Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: 9F4avaDgdNt21TSSx6bFHIGOQqRy9q9ZO++7+Chc0DM=
Subject key identifier: 7D:CC:24:B9:27:0A:55:02:0C:20:27:A6:30:12:AB:36:65:C4:B1:01
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 0196ABE82A19855C66C98514066AD0596E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 0556
Signing time: Wed 07 May 2025 18:00:40 +0000
Manifest this update: Wed 07 May 2025 18:00:40 +0000
Manifest next update: Thu 08 May 2025 18:00:40 +0000
Files and hashes: 1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: n2DGiHGfoRZynHdPxSgIfcqOjVVNNauan1YvFLoPVtI=)
2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e8:2a:19:85:5c:66:c9:85:14:06:6a:d0:59:6e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: May 7 18:00:40 2025 GMT
Not After : May 8 18:00:40 2025 GMT
Subject: CN=7dcc24b9270a55020c2027a63012ab3665c4b101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:78:52:78:f4:29:88:2e:24:26:c6:0a:5a:
6d:0d:2e:41:ee:5e:fa:57:f5:a1:3f:99:ae:aa:01:
58:58:46:52:2a:af:7c:b5:2c:b7:52:55:da:3d:b0:
cd:c1:7c:cf:0a:cc:25:f4:c3:b6:30:87:06:06:cc:
89:b0:44:ad:cd:50:1a:39:60:45:aa:98:6f:36:fe:
fc:90:41:4c:ab:42:f6:94:6b:d7:c1:9b:ba:c3:b5:
55:1b:21:25:6b:14:ee:15:ad:68:4d:c9:2b:be:fa:
f4:82:5a:9e:ef:ea:e0:fe:54:45:64:40:57:19:30:
c1:ad:9b:bb:f0:da:ee:ee:0c:b6:ce:28:05:b3:cd:
db:a0:8c:5a:ef:6c:80:c7:c3:fc:ec:36:10:d3:db:
bb:cb:d3:bb:ef:4f:cb:a3:40:cc:21:e4:1f:07:6d:
2e:cd:53:22:27:80:5f:10:ef:bd:ff:f9:36:24:05:
e9:28:1a:fe:07:d5:93:2f:c8:ad:51:66:b1:3f:3d:
94:60:ea:0d:6f:f0:bd:9b:66:7f:2c:83:4d:56:4b:
e7:83:6b:27:92:53:0f:8c:38:dd:f8:56:d5:0c:a0:
3a:52:3a:57:6a:46:89:43:68:7d:70:69:8d:b5:91:
4a:0d:02:95:1a:96:4d:65:f3:fc:4b:03:a1:13:24:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CC:24:B9:27:0A:55:02:0C:20:27:A6:30:12:AB:36:65:C4:B1:01
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f1:33:f7:c7:17:4a:59:9f:05:96:85:81:03:df:0c:4a:82:
c0:01:50:b9:80:33:ed:5d:e5:9c:94:cb:28:82:cc:b1:58:07:
73:b6:4b:e0:eb:0c:fc:27:33:c1:0c:60:f8:29:3f:88:de:d7:
d2:fb:24:b9:d6:53:3f:43:94:a1:cc:ff:c0:52:43:35:69:7a:
04:53:36:53:4b:fa:f7:51:76:3e:6f:18:af:43:bc:cb:df:49:
86:ab:4d:44:6f:42:90:7b:fb:fa:a3:0e:66:cf:b1:cb:3c:a8:
7e:9d:86:fd:b1:6d:05:5f:6b:ac:45:38:05:6c:72:04:78:0a:
ff:33:46:83:d5:70:72:dd:d5:19:63:3e:d1:41:cc:89:66:6a:
5e:4a:e2:12:e8:05:53:18:75:a1:59:90:62:9d:95:e0:7c:52:
32:b4:b1:9b:ca:fc:5d:aa:40:4c:62:68:1b:81:96:96:41:80:
81:44:19:f3:33:2b:53:15:5a:e1:c9:19:f9:f1:14:be:59:75:
7d:0c:13:74:96:14:7d:20:ba:c9:d8:1d:51:03:77:87:07:4c:
f8:4a:48:b1:fd:69:80:a3:e3:f1:f5:98:a3:db:fb:f0:84:20:
e0:d5:dc:73:64:4d:38:99:c7:25:2e:80:8b:e0:80:b8:46:8b:
54:2c:a7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:03:08 2025 by rpki-client