
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
File: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft (raw, json)
Hash identifier: MKcmhrOOfJ+30/dklCMaPaHNz4wp+QEPlfG9se8Iwi8=
Subject key identifier: 4D:44:16:47:7D:F3:CC:5A:A5:92:D3:A2:3A:19:8B:6C:D0:8F:19:4C
Authority key identifier: E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
Certificate issuer: /CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Certificate serial: 01969CE2ACAC0E2BAE2A209BC0CD8B85F05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
Manifest number: 0924
Signing time: Sun 04 May 2025 20:00:23 +0000
Manifest this update: Sun 04 May 2025 20:00:23 +0000
Manifest next update: Mon 05 May 2025 20:00:23 +0000
Files and hashes: 1: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl (hash: VGErzvmCtHX4kRfOm7IjG9qtr/6iBh2mMU56N64/48I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:ac:ac:0e:2b:ae:2a:20:9b:c0:cd:8b:85:f0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Validity
Not Before: May 4 20:00:23 2025 GMT
Not After : May 5 20:00:23 2025 GMT
Subject: CN=4d4416477df3cc5aa592d3a23a198b6cd08f194c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:b2:d2:27:2a:c0:5f:3f:72:01:17:ab:fd:
6f:f6:ac:d7:87:b7:7d:26:a3:86:62:cb:4e:03:16:
07:33:bb:ef:cf:9d:20:c1:95:39:59:e0:26:7d:28:
94:43:c4:65:37:1c:df:b5:23:27:38:d3:41:19:44:
bf:39:1e:e1:75:39:26:bd:ae:51:ae:9b:9d:49:8e:
55:44:28:b2:f9:dd:1f:da:dc:40:09:84:60:b0:cc:
84:96:c5:59:7a:dc:79:c7:44:07:b3:80:37:10:9d:
24:6b:67:63:b6:65:02:e7:9d:ad:f4:3c:2c:4c:59:
52:5e:1c:a1:27:f4:6e:15:a4:af:4d:2b:4f:46:93:
03:5a:76:88:7d:92:ca:5d:44:7e:09:0f:a8:37:7a:
07:cd:1a:88:8c:74:13:f0:97:31:67:0c:3a:46:08:
45:a6:01:5a:ed:59:10:40:8e:b4:e0:c6:88:d1:8b:
55:81:1a:10:00:61:f2:8b:a1:56:64:5a:07:c7:c9:
b0:e6:95:6f:78:8d:f9:a1:58:6d:35:ec:37:95:f9:
b0:ba:c0:ea:0c:36:04:a6:89:6a:55:be:2f:7b:b3:
6d:fa:31:41:2c:4f:8d:eb:7e:10:96:40:52:7c:b0:
06:db:8e:8c:d1:f3:29:63:f6:85:31:c5:0a:fe:e8:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:44:16:47:7D:F3:CC:5A:A5:92:D3:A2:3A:19:8B:6C:D0:8F:19:4C
X509v3 Authority Key Identifier:
keyid:E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5b:49:37:31:30:0b:16:05:27:d0:07:e4:4d:2d:e4:03:35:
7e:79:59:9a:74:e2:03:3d:18:78:3b:20:59:b7:2c:e3:33:15:
94:51:4c:6f:da:96:fe:e0:5c:80:e0:ed:52:db:4d:69:7e:03:
04:20:46:70:4d:3c:85:8e:43:1c:ed:63:48:74:f9:26:a4:15:
e4:72:20:0c:4a:48:25:a7:b4:87:a3:93:dc:14:b8:92:f0:19:
76:5f:29:52:70:bd:c8:2c:43:a0:f3:4d:65:d5:85:c9:80:1f:
60:f9:d3:9e:6c:30:28:17:b9:10:3c:bd:a2:d4:83:fc:d1:97:
de:d9:72:60:03:e2:b6:39:18:14:b6:8e:3e:26:e1:72:0f:9a:
78:cf:7b:fa:11:31:4d:c3:6f:77:a1:09:dc:b3:2f:19:f3:1d:
f2:86:fe:c8:98:00:12:bd:ba:0b:70:53:5b:64:be:b4:c8:7d:
4c:b2:e4:cc:55:84:ba:3e:c4:f4:3d:67:74:14:78:b0:5e:35:
02:0b:db:14:d8:38:80:87:2a:31:e9:54:ba:6a:f5:ed:a0:78:
f6:cd:04:6e:31:95:5e:1d:5a:d9:cf:70:df:43:cd:a8:3d:4f:
5e:54:de:83:37:68:19:ed:5a:e9:07:16:d9:c3:50:0f:75:b4:
e3:72:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:54:07 2025 by rpki-client