Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: YQJ9StlXa9ARtddg9/W+yp5Op7fZdnKobXtJS1++h1E=
Subject key identifier: D9:9C:2D:34:9B:30:6F:6B:3E:06:E5:61:4F:0D:77:0F:C2:58:A7:BF
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 0196C1CB46E39570E22A779558FC5AD2B589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 04B9
Signing time: Mon 12 May 2025 00:00:46 +0000
Manifest this update: Mon 12 May 2025 00:00:46 +0000
Manifest next update: Tue 13 May 2025 00:00:46 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: Uw83bKPaPZkuJhF5UJykgvC6cpQaSzloVyckPB1vQq0=)
2: h3E6-zfi_xyDMKZ-mjqCgktKu5o.roa (hash: jFGY2eFUS/f/RiSzQYMsT/EoV/0tdGrsjyAMY/vYpEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:46:e3:95:70:e2:2a:77:95:58:fc:5a:d2:b5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: May 12 00:00:46 2025 GMT
Not After : May 13 00:00:46 2025 GMT
Subject: CN=d99c2d349b306f6b3e06e5614f0d770fc258a7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:dc:3b:f2:5b:f2:79:8f:6a:15:7f:94:5f:
73:19:ed:30:65:94:6f:1e:c0:a9:28:3e:8c:a7:ec:
fb:81:0e:65:77:b2:79:61:ae:15:6f:e3:a2:83:17:
3f:46:8d:67:90:d0:9d:92:f4:91:af:a3:43:d1:41:
8c:fe:11:47:34:24:1c:e6:ca:52:aa:8d:cb:61:37:
02:d3:29:73:0e:32:0d:af:04:78:7a:96:14:b3:0f:
2b:9a:01:c1:1b:7b:72:b5:06:05:71:36:b0:90:00:
cc:4d:3e:68:5a:49:79:e5:e8:6f:d6:fb:3d:bb:83:
ad:e4:28:a9:3f:d7:d3:7e:c6:b1:11:e2:bd:03:77:
3f:da:38:43:a7:03:0c:69:9e:ac:1f:a1:ff:19:fb:
7c:3c:9e:71:8a:33:94:1f:34:8f:39:69:51:af:2a:
89:7a:83:69:d5:f9:ca:44:7f:5c:68:9b:13:23:67:
98:86:c5:e9:be:ec:6d:48:43:cc:4e:03:3e:cb:28:
1a:f4:42:9f:34:4f:ba:bb:f3:e8:af:14:3e:21:34:
61:e5:ba:ca:73:eb:ed:fc:a2:ac:05:75:b2:37:43:
9c:60:a7:a4:dd:f4:0f:b5:2f:d1:cc:01:cd:aa:a6:
4b:f7:cf:f9:4e:32:43:68:2c:4e:97:61:8f:3a:16:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9C:2D:34:9B:30:6F:6B:3E:06:E5:61:4F:0D:77:0F:C2:58:A7:BF
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1f:fa:bc:85:6b:f4:ab:7f:90:29:03:b7:fc:7c:1e:3f:01:
4d:9f:10:06:c7:ce:72:16:38:0a:4b:55:97:6c:0d:10:39:44:
e9:f7:3f:8f:ea:60:94:ec:61:44:03:05:57:9f:1b:0a:c0:b0:
8f:b9:1b:bf:1b:ea:f3:f8:51:48:79:ca:64:77:48:c8:9c:f2:
6c:ef:f9:28:4d:87:5d:b8:75:ed:a7:83:62:72:25:16:b0:1b:
75:a8:d1:61:db:8f:6b:75:68:d8:98:88:b8:bb:e1:1e:ec:6f:
e7:87:94:74:cd:94:af:c2:24:9f:e8:e5:7d:f3:0a:70:df:72:
44:29:33:5f:b3:b2:d6:52:50:42:c4:b2:89:e5:f8:94:93:92:
4e:27:40:19:95:89:d4:ed:f5:e5:43:8a:dc:b0:fe:8f:d5:8a:
7f:43:21:b2:5e:7a:93:16:21:ca:f8:52:4c:0b:e8:a9:dd:51:
dc:d7:04:43:b3:5a:1d:dd:4e:cc:75:91:4e:79:07:00:00:4f:
f2:9b:26:f3:f9:d0:72:d9:f4:94:8b:9e:16:e0:9b:78:32:2d:
e7:05:90:46:cd:45:25:65:7b:fb:e9:cb:b6:6e:6d:d4:73:77:
cd:89:bf:64:95:00:4d:a9:55:c3:e7:af:f1:ee:ff:67:06:03:
fb:03:22:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:17:16 2025 by rpki-client