Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier: DShaEC2ah/ARu/RjuvyvMULrhTa2XM++QCuN68OW3cU=
Subject key identifier: 16:B7:04:0F:BF:93:60:84:EE:77:80:F2:7B:A6:B2:29:49:9D:FF:93
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer: /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial: 01969DF5BC965699A1CF1393A20DFBB6BAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number: 0E0F
Signing time: Mon 05 May 2025 01:00:49 +0000
Manifest this update: Mon 05 May 2025 01:00:49 +0000
Manifest next update: Tue 06 May 2025 01:00:49 +0000
Files and hashes: 1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: gigznnI5CW8amyROPV//6/xppTrSUE0jH/xLi0UcSN8=)
2: i00Nyy2VhQK9HEEpvIhSRMcDQ0o.roa (hash: NEwL6l83UnBavD9cItWgIj0+1vFCka7pyL3HvdCPyl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:bc:96:56:99:a1:cf:13:93:a2:0d:fb:b6:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
Validity
Not Before: May 5 01:00:49 2025 GMT
Not After : May 6 01:00:49 2025 GMT
Subject: CN=16b7040fbf936084ee7780f27ba6b229499dff93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:28:69:15:57:87:8a:6a:3a:44:0d:58:bb:
ea:52:18:e8:47:e1:1b:96:82:1a:07:12:e7:6e:c3:
41:c2:b7:3f:15:c4:e0:3c:1b:23:d8:54:e5:ea:53:
53:eb:ff:74:cd:ef:50:24:dd:e7:05:93:5b:72:4f:
dc:89:05:86:2e:7f:d5:43:a6:0b:a9:28:f1:fa:23:
ad:8f:1c:5d:95:4a:1f:6f:ac:09:3d:fb:c5:b0:d2:
18:c1:73:66:b5:16:83:49:50:ca:f2:7e:bb:bd:e7:
c6:53:a5:0f:6b:29:16:74:2f:9c:b8:ef:4b:b8:65:
8a:ea:f9:2a:d4:cd:2f:69:39:be:1d:a8:7c:e0:6d:
1b:ca:cb:85:23:47:8d:26:6b:36:2b:fc:4b:41:68:
e3:64:e3:01:ae:b6:53:48:96:fe:4c:4c:01:31:c4:
8a:bb:30:17:70:70:87:2f:c0:c4:bf:be:01:55:77:
c8:ea:36:4c:5f:d8:41:14:b5:f4:ba:ff:70:81:c2:
0a:a5:5b:aa:1a:03:14:6b:5b:37:c3:7b:a9:5d:42:
77:38:c4:f3:47:14:51:00:a1:50:63:ae:3e:4f:22:
04:8c:83:7d:20:ef:ad:e1:4d:37:8c:e6:ca:54:82:
3a:6e:e9:b6:ce:95:7f:dd:25:dc:01:72:47:52:f6:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B7:04:0F:BF:93:60:84:EE:77:80:F2:7B:A6:B2:29:49:9D:FF:93
X509v3 Authority Key Identifier:
keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8e:07:d7:64:dd:1a:e7:fd:70:52:e5:d6:17:a1:3b:c7:6b:
dc:62:b1:bb:43:4f:a0:51:a5:9d:5e:4c:45:00:6c:be:e0:e4:
9e:8c:df:dd:74:96:8e:40:68:39:13:a4:73:b6:e5:fa:46:a9:
31:70:1a:e8:c1:7e:13:de:c3:b2:34:18:4e:5d:af:02:c9:b2:
96:75:31:d6:b2:bd:cb:21:2e:31:1d:b9:a3:d7:fc:0d:6a:76:
ce:dd:e6:47:6a:da:85:b4:74:f4:3a:05:d3:ce:55:4c:73:c8:
73:c9:5e:5e:46:8f:ea:7c:a6:0e:01:98:e6:ad:0f:59:92:e3:
8f:95:28:48:2c:b7:ac:29:a4:25:f4:4e:85:26:dd:55:70:f1:
48:6c:cf:2e:70:5f:4c:3c:e0:0a:3a:e8:d7:d6:b0:c4:f2:a9:
54:3d:f9:58:ed:ce:00:9a:0c:1f:87:16:5d:d8:03:30:d3:5b:
e2:74:58:26:2b:ac:0a:72:f0:6f:27:eb:d2:bd:c5:f8:ff:e5:
9c:1f:a0:f6:2a:25:29:ec:8f:96:ec:b2:3d:9a:71:fa:66:9b:
96:9d:4e:05:9d:09:2b:d7:cb:40:61:39:34:03:db:e7:d5:7c:
f4:78:a6:41:76:f3:47:aa:7f:11:64:8d:b6:b9:eb:3a:ac:38:
16:70:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:45:56 2025 by rpki-client