Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: GcikqZ9/dNuz7j1EqNgegX3gFIXMFcUDvbSzG+vZDHU=
Subject key identifier: C6:E0:48:47:D4:21:D2:64:67:27:21:5E:FC:9B:A8:B7:27:47:BE:B1
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 0196BD12AFFF3ABCE7832CF9B2C0C640962D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 0124
Signing time: Sun 11 May 2025 02:00:40 +0000
Manifest this update: Sun 11 May 2025 02:00:40 +0000
Manifest next update: Mon 12 May 2025 02:00:40 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: PoN72PpKBfjDZoYInSDC9Kt4miLpkY5cET1HgpFzlPU=)
2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:af:ff:3a:bc:e7:83:2c:f9:b2:c0:c6:40:96:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: May 11 02:00:40 2025 GMT
Not After : May 12 02:00:40 2025 GMT
Subject: CN=c6e04847d421d2646727215efc9ba8b72747beb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:b7:ba:61:60:df:ff:4a:cc:53:ea:37:aa:
e8:fe:d4:54:88:1f:71:7b:83:c1:ab:0f:28:45:c3:
0b:10:10:02:8d:fe:a1:cf:2d:8b:e7:97:e1:bc:8d:
62:cd:50:92:f2:76:cf:de:d8:0e:d7:23:56:0a:63:
e8:8e:98:17:93:19:a6:34:67:f7:ee:61:ab:95:ef:
52:f5:08:d9:3c:bd:2f:08:36:20:6e:7a:91:42:be:
a9:be:c3:9e:fe:c1:82:69:65:7a:6f:e1:d2:12:7a:
eb:cb:c1:23:18:26:af:bd:8f:a2:31:59:a2:77:ec:
0f:1e:a6:39:0b:fe:91:3a:e6:05:f2:19:62:b7:26:
cc:a1:8c:d0:52:b6:10:a9:9a:f4:29:d8:14:0a:71:
55:2d:08:d5:51:aa:91:c3:b0:58:9d:82:26:a1:76:
f2:40:d1:6d:8d:6f:5b:39:4a:db:aa:06:36:90:b2:
d3:06:3d:3c:af:26:c6:82:ad:f2:af:76:49:33:67:
de:77:e6:32:08:02:6a:79:67:bb:95:9d:a9:b2:83:
8e:cb:7c:0a:41:c3:9e:b6:b8:35:76:ed:89:3b:e4:
ca:f5:81:84:44:7d:de:2c:6e:b4:92:d4:2b:1e:02:
af:10:b2:a6:44:d1:a1:1a:97:a7:16:98:98:ed:f9:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:48:47:D4:21:D2:64:67:27:21:5E:FC:9B:A8:B7:27:47:BE:B1
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:45:89:41:f4:77:ab:a0:e1:d9:dd:8b:07:37:04:a2:ef:68:
64:d4:d1:ba:e2:76:69:fa:a9:75:3f:45:f6:9c:04:4a:47:45:
46:1f:9e:47:40:88:21:d4:b3:5b:6c:64:e6:ae:b4:a0:89:4b:
c3:a0:89:7c:e8:66:da:f1:a9:e5:6a:36:34:31:1a:e7:4a:b3:
c8:19:5f:1e:fc:65:96:64:fc:90:7c:6b:73:69:0f:05:27:0a:
99:15:e7:4f:59:64:b5:1c:27:29:8c:1b:72:81:80:9b:56:bd:
d0:0c:dd:eb:d5:4b:86:fe:6c:47:11:4d:07:f6:1f:3c:26:4e:
a7:2a:98:6f:14:04:fc:d7:18:0c:fa:f9:53:c7:83:f7:5a:8d:
cf:10:2b:ce:37:d3:cd:cf:51:f9:ed:7a:83:44:0f:ea:82:c3:
ce:b1:fb:9e:1a:18:6c:52:e6:b4:ab:5b:c6:9c:c4:0a:1e:b4:
f6:cf:73:08:9c:d9:6b:48:b0:cc:78:a0:8c:63:b2:24:4c:92:
06:2b:f5:16:59:5a:6f:88:8d:6c:0b:02:e2:07:89:a5:b9:a0:
53:76:e7:7d:4a:72:81:61:5f:20:3b:96:61:16:e0:0c:77:ed:
26:46:8b:c6:a8:a3:d8:08:c9:95:96:b3:5a:c4:5c:ba:df:17:
76:80:e7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:40:53 2025 by rpki-client