Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: yLvDioGlQuWgj90sf+XVtBUPNxiB5cM8ggGWMQD6VFg=
Subject key identifier: 1D:D0:C0:78:AA:EB:67:B2:CE:98:3C:08:D9:30:8A:22:FD:20:A8:BD
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 0196A8422A7BBB862BF0A964D9F1FCA941FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 14FC
Signing time: Wed 07 May 2025 01:00:30 +0000
Manifest this update: Wed 07 May 2025 01:00:30 +0000
Manifest next update: Thu 08 May 2025 01:00:30 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: q5155giFyoLiIqsu2rm589tRjJ7O56lJrbtohs66pgo=)
2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:2a:7b:bb:86:2b:f0:a9:64:d9:f1:fc:a9:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: May 7 01:00:30 2025 GMT
Not After : May 8 01:00:30 2025 GMT
Subject: CN=1dd0c078aaeb67b2ce983c08d9308a22fd20a8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:15:f1:fe:2f:b1:f4:85:79:59:e1:7c:9e:
67:6f:43:f6:52:cc:7b:0e:45:e4:3d:fe:88:e7:e2:
02:38:03:de:ed:9f:35:b5:0a:31:97:ed:25:4d:1c:
37:a5:de:d0:8d:2c:24:99:fd:fb:4f:dc:ab:9a:62:
ce:e1:3b:f9:29:1c:ea:db:a4:c8:60:98:a7:d6:84:
0f:c1:90:57:61:62:b8:29:eb:84:91:33:52:cc:d9:
35:18:04:97:dc:d2:f9:c8:31:73:24:17:62:e6:fd:
41:a0:52:79:19:e5:d7:f5:fb:e2:84:93:c5:46:ef:
f8:cf:f4:ec:6f:bf:59:32:45:1e:2e:19:24:df:17:
ef:08:c4:d2:48:73:8f:3a:14:b5:ee:9f:a7:0a:08:
97:40:08:d8:ad:62:0f:6f:2f:cd:9d:cd:8b:b5:89:
bb:ae:94:eb:73:53:e8:a5:dd:5e:21:a5:39:4c:5a:
a4:9e:65:35:8a:5b:1e:a3:5c:df:00:91:5b:42:82:
19:1b:7a:55:a7:f4:22:4f:09:9f:24:73:ac:e1:2e:
24:c1:2f:94:90:bb:a8:d3:cc:d9:11:50:de:ea:d0:
8b:d1:ea:51:73:0e:e3:2b:81:3b:c9:0c:6b:27:21:
5e:37:07:39:53:1b:26:fb:21:40:b4:3e:51:7d:b0:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D0:C0:78:AA:EB:67:B2:CE:98:3C:08:D9:30:8A:22:FD:20:A8:BD
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:a3:84:e2:91:43:14:9a:9c:b1:6b:d7:2d:16:6b:38:3d:
94:44:e6:1e:e8:24:a5:71:bb:80:89:9e:54:05:bc:ec:ea:df:
30:27:0c:6a:34:b7:f1:b4:29:d2:4f:25:34:22:99:5d:08:c2:
6a:d1:4d:ec:9b:80:37:84:09:49:2a:6c:a3:da:13:c6:e9:98:
7b:58:01:9a:78:61:e4:2a:37:f7:26:13:21:88:87:8d:b8:34:
bc:b4:1c:a8:4c:22:2c:e8:10:6e:50:5d:c7:db:6b:83:50:40:
1b:19:61:11:be:7a:6c:90:29:6c:40:b7:8e:52:42:b3:fa:71:
20:fd:f8:d4:b6:43:2d:6d:ea:a7:3d:9a:e6:4c:d7:08:32:04:
2f:bb:82:62:3d:04:96:25:61:8f:32:fa:69:33:57:92:e4:f7:
39:2a:a5:1b:ea:21:25:a2:fa:d1:87:db:f7:ae:2f:28:5b:88:
33:b1:e6:94:ee:74:83:52:17:a7:8a:7f:73:77:05:f9:3f:61:
57:73:92:07:26:3c:b5:33:dc:da:f7:b2:8e:1c:4e:ca:8f:9b:
c0:9d:85:d8:c0:0d:0f:32:f4:b6:3f:d7:de:a8:df:83:9e:d1:
be:87:32:e2:4d:d6:81:44:7e:14:56:88:87:b2:66:89:e1:ae:
42:5b:72:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:25:12 2025 by rpki-client