Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: h6oUDteJTV+ipjQV0Bc02wS1OgJkFt9vs4umpo4BPls=
Subject key identifier: 0E:49:A0:E1:87:92:47:C5:B0:59:FE:D8:F6:B9:92:87:2A:94:D9:BB
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 0196BAED3C07C3527F9F51B76241D3F71A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 08F2
Signing time: Sat 10 May 2025 16:00:31 +0000
Manifest this update: Sat 10 May 2025 16:00:31 +0000
Manifest next update: Sun 11 May 2025 16:00:31 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: CUiKNKCp3gYQkmUDo51NGjFc/RqqqAhFs57IIDhUm6g=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:3c:07:c3:52:7f:9f:51:b7:62:41:d3:f7:1a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: May 10 16:00:31 2025 GMT
Not After : May 11 16:00:31 2025 GMT
Subject: CN=0e49a0e1879247c5b059fed8f6b992872a94d9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:9f:92:48:b0:8f:bb:ae:a7:06:63:69:17:
b1:88:b2:06:e2:03:4a:78:52:be:7f:f9:22:55:16:
38:5f:99:26:2e:b1:00:a8:ba:9b:93:2a:ff:2f:1a:
b1:8d:cc:45:76:65:41:db:e3:25:29:df:6e:32:2d:
f5:c8:3f:56:2c:2d:ac:9a:4b:cb:3e:b1:6a:e3:b9:
8d:14:e9:3f:be:bd:94:6b:8e:97:7e:4d:d4:98:74:
de:54:b9:a1:8b:c9:d4:9e:35:41:a9:c4:e2:16:d9:
da:33:cd:b5:96:69:cc:84:4f:fe:19:45:6d:33:f2:
ca:c0:b3:cc:1a:b9:8b:2e:77:be:f0:9a:d5:79:8b:
21:df:a1:16:50:c5:58:d7:a8:c8:4f:57:5a:84:95:
fb:5c:ae:07:6f:ef:43:35:71:3c:fa:6a:56:d9:3c:
e6:cd:d0:29:c6:cf:c9:8c:db:55:9b:e0:0c:5e:d4:
71:5b:e4:4e:0e:c0:8e:02:82:dc:87:19:77:3d:02:
ac:2c:71:35:6b:ad:e5:bc:33:65:e5:8e:1b:73:57:
6f:58:fd:37:df:5e:64:b3:53:4a:19:2b:32:7b:a3:
9c:5d:86:9b:ee:77:75:ff:9a:69:be:46:82:36:aa:
1d:17:98:11:d1:e1:6d:a8:33:0e:fb:57:74:4d:9b:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:49:A0:E1:87:92:47:C5:B0:59:FE:D8:F6:B9:92:87:2A:94:D9:BB
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a9:00:c6:34:a8:2c:37:7f:fe:25:5b:be:93:8f:20:96:ec:
c2:07:d1:66:aa:20:cb:d9:46:2d:5d:af:b2:20:e4:e1:ca:bc:
db:29:cd:7f:59:f6:55:e2:d9:c1:ae:62:cf:cc:29:2a:0e:fa:
32:51:e8:75:9f:61:94:1d:52:a6:65:1a:61:aa:3e:9a:57:17:
02:e2:39:2d:3d:d3:45:ed:f0:2c:e6:fd:ac:4d:c2:cf:08:ac:
29:7a:5d:10:7a:c9:39:f0:73:8b:0c:b7:ff:46:c0:9a:d9:dd:
28:2a:40:47:97:06:32:d9:2a:8a:53:cb:6c:b4:56:47:13:83:
d0:92:ca:72:a5:b6:7b:ed:25:63:ff:c7:84:5b:93:81:bf:a6:
fb:98:94:85:8a:af:27:b7:9a:88:7e:f0:7a:3b:0f:a3:7f:26:
06:c2:57:aa:9c:25:bf:c6:e6:03:1a:22:3a:7a:69:ed:fc:29:
0e:80:5c:9f:c6:3a:8a:bd:d2:5e:16:e2:85:8d:b1:d3:9c:e6:
70:88:3f:77:dd:8e:42:d9:b0:18:00:df:75:7c:d2:49:cf:2b:
8d:c4:a8:5a:53:cd:d6:5c:c0:08:43:c1:1d:73:89:28:a6:2c:
1c:e0:fc:81:b6:0a:f3:ff:bb:d0:b0:b1:43:90:6c:84:1d:b7:
0e:44:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:01:11 2025 by rpki-client