Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: SfpzGIga1363N+YV8tRH4+G/fX3H+n75wXe622sbwdw=
Subject key identifier: 36:F3:B4:6B:9E:44:17:EC:A0:5B:4E:31:74:D4:E0:EC:1E:8C:33:06
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 0196C382915D38E584C9C1D834DDFF10F06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 08:00:36 +0000
Manifest this update: Mon 12 May 2025 08:00:36 +0000
Manifest next update: Tue 13 May 2025 08:00:36 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: v4twA744Vx7RXzxQ9fFx2ivc/KH3X+tnVFeseIiLzcM=)
2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
3: qBf7Ld8e0ZEc7SC83qsc-EpQ6wo.roa (hash: 1F0G1lB8+dsYp3xA4GqGoykNUR9+r6OUzve6mTfWaFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:91:5d:38:e5:84:c9:c1:d8:34:dd:ff:10:f0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: May 12 08:00:36 2025 GMT
Not After : May 13 08:00:36 2025 GMT
Subject: CN=36f3b46b9e4417eca05b4e3174d4e0ec1e8c3306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:b2:b2:2c:78:47:1c:f7:3d:28:96:bc:a6:
56:cd:32:d4:88:ff:07:26:73:73:d2:eb:23:32:c4:
45:f7:51:2a:4c:52:e8:34:79:cd:ed:4d:51:8f:7d:
67:07:af:ba:f4:7c:42:15:a1:4b:94:47:15:08:d8:
24:a8:fb:4c:ad:01:c2:b7:80:a2:5b:a5:4c:46:30:
f5:d9:9c:2d:3a:59:25:84:65:4b:92:f2:b5:63:04:
c5:04:2f:17:27:43:d6:75:31:49:c1:68:21:de:b7:
6f:a5:6a:54:d6:1d:00:ad:b8:7e:5e:81:e6:75:f1:
6a:f3:6d:cd:6f:cb:19:8d:26:cb:29:df:1b:0f:78:
b6:0e:8a:75:9f:83:5b:18:d3:17:48:aa:6f:fc:e7:
3b:be:80:64:4a:11:2d:47:b8:a0:44:99:1b:a2:62:
e0:1b:fe:75:ac:62:49:31:4c:b7:10:53:86:2d:79:
bc:5a:bd:21:89:45:5c:aa:3f:33:ee:55:7a:6f:dc:
19:7a:ab:a6:2c:7f:87:f9:95:65:47:35:4d:ef:66:
3b:11:ab:05:ff:18:3f:0e:53:03:88:bf:62:1f:7e:
31:95:31:00:5e:06:71:2d:fd:6e:ca:57:64:81:b0:
b4:8c:af:35:0a:7e:4f:10:45:b6:1a:75:1f:13:0b:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F3:B4:6B:9E:44:17:EC:A0:5B:4E:31:74:D4:E0:EC:1E:8C:33:06
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f8:36:ad:79:f9:6c:1e:d5:be:c9:6b:bf:75:da:1a:d7:55:
3a:00:11:d4:c4:a8:96:4e:6b:59:b7:05:fb:e1:7d:13:7a:ce:
3a:c4:95:b1:24:70:04:aa:6c:06:63:79:60:4e:bf:2f:a6:b3:
4c:0e:37:1b:9c:ce:56:4a:b0:4f:1d:ed:61:e2:ea:26:ad:45:
9b:51:d0:6d:a6:f2:97:3a:3b:c9:69:c8:21:fa:5d:fa:5c:5b:
da:85:53:1e:0b:ba:a4:e3:aa:9f:15:2e:ba:8f:03:37:d4:cf:
ea:f3:34:88:2a:9d:1d:33:66:fa:24:78:e5:3e:f9:01:c2:98:
7b:bf:3e:5c:10:64:ff:b4:97:84:3b:10:2a:3f:27:90:d8:90:
02:87:07:f0:82:df:0d:64:cf:e1:34:78:57:2d:2e:27:4f:2a:
05:b0:5f:f7:50:95:89:9b:f4:f4:e3:26:7c:72:9e:7a:0a:3c:
ba:df:e6:05:90:63:c9:d7:e3:f9:95:92:6d:b4:64:a8:ba:51:
0f:5f:dd:cf:1d:f5:e0:f4:41:a8:93:c1:8d:93:94:a1:47:c1:
d1:71:84:a0:96:45:4e:88:c1:04:08:6a:7d:7a:8c:88:5e:19:
b2:f2:9d:3e:30:0a:b1:bf:78:f1:b0:f1:be:87:1a:39:3b:9e:
56:ad:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:24:25 2025 by rpki-client