Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: WqzxJf8foPHDQK298/WdE20tw65/2FijRiVfWyDy3LQ=
Subject key identifier: 29:47:49:39:AA:1A:A0:B2:E6:39:B1:41:10:01:4E:0B:AC:BF:6E:89
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 0196BD4943F841BD6D10395FA1E97CB1D14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 03:00:17 +0000
Manifest this update: Sun 11 May 2025 03:00:17 +0000
Manifest next update: Mon 12 May 2025 03:00:17 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: DmQ6UrIwc7OjPkOFMLIP0W8rRChav7DQY3mZAUhro/8=)
2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=)
3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:43:f8:41:bd:6d:10:39:5f:a1:e9:7c:b1:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: May 11 03:00:17 2025 GMT
Not After : May 12 03:00:17 2025 GMT
Subject: CN=29474939aa1aa0b2e639b14110014e0bacbf6e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:38:63:41:f9:a3:0a:ac:53:46:c9:2a:53:
45:38:69:f6:7c:18:d4:0b:c1:10:f1:d0:29:2a:5f:
35:1a:9e:1f:19:69:40:f4:c3:1e:3a:90:f8:2c:59:
2b:c3:1e:49:4b:16:85:64:fa:bb:8d:42:ae:8b:9a:
b9:26:30:fd:ba:5d:58:77:cd:ea:6d:35:6b:d5:37:
ee:58:68:5b:28:9b:91:04:74:be:68:15:ac:83:c3:
10:af:76:8e:db:d5:c2:78:37:17:60:ab:af:5c:1d:
24:25:01:a3:6a:28:39:9c:3b:2f:42:eb:0b:40:f5:
52:16:72:54:b5:bc:8c:48:84:16:a2:48:3b:96:56:
2b:6c:18:9f:ee:6b:32:30:de:73:6a:0c:0b:25:1e:
e3:c9:0c:e1:e8:fc:11:ed:b2:29:51:d8:60:52:9a:
05:fa:49:e3:a7:e7:2e:9d:7e:6b:eb:8d:5c:70:6d:
d6:c2:5f:b4:6f:17:fa:98:cf:68:c1:b4:c3:dc:6e:
67:30:ea:96:05:9b:69:ba:25:14:2e:41:d5:97:20:
a3:4c:51:1f:2f:1e:ad:09:8f:de:bb:10:f0:a0:e6:
de:54:ad:df:cc:08:85:cd:e9:04:67:e7:c2:a7:b6:
ab:51:36:08:d6:5c:48:17:40:ff:9d:29:3d:08:08:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:47:49:39:AA:1A:A0:B2:E6:39:B1:41:10:01:4E:0B:AC:BF:6E:89
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:10:81:f0:31:ed:ec:d4:76:74:df:6e:85:40:5e:c7:65:c3:
ac:08:22:a9:37:73:3d:cd:bb:55:24:da:1d:cd:8f:bb:9f:1d:
c5:62:25:a5:16:7e:6c:f0:8e:ac:2e:c5:da:fc:7d:e0:dd:de:
12:9a:0b:77:42:e0:4b:60:f7:d7:1c:53:c4:0f:f1:e1:2a:98:
76:c4:33:dd:5c:70:b6:91:b3:01:4b:ce:12:9f:cf:f7:ae:80:
98:3c:d0:2f:dc:d3:bc:8a:24:a0:d2:df:20:8b:0b:e9:f8:d6:
67:97:51:63:4d:c1:f5:e3:11:2f:77:ad:ff:ce:bb:2e:46:08:
5a:ec:c7:52:05:93:f9:29:b8:b2:95:1f:8b:f2:ae:6a:cc:81:
31:23:5f:1c:01:e9:25:4f:28:b1:21:34:1a:94:4a:1a:8c:36:
b1:c0:17:62:e8:ea:76:e6:08:4e:fe:5a:d0:4b:89:24:dd:30:
4d:dc:c2:fe:29:55:5c:22:a2:79:db:02:19:25:5f:d5:f2:5f:
28:17:3d:2b:47:91:19:2e:6f:8f:40:bb:85:cc:e0:6d:62:86:
a1:24:c1:dc:9d:56:f3:2e:7b:68:34:0d:06:1f:c7:71:f6:47:
1a:a3:75:3d:60:a0:f1:85:39:d0:8c:5c:4a:2e:fc:94:b1:a8:
64:13:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:42:03 2025 by rpki-client