Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier: 5pSu4fA2NwivuM2Em7jJl2z146BIev6D3ax6utB3IQA=
Subject key identifier: 21:78:58:48:DE:9E:C5:BB:D9:18:F6:1F:AA:04:CF:75:6D:49:BD:6F
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial: 0196BE5CDB5094E562EF31165D7AB4B3F93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number: 1246
Signing time: Sun 11 May 2025 08:01:18 +0000
Manifest this update: Sun 11 May 2025 08:01:18 +0000
Manifest next update: Mon 12 May 2025 08:01:18 +0000
Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: Kx+oKuiZB/Hde1AWjdpNnt52PpB2+dpmR/CS/vEtP5U=)
2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:db:50:94:e5:62:ef:31:16:5d:7a:b4:b3:f9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Validity
Not Before: May 11 08:01:18 2025 GMT
Not After : May 12 08:01:18 2025 GMT
Subject: CN=21785848de9ec5bbd918f61faa04cf756d49bd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:7e:b1:a8:f4:c3:77:4e:92:8c:46:c6:67:
0b:7a:9d:ac:7b:f2:14:8a:49:a6:32:7c:19:03:ad:
46:e8:11:1c:80:cf:db:30:33:7e:86:34:6c:fe:35:
3c:37:a3:c6:6f:d4:0e:79:5c:c4:1d:64:7f:5e:98:
c3:6d:f8:93:7a:9c:d9:6a:6c:43:8c:0c:bc:ea:f2:
6b:9b:62:22:0c:d7:c9:7e:7f:c4:28:46:8d:a5:c9:
59:2c:9f:eb:0f:47:5e:f1:ce:ed:fa:97:be:93:36:
84:06:70:8b:28:54:2d:86:02:57:35:3a:97:66:e6:
73:cb:0a:cf:8e:31:66:b8:72:e2:e1:e0:d2:29:45:
8d:4f:58:be:14:88:10:36:22:d7:6e:12:f4:02:21:
3c:1a:87:55:57:d1:17:ee:da:78:06:58:a7:e8:90:
5c:95:b8:58:d6:e6:f0:43:54:d0:03:64:ac:03:f9:
4b:94:2c:1b:a0:2e:93:c5:55:87:8d:01:bc:43:7b:
b3:63:27:da:d4:8e:74:1f:d1:69:24:54:1e:b8:3a:
3d:f1:ff:64:9b:ab:cc:16:20:f1:19:56:fa:66:17:
dd:9e:08:37:d2:df:00:e9:6c:34:96:52:95:fb:0c:
cd:63:5a:07:9a:35:e7:a0:3c:b4:e1:e8:c4:6d:f7:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:58:48:DE:9E:C5:BB:D9:18:F6:1F:AA:04:CF:75:6D:49:BD:6F
X509v3 Authority Key Identifier:
keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a2:4c:bd:e8:85:14:a7:e0:35:e4:65:6d:6c:ed:30:30:18:
17:ec:17:89:d3:71:2e:4b:e7:7a:6b:75:c6:62:65:cb:c8:d4:
a9:a0:70:e5:03:25:c5:f1:3a:3e:07:92:21:ec:d6:67:39:4b:
f8:4b:f2:36:3a:4c:a7:b6:47:1b:b9:43:3d:e5:6d:73:4f:ba:
73:c4:e1:b4:ce:ac:09:8d:1e:47:66:fc:ee:f1:b1:b4:09:9a:
b9:6a:1c:27:2a:4c:0b:61:b2:a4:09:30:de:ab:aa:b5:d8:34:
82:31:6a:57:e8:ff:88:09:66:f4:b4:86:aa:a4:97:15:27:fc:
56:59:c4:70:53:3b:8e:04:59:17:62:ce:16:08:d0:73:97:ea:
47:c3:ca:b1:2e:6d:43:74:e6:51:b3:8e:0b:55:47:27:3b:50:
58:57:21:51:3b:e5:1e:0a:7b:eb:92:62:13:3a:df:4c:d3:1c:
2b:de:42:be:5d:c5:91:d9:6b:28:d6:f1:b6:a6:6e:ef:6c:bf:
48:07:30:51:ce:ce:ca:f0:25:e5:4c:fa:70:9b:40:f1:a6:40:
a7:77:7d:50:c3:c0:45:6c:88:16:45:af:b0:c0:c6:dd:56:7d:
8e:7c:76:31:fe:c6:3c:5f:37:ca:4a:45:2d:50:a1:63:bc:12:
e1:be:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:18:20 2025 by rpki-client