Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: iM96dt5zxy5Z3/l2GeGP/U8x331sSXOwsbYPBEGeJQ4=
Subject key identifier: D4:47:53:FB:95:B8:5C:54:B2:2B:D3:4E:8C:87:7B:67:21:E0:FC:9C
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 0196C9F2BD4797314472783B6F815E6D56B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 14:00:50 +0000
Manifest this update: Tue 13 May 2025 14:00:50 +0000
Manifest next update: Wed 14 May 2025 14:00:50 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: Zesg0KE4W/sw/+8QOpUkIc/z9rRdU8NuwmqPBRcpaig=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:bd:47:97:31:44:72:78:3b:6f:81:5e:6d:56:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: May 13 14:00:50 2025 GMT
Not After : May 14 14:00:50 2025 GMT
Subject: CN=d44753fb95b85c54b22bd34e8c877b6721e0fc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:c9:2b:c5:ec:8a:5b:19:56:c1:5f:df:67:
d9:c5:6d:dd:b0:57:a1:73:0a:c1:ec:90:8d:70:ec:
9a:9b:bd:80:fa:9e:1f:39:66:5f:1f:4f:6e:ae:cb:
42:8e:7b:ce:1d:96:40:54:93:ac:13:92:0c:f4:71:
d7:74:fc:7c:a1:8d:2c:d4:d5:5e:d3:b3:91:81:54:
bf:cd:a8:f3:a6:c5:16:e4:fb:8e:26:4b:b5:55:5a:
38:08:66:eb:11:ee:c0:f5:ef:0a:ff:74:d3:77:ff:
2e:96:a9:79:c1:fe:49:f4:a9:3c:98:ca:d0:57:d2:
31:65:1a:cd:a6:21:b0:a0:ef:f2:c9:21:ce:a3:b4:
c1:2e:48:8b:5f:39:7c:a5:56:f2:73:51:d5:22:3e:
58:af:92:d3:0e:e2:c3:db:af:57:f3:9f:da:92:0e:
2f:da:45:d5:86:3a:9d:10:2d:83:ee:82:b2:fb:fd:
67:c0:45:82:b6:58:3b:68:84:7f:5d:b9:b8:f8:80:
6e:3d:36:f1:5a:d2:3e:d4:60:e9:4c:dd:f3:50:00:
2a:09:e3:3a:6a:11:50:57:f7:9c:89:a7:d4:6d:c1:
83:77:39:75:0a:b8:a3:ef:fa:b9:ac:6e:6d:69:1f:
c6:d8:35:63:a7:ce:ec:8c:37:fb:2a:d7:3a:1a:a2:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:47:53:FB:95:B8:5C:54:B2:2B:D3:4E:8C:87:7B:67:21:E0:FC:9C
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:a7:bb:0d:a7:88:2a:2d:4d:c1:67:3c:67:d8:f0:cf:87:
48:a5:e6:f2:b7:d3:aa:57:90:cd:91:5d:81:a4:6d:6c:e6:cb:
98:55:8e:ce:0e:b6:4f:c3:83:56:99:5f:12:a4:92:4e:9b:b4:
23:1a:6c:77:cc:42:bb:78:06:57:9f:67:61:4d:40:b6:d7:e4:
ef:26:ef:aa:7a:5a:51:84:09:38:cf:c2:7d:ea:ed:7f:9e:f8:
91:ae:79:d0:15:8b:f9:da:e7:bb:e6:52:8f:08:4d:63:5a:11:
95:83:ec:45:db:4a:3a:a4:e8:53:e3:04:16:2c:17:32:14:b5:
19:fb:0c:3d:59:d2:ea:e8:78:78:f0:1f:61:41:89:87:a7:63:
5a:73:22:a0:dc:b8:11:35:d3:b7:78:0b:c1:d8:0f:31:87:b2:
cd:5f:e1:e0:0c:38:a7:4a:dc:7c:a0:59:67:c0:5f:68:a8:d4:
07:b9:ca:31:9a:e9:a4:70:7b:b3:d5:f3:bd:b1:c5:a4:0d:ac:
db:14:0e:59:3f:93:40:4e:f9:b7:b8:c2:20:f4:06:45:26:e7:
63:f3:fc:29:4e:6a:d9:fa:a5:ae:9e:4e:ed:4f:b5:b0:42:74:
f7:32:01:1e:95:af:4c:72:63:66:39:30:af:34:12:28:8e:c1:
11:7f:ae:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:35:50 2025 by rpki-client