Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier: lBnTzmZ+3SzPr6So/2CeTiPvGMgtCROHQPtEV8M0oFQ=
Subject key identifier: AA:2F:93:4E:88:37:C0:AB:55:89:04:2B:6B:9A:49:68:3E:C5:90:8D
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer: /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial: 0196C34C321C1814584EF161353C42EB44EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number: 10A5
Signing time: Mon 12 May 2025 07:01:12 +0000
Manifest this update: Mon 12 May 2025 07:01:12 +0000
Manifest next update: Tue 13 May 2025 07:01:12 +0000
Files and hashes: 1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: 9YLALd0/ZoWSqtTc970kPaAwCNPuKO0SUvG3px5S0aU=)
2: rxnNIrhG3QldlOPtvjeA2wvjFbs.roa (hash: 2BblVg4dCI71TgTK0hUX2laI8AdtzWYFSV42O2qiwl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:32:1c:18:14:58:4e:f1:61:35:3c:42:eb:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Validity
Not Before: May 12 07:01:12 2025 GMT
Not After : May 13 07:01:12 2025 GMT
Subject: CN=aa2f934e8837c0ab5589042b6b9a49683ec5908d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:3d:d4:a0:43:61:74:56:99:d2:e8:73:0c:
7c:ca:70:f8:8d:5d:62:b0:fa:10:4f:d2:16:0c:d8:
d0:d6:ea:3e:a2:dd:32:52:bd:5a:09:48:a2:bc:64:
e6:5b:7c:75:f1:43:af:43:fb:86:45:b3:59:7d:41:
6f:af:da:8e:db:fe:c0:09:f9:f2:0f:1f:a2:78:82:
d6:81:fd:16:11:fd:c2:c0:6e:9d:5b:d4:84:c0:40:
ba:b6:1b:83:53:8a:ba:57:9d:f5:31:08:4f:75:ad:
f7:bb:c9:db:ad:85:45:f7:3d:b5:e9:7e:fa:f8:31:
eb:f1:0a:ed:d1:f4:e4:ff:71:2a:8e:48:fa:30:39:
59:6d:f6:6a:84:ed:a7:2d:d3:ec:99:1b:c0:35:8f:
58:2e:c2:e7:c5:60:42:a9:bd:b8:ca:92:7c:5f:a1:
f0:80:2d:aa:12:a5:ed:16:e3:b6:ee:6c:54:2e:e6:
c8:d0:7c:c7:fd:d1:9c:d1:83:53:31:74:22:53:3f:
50:85:36:5d:b0:60:e7:04:81:30:41:de:87:ae:55:
f5:3a:80:c4:e7:ac:4a:71:a9:b7:51:2f:16:77:c1:
72:fc:a3:d1:31:11:8f:f0:6c:e7:3e:3d:02:b3:02:
dc:45:d0:be:95:fd:33:39:3d:d9:70:9c:b0:60:b0:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2F:93:4E:88:37:C0:AB:55:89:04:2B:6B:9A:49:68:3E:C5:90:8D
X509v3 Authority Key Identifier:
keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:53:18:ca:15:3c:11:ab:3c:cd:45:a7:c8:dd:19:69:ab:d9:
8d:b2:87:b9:c5:86:c0:e8:bd:69:52:10:85:82:98:06:18:51:
c9:c3:45:b9:f9:00:ab:ee:33:33:3c:0e:9a:87:36:9f:8f:ba:
ec:dc:92:0d:f3:78:58:51:a6:a3:52:20:5f:8b:50:43:c9:a7:
c1:d9:64:55:8e:45:8f:f3:6c:5a:39:56:29:65:cf:51:48:16:
3d:fb:04:99:da:89:e6:d8:5a:82:c9:ea:05:05:17:22:ec:11:
b7:e5:4a:b7:bf:fe:0a:e2:e2:fe:08:06:26:21:f2:3c:f2:25:
f5:0b:76:34:c9:e0:25:fd:83:43:0c:4a:57:6d:ba:bb:f3:52:
5e:c1:99:71:d0:0e:72:ff:38:17:58:20:cc:84:55:2f:48:62:
44:78:f3:a2:27:51:7e:2d:a5:87:22:c7:e8:7c:48:3d:88:ee:
96:fd:f3:7b:2e:84:8a:32:44:f1:a0:59:35:eb:f1:3a:37:27:
c0:f3:ee:49:a3:3e:70:24:cd:40:ec:af:04:48:3c:45:7c:98:
06:0f:e0:a0:b2:7b:4d:e0:a8:9c:43:da:15:08:04:4a:26:a2:
cc:41:e0:9e:ca:74:92:1b:d5:a6:95:3a:18:17:91:3a:f0:43:
f6:9c:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:13:14 2025 by rpki-client