:93:
05:c3:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:15:17 2025 by rpki-client