Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: QQSw20oEjbMce7vBYZhAL/rR/AgX9FR4bszDydZ9Nmc=
Subject key identifier: 5C:09:CD:43:4E:76:1F:94:58:FF:73:2A:B7:78:36:40:03:32:8F:0A
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 01969E6365F2477411E8A6DB25E1E877A976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 085B
Signing time: Mon 05 May 2025 03:00:36 +0000
Manifest this update: Mon 05 May 2025 03:00:36 +0000
Manifest next update: Tue 06 May 2025 03:00:36 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: HsDqGuel2cozaFZFR+We5pZKOxJnxn3nCzkIFp3Ke4A=)
2: A2XZpMhjoSl2eIpUcSwowos8QQA.roa (hash: 7IQHzb+LeNjLi41+XbYgKffdbEsxRoe4BI+dUjjQXH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:65:f2:47:74:11:e8:a6:db:25:e1:e8:77:a9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: May 5 03:00:36 2025 GMT
Not After : May 6 03:00:36 2025 GMT
Subject: CN=5c09cd434e761f9458ff732ab778364003328f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:3d:27:52:f3:c9:f5:8c:f8:34:e1:7e:01:
e6:0b:b9:8d:1d:a2:4a:7e:6d:61:8c:d0:81:d2:01:
e0:5d:93:02:6d:78:00:88:00:30:dd:5c:d8:61:ff:
61:f0:ed:b4:49:eb:d4:47:d0:a3:0d:5c:ee:38:c4:
40:fe:3f:e3:c7:29:ec:2a:ab:b1:4a:a3:31:0a:b4:
66:06:17:88:d2:03:41:91:5c:25:2f:b6:1c:c9:26:
a0:eb:78:0d:5d:5a:3a:28:61:83:b0:1f:ea:26:04:
32:70:c2:16:cf:16:2f:5c:36:44:dc:f6:c1:4e:f3:
83:4c:42:75:ba:a1:b9:cf:b3:d8:13:b6:10:00:9a:
e9:4e:84:c6:7e:6e:69:75:16:f0:78:6e:e7:de:52:
a8:25:b6:22:95:cf:69:27:7c:0d:80:30:8a:b1:bf:
46:fe:c8:cc:c1:2b:f6:93:04:1d:65:ca:47:cf:a2:
5a:71:e8:10:ac:cd:52:62:89:67:08:de:58:23:9c:
fa:c9:f3:b6:b0:60:78:39:b2:f0:c0:b0:48:6f:f5:
d5:ab:44:99:4e:82:6d:f7:59:65:d9:70:fe:6a:08:
3a:35:10:08:b9:a3:af:2c:d5:a6:f8:fe:97:b3:d5:
f5:8f:4b:3c:51:76:c1:a6:9a:7b:e5:b8:98:51:88:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:CD:43:4E:76:1F:94:58:FF:73:2A:B7:78:36:40:03:32:8F:0A
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c9:78:e0:8b:a0:e3:12:e7:5d:23:83:cc:55:db:6e:f4:bf:
a5:b7:b3:37:83:b1:91:01:a4:6c:59:5a:b1:64:92:60:0e:0f:
95:c7:4a:df:e3:e6:3b:42:f8:80:4d:74:4e:e0:11:1e:16:9e:
d0:74:9c:69:3d:12:6e:69:05:f8:f6:d5:4b:b2:37:29:07:7d:
d5:ef:0e:f1:d9:fa:c0:b3:0e:5d:e4:f8:6d:e6:7b:5a:24:c2:
00:7a:09:b5:a0:de:d7:6d:ee:68:dc:5f:f4:c9:08:75:a2:9b:
ea:75:0b:6b:21:76:63:98:89:47:de:d8:89:e4:2a:9c:00:ca:
22:0c:ff:b8:c7:b9:2d:98:3c:ac:fb:e4:c7:66:e6:87:51:6a:
96:9f:c3:cf:80:bb:ad:16:7b:a1:72:6e:f7:20:68:04:df:e9:
a1:94:51:8e:97:4d:e9:00:86:58:39:81:e2:33:59:ff:6d:9c:
f6:a6:12:80:c7:d6:dc:f7:e3:18:16:4c:69:b9:bf:05:09:9d:
15:8d:ba:54:76:91:63:fd:8f:ba:e0:22:d4:9a:d0:29:46:cb:
96:fe:29:4b:53:cf:16:96:d2:31:d8:47:25:2a:6d:e1:0e:61:
49:b8:6d:05:98:00:73:c0:86:2d:c1:06:62:87:71:93:d0:a9:
cc:de:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:28:04 2025 by rpki-client