Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: uZKXhdIzG27qht43cXbeV0U4UxIjxOV0jJ7tBfq8ILo=
Subject key identifier: 81:33:07:E2:DF:E9:6B:54:E0:87:CB:35:3B:40:7B:2F:4E:AB:67:E1
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 0196C20281DCCCD4DD9183B9A8BD1AE8E567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 14CC
Signing time: Mon 12 May 2025 01:01:06 +0000
Manifest this update: Mon 12 May 2025 01:01:06 +0000
Manifest next update: Tue 13 May 2025 01:01:06 +0000
Files and hashes: 1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=)
2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: K+Us62eHGcHyfJRAE6Nhge8esAtEt8b/LCD1/rEbwns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:81:dc:cc:d4:dd:91:83:b9:a8:bd:1a:e8:e5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: May 12 01:01:06 2025 GMT
Not After : May 13 01:01:06 2025 GMT
Subject: CN=813307e2dfe96b54e087cb353b407b2f4eab67e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:95:76:c1:6d:59:6f:bd:6b:3b:c7:c2:a8:
79:bb:35:c1:ea:0e:56:45:3c:e5:d0:14:c3:e4:30:
e4:4c:97:10:ac:6b:3e:6e:77:06:e5:5c:9d:60:2c:
9c:23:9c:b9:6d:c1:d8:2e:6a:d5:38:2c:56:d9:42:
24:2f:42:1e:b7:43:88:a3:07:b5:35:bb:e6:4f:07:
0a:70:9f:c5:12:59:b6:a0:d2:99:6a:1a:09:81:74:
0b:bb:62:84:1d:9b:2e:dd:3d:4b:e2:93:16:f8:ac:
34:e3:e1:c2:4c:89:2d:5e:77:a1:eb:5c:fa:a7:b7:
c9:91:70:b0:d5:2f:11:01:00:f7:ee:be:2e:cb:33:
43:ea:76:4a:16:bc:dd:7c:c6:22:d9:7f:d0:fe:43:
e4:a9:93:d5:77:cf:94:80:30:74:fb:78:45:8f:db:
39:52:06:81:8d:61:cc:23:da:8d:7c:50:25:37:fd:
f0:cb:d7:06:65:35:d4:5b:59:18:82:f9:28:4c:1d:
2c:41:eb:15:ee:4f:7e:c7:eb:ab:13:82:04:86:1f:
5d:1c:64:8d:e0:b7:e2:d4:1b:9c:ff:3d:34:69:cb:
a7:57:72:57:84:09:0f:18:f9:2e:07:a7:e4:25:90:
77:9f:75:05:99:e8:a7:1b:3a:23:b5:d6:17:da:7e:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:07:E2:DF:E9:6B:54:E0:87:CB:35:3B:40:7B:2F:4E:AB:67:E1
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:25:27:44:91:d7:2d:74:b1:90:b7:05:75:49:dc:36:c9:28:
9f:0c:7a:a8:e7:da:dc:40:5a:4f:56:60:11:3b:43:9b:ee:df:
f9:26:8f:16:25:cc:5f:90:05:a6:e4:3e:82:be:a3:23:82:5e:
e4:e7:f9:31:f1:10:74:2a:65:50:e8:a3:c7:0d:1d:b2:c2:d8:
b3:76:8f:01:01:78:b3:9e:dc:57:5c:95:34:72:d1:58:46:8c:
8c:38:49:95:94:23:db:75:41:e7:a8:d5:da:cb:85:fa:48:91:
71:34:a3:c2:52:55:0f:88:58:b9:7a:62:4b:03:72:72:c8:24:
4c:1e:9f:44:99:22:d4:e4:0f:db:16:4e:42:69:aa:b7:fd:f3:
bb:71:86:0b:17:1a:ca:ca:6b:d6:f1:6a:77:16:c7:51:2b:01:
83:56:e2:58:cc:86:a2:81:9d:a0:c4:ca:64:96:2e:ba:44:5b:
0f:82:16:86:e4:5e:3c:54:6a:8d:8a:ff:e6:a0:02:ed:47:2a:
54:43:d3:d8:9c:c8:2e:1e:0b:31:be:3f:3a:24:1f:b1:63:05:
5f:87:19:c5:f8:b3:cf:7f:3f:12:78:e1:2d:bd:57:7b:24:8c:
90:52:46:af:8c:6b:15:6c:21:cf:58:58:59:dc:df:c4:f0:a1:
77:b6:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:01:15 2025 by rpki-client