Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
File: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft (raw, json)
Hash identifier: 8Oeutj4Yi5hePE1PrQdVt3mQ9s6meB6eVMm7gKaOVUM=
Subject key identifier: B4:23:82:FD:CF:0A:81:02:FB:CA:67:C0:B7:F5:E3:17:AC:55:4B:4D
Authority key identifier: E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
Certificate issuer: /CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Certificate serial: 0196BD808A9097F12F7160F0B8E6E5E7124D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
Manifest number: 0F4E
Signing time: Sun 11 May 2025 04:00:39 +0000
Manifest this update: Sun 11 May 2025 04:00:39 +0000
Manifest next update: Mon 12 May 2025 04:00:39 +0000
Files and hashes: 1: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl (hash: gB4ZIXNBkPRV08JdZsvU8pv94Re/s42l2pOk2c06LYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:8a:90:97:f1:2f:71:60:f0:b8:e6:e5:e7:12:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Validity
Not Before: May 11 04:00:39 2025 GMT
Not After : May 12 04:00:39 2025 GMT
Subject: CN=b42382fdcf0a8102fbca67c0b7f5e317ac554b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:a8:0c:32:17:07:2c:61:a2:f7:5e:e0:e1:
a3:ca:cb:17:b6:38:e9:28:80:38:27:1e:bb:33:26:
27:af:31:e5:5f:16:f4:71:86:2a:7b:58:b2:62:7e:
61:1a:8f:46:be:b1:1a:2c:61:99:ce:7b:c8:18:3d:
70:67:05:f0:02:51:b6:c0:ab:2d:27:51:41:63:16:
65:05:67:f0:b4:c2:7c:3a:e6:b2:22:13:01:39:48:
20:e8:7c:8a:d9:d0:1b:1a:de:d0:ff:89:55:cf:41:
76:75:4d:24:b0:8c:1a:83:cb:3e:ef:4d:7d:55:d6:
1b:f5:94:77:51:fa:7f:f4:9d:ff:ee:ff:d8:2c:a3:
d5:f8:88:37:4c:e0:76:e1:9f:a6:d3:c7:c2:bb:6e:
0c:29:b1:f1:40:4a:53:cf:13:84:b6:50:fb:d3:5e:
ff:c6:ff:0c:ca:ab:c8:3f:30:b9:5c:e4:aa:8f:fb:
a2:55:6d:31:05:bd:f9:ae:7d:94:75:17:e7:5a:ec:
36:25:2f:c3:d4:88:26:00:c2:93:18:f3:f2:23:19:
30:58:80:cd:4d:cc:f3:69:19:e9:63:1f:04:71:91:
6e:39:41:42:f1:e1:77:1d:7b:e8:f5:85:a4:06:e8:
82:47:26:cc:8c:1a:5a:20:b0:7d:44:6b:b4:e0:14:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:23:82:FD:CF:0A:81:02:FB:CA:67:C0:B7:F5:E3:17:AC:55:4B:4D
X509v3 Authority Key Identifier:
keyid:E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:90:87:4c:27:3c:90:77:50:e3:2e:c1:0a:b0:fc:77:5b:58:
a7:b0:2c:2f:70:86:b0:1b:fa:7a:80:17:aa:b8:c1:26:52:32:
0e:c5:48:5d:c5:94:c9:90:c7:c2:e0:2f:74:4b:a7:3d:eb:03:
22:ad:46:ac:03:24:12:9a:9b:1d:cc:44:97:96:64:41:ee:45:
e0:65:bd:57:e9:da:20:dd:b7:21:6c:4d:5c:e5:14:ed:1f:90:
12:48:65:24:c4:4b:db:d6:23:30:52:3f:41:5d:0f:db:08:74:
87:af:12:34:9b:32:7f:d1:66:e1:f2:25:3b:04:db:c5:7e:bc:
ae:f8:e2:a1:d9:71:ff:04:67:53:13:a0:d4:21:03:11:9c:10:
9b:a8:eb:38:d2:f2:bf:6f:4b:82:c3:6a:2d:af:a6:4f:f8:c3:
c6:d6:dd:79:8b:ca:3f:28:f6:19:df:84:87:39:df:5b:8e:65:
8f:49:db:b4:91:0a:b2:ca:72:0d:07:52:f0:d4:4a:f4:db:dd:
5f:6c:f1:a2:22:bc:8d:06:0c:c0:4e:ac:72:99:56:20:0f:a0:
1d:be:3e:2a:9e:80:f0:e6:d5:94:ff:75:69:77:50:d2:bf:47:
fc:05:9b:2c:f8:1a:d4:26:21:3d:ac:b7:b3:f2:43:99:f4:f5:
c9:03:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:40:45 2025 by rpki-client