Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: qDi3/A+OQ93HAuSPAax6A6jYO3ztSAUYT0Wa4GhnUo8=
Subject key identifier: 37:66:79:C4:AC:6C:B5:A7:61:08:75:92:42:68:35:D5:83:1E:1E:43
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 01969D880BC95DC86CEB01CAEC235D5DC5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 04D9
Signing time: Sun 04 May 2025 23:01:00 +0000
Manifest this update: Sun 04 May 2025 23:01:00 +0000
Manifest next update: Mon 05 May 2025 23:01:00 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: iiS+GNrA6XgwtudHWYeEMJsybWZD3ERcsBRnjsP9YPs=)
2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:88:0b:c9:5d:c8:6c:eb:01:ca:ec:23:5d:5d:c5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: May 4 23:01:00 2025 GMT
Not After : May 5 23:01:00 2025 GMT
Subject: CN=376679c4ac6cb5a761087592426835d5831e1e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:1c:ca:0d:a9:bc:fc:21:3b:3f:6b:06:47:
95:cc:e2:77:2d:24:b0:eb:0b:8f:f3:6b:20:f4:1f:
5a:58:6d:ee:16:c0:9a:a3:dd:a8:bc:45:e3:df:10:
ce:b2:69:53:29:5c:07:7f:4b:2d:97:8f:28:62:2e:
4a:00:e7:75:f5:6d:59:16:cd:6b:df:68:f1:ae:34:
bf:26:33:37:b2:97:19:1b:43:7e:b5:f0:09:19:1f:
44:fd:5c:de:79:67:7f:7e:5f:e6:5c:21:13:e5:47:
4e:49:b8:1e:63:0e:55:b0:f6:a9:07:a4:68:f6:80:
37:b7:ab:67:99:a1:6e:f6:cf:d3:8d:c5:e1:f1:4e:
d5:0c:d9:8c:98:0f:3f:e1:23:58:b6:a9:e1:ba:9d:
a5:6a:05:c5:d7:02:b7:62:8b:ae:b4:1f:cb:16:53:
e6:d0:a0:8d:44:93:f7:5a:e4:b3:55:71:e4:5c:8c:
ea:ce:41:e1:1b:b8:fa:b6:77:85:a2:a6:ab:de:0e:
ad:ad:4e:3d:b0:cf:18:79:e0:f7:27:ad:92:1c:22:
f0:79:83:77:00:44:57:d1:a7:32:47:9d:f5:7a:f8:
f4:77:32:6a:c4:b7:eb:95:36:cb:5c:ff:fb:dd:fd:
d2:ed:1f:81:3c:fa:6a:05:0a:64:f3:d7:dc:25:b0:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:79:C4:AC:6C:B5:A7:61:08:75:92:42:68:35:D5:83:1E:1E:43
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:70:1b:37:dd:25:1b:fe:62:1b:3d:70:3d:e8:e0:06:39:e3:
3e:68:6d:bc:98:6a:4c:e6:9f:f5:4f:b3:a6:f0:32:56:fb:c9:
87:ff:44:3a:c9:de:42:20:34:a2:24:06:2c:a3:ee:02:50:1f:
e7:e8:51:3a:e3:0d:41:ba:da:9c:dc:c1:b3:88:31:90:93:4b:
9b:06:48:35:e5:e6:e1:8e:57:49:b4:71:2d:e3:1d:c1:12:74:
bf:27:79:c7:22:46:0a:08:b7:ee:45:50:91:51:a5:7c:e0:f8:
a6:d6:fa:fe:cc:ae:16:f6:44:81:72:b9:c6:ab:9f:de:ca:f2:
77:d6:2e:07:54:1f:97:43:0f:9b:ff:e8:fd:81:f4:b1:39:d6:
a5:c7:c5:b8:25:db:0e:d4:5b:a0:c4:39:25:db:03:bf:24:74:
8c:d5:df:89:8b:b0:6a:c2:71:b5:51:17:64:30:5f:87:2a:c1:
07:b7:a5:2b:b4:28:b8:70:91:45:12:c0:61:67:a1:1e:7c:b1:
ca:c5:85:ca:1e:be:c6:92:16:31:b8:b8:27:7c:84:22:fe:ac:
ba:2b:87:f7:f0:67:9a:3a:c2:80:3d:c4:e1:61:ea:fb:90:76:
4b:0f:20:a0:f5:27:45:1a:f5:07:b4:39:83:c3:79:f0:03:b1:
1f:d5:a0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:23:14 2025 by rpki-client