Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: RMQe0jHw11hpnZ4OIwejl3EINPrv0t8M6TpPbX5pKkM=
Subject key identifier: B4:9F:49:6F:E8:B0:ED:7C:00:C1:87:27:A7:D9:42:D7:A7:B9:FF:02
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 0196CB735352D2D4996C2DAC325DD912BDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 21:00:54 +0000
Manifest this update: Tue 13 May 2025 21:00:54 +0000
Manifest next update: Wed 14 May 2025 21:00:54 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: eLFbuwoylubDAFJrquBWRuFisGH01qR7k1OVGX6pz8I=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:53:52:d2:d4:99:6c:2d:ac:32:5d:d9:12:bd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: May 13 21:00:54 2025 GMT
Not After : May 14 21:00:54 2025 GMT
Subject: CN=b49f496fe8b0ed7c00c18727a7d942d7a7b9ff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:f6:28:f5:f0:bc:20:a3:65:9f:5e:cf:c5:
cf:8a:ec:38:22:f3:5f:0f:84:51:ce:2f:06:22:e3:
8b:63:3b:95:3c:5a:63:8b:ed:90:22:c9:36:e1:7b:
fe:f9:12:06:49:5c:81:f4:ee:f3:11:e0:9e:c3:79:
c2:4a:26:44:f9:b1:7e:d1:4b:f4:c9:cd:17:f8:26:
b5:6a:74:e4:75:bd:9c:c9:68:4a:6e:31:73:d9:80:
8f:03:67:5c:51:d4:a7:bd:29:38:f5:ff:18:ba:b2:
65:06:7c:ad:27:05:64:88:bb:9f:6b:ab:3a:e2:f0:
09:cf:23:d8:9e:84:4d:81:7e:2a:c1:66:bc:a6:a1:
2d:52:98:25:38:c6:98:7c:58:55:e4:4e:af:68:de:
92:2f:a9:21:d8:ae:a4:24:01:81:d4:1e:d0:ba:78:
57:b2:e7:84:f2:7e:6c:88:19:0a:0e:d3:e7:00:ec:
40:4f:2e:08:56:1e:5a:cf:87:d9:51:da:11:0d:eb:
c7:92:4e:f5:46:02:e8:5f:78:cd:08:d5:bd:9a:34:
c0:03:c1:7e:30:fa:a2:96:1b:09:93:1c:ad:50:3f:
73:b1:d6:7b:3e:8d:d9:b8:88:f4:a3:06:b4:ff:c6:
b9:27:42:63:20:77:28:3b:99:81:20:af:e5:e3:db:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:49:6F:E8:B0:ED:7C:00:C1:87:27:A7:D9:42:D7:A7:B9:FF:02
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3c:a8:7e:6d:ad:cc:ed:2e:cb:8f:43:8a:44:c9:44:a6:1a:
e0:13:36:33:d6:ff:cf:e1:46:fa:bf:63:0d:42:92:cb:3e:c3:
71:ed:14:77:f5:b9:e6:79:96:72:aa:4b:7e:85:fa:d2:2d:69:
28:1e:09:a1:58:31:4c:9b:5b:60:96:d9:19:51:cf:51:36:85:
50:93:00:80:83:7d:8e:79:bf:74:57:11:dd:11:60:79:6f:ae:
72:98:ac:12:5f:7a:2f:46:0a:22:69:c0:bb:19:19:44:4c:35:
3c:fc:27:34:df:c1:8a:e7:03:14:ea:cb:cc:0f:bd:52:88:6a:
3c:73:0a:b0:d7:3c:6f:e6:a7:40:8e:95:44:87:db:37:43:81:
be:af:71:15:12:47:3e:4e:80:a0:eb:c8:7f:33:51:99:0d:89:
76:98:2f:0e:fb:97:3b:aa:4b:9b:d2:d8:2b:6d:07:3d:21:43:
28:1d:fd:ac:d1:19:1e:2a:ae:ec:d9:63:66:31:5c:af:83:35:
84:b6:6a:5c:7a:a2:01:c9:43:66:11:7d:97:5b:d3:db:ad:a1:
e4:9b:e7:09:7a:a2:28:07:42:59:a1:21:45:de:ed:b3:1c:bb:
28:e7:60:39:f6:1b:1a:8c:2a:48:e3:18:ea:d5:0b:c0:ba:99:
59:07:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:02:10 2025 by rpki-client