Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: WkXRhoaqI3JqkOwtCgtdnh/vhDUOH8BO/N7Os5+GYtQ=
Subject key identifier: FD:FD:70:3B:09:FF:99:43:13:58:9E:D8:48:E8:FF:18:18:35:5A:64
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 0196A2AE197F508CA417D0BE32BE7149DF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 0342
Signing time: Mon 05 May 2025 23:00:40 +0000
Manifest this update: Mon 05 May 2025 23:00:40 +0000
Manifest next update: Tue 06 May 2025 23:00:40 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: prx0gHJfl5TKKO4w0Bukpmf54EEegbu/VKj+7Q41Kk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ae:19:7f:50:8c:a4:17:d0:be:32:be:71:49:df:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: May 5 23:00:40 2025 GMT
Not After : May 6 23:00:40 2025 GMT
Subject: CN=fdfd703b09ff994313589ed848e8ff1818355a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:41:e7:6e:87:17:19:ad:a7:be:59:48:84:fb:
a5:64:d5:18:e1:c6:fc:41:f9:ee:a3:ab:b6:2b:5b:
f3:56:e8:25:9c:ea:4d:c7:b3:c4:8c:b2:b8:ba:70:
9e:e0:b0:26:7a:b7:f7:59:24:7e:2d:e0:9e:04:95:
d7:90:42:02:c4:5b:75:35:7a:bf:9f:69:4e:37:ed:
af:d4:f8:17:fc:87:4f:06:92:4b:55:b5:7e:cc:80:
3e:19:57:cd:c2:02:43:b4:ef:ab:78:ba:e7:fc:f0:
bf:c8:42:ca:d1:b2:a3:53:5b:fc:2d:06:94:3d:62:
3f:ea:0e:ea:2d:d0:b0:71:ac:2c:f0:6b:31:ad:ef:
5d:4c:08:d0:a9:52:45:cb:49:8f:be:1d:fc:a6:90:
8b:d6:1f:57:3a:5d:f4:3b:fd:40:45:67:1f:f5:a1:
0b:3e:15:10:0d:26:fa:1b:8b:4d:5c:eb:9d:40:c8:
d8:05:d5:27:76:07:c1:05:40:59:6a:4d:23:e9:d0:
e4:06:c1:76:6f:e2:6a:2b:2d:70:53:4f:0e:39:60:
3e:75:fb:48:3e:cd:1b:fc:e3:81:b3:50:bd:68:9f:
8e:9b:4e:5c:eb:52:83:10:37:da:3a:c4:e0:ea:31:
4a:a3:14:02:43:e6:cc:2d:cc:dc:a0:93:16:6f:9c:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FD:70:3B:09:FF:99:43:13:58:9E:D8:48:E8:FF:18:18:35:5A:64
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:69:eb:b2:36:0d:6f:f9:53:d8:4e:9a:31:c8:f3:11:94:bc:
a6:d2:c1:f0:5f:5c:4b:ae:27:15:a6:29:bd:4c:70:8c:0e:e5:
b9:65:76:3a:f5:c5:b2:a0:be:c2:36:d3:d8:c6:02:a9:b4:3f:
a1:b5:4e:ad:8a:ab:f3:07:79:54:de:d6:66:8f:f0:48:38:c6:
f9:e3:48:e7:3d:91:b7:50:de:59:ad:c7:1f:70:7a:45:fc:68:
74:a7:4a:b9:6d:ac:68:bb:12:95:01:a9:57:66:bd:21:b6:27:
ad:86:fa:24:df:39:7a:cb:f1:3c:69:45:43:f6:d5:90:16:e7:
df:19:2d:40:4d:d1:23:13:20:39:ee:27:95:e0:65:da:7b:d6:
05:92:58:f7:1e:0c:b0:5e:93:06:20:8c:a0:17:2f:b3:25:7b:
18:f2:b0:fa:24:9b:c6:61:4f:14:79:a8:ae:62:ed:a8:93:ee:
c4:f9:7b:65:3e:e6:1e:d9:45:b1:cd:9d:02:53:0a:27:b9:26:
fe:6c:4e:ce:d2:7c:44:d2:fc:a5:d9:fe:e7:1e:f8:37:82:41:
47:b9:a1:3e:6c:75:d1:28:0b:df:8b:20:c9:d2:2f:14:10:ea:
e0:d4:71:43:66:60:db:6b:4e:c9:3c:29:cb:d9:f9:e2:5d:e8:
69:84:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:07:05 2025 by rpki-client