Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier: l/vOvZBoO7AUQ11OJ296/rAac2tGGJ5TsneV041Mq2w=
Subject key identifier: 90:B7:DD:3B:3B:CF:C3:5A:84:AC:E9:E8:58:F9:DF:DF:45:F1:8F:E6
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer: /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial: 0196A19B01E0B8972A5389B9A932309E6608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number: 01A4
Signing time: Mon 05 May 2025 18:00:12 +0000
Manifest this update: Mon 05 May 2025 18:00:12 +0000
Manifest next update: Tue 06 May 2025 18:00:12 +0000
Files and hashes: 1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: 7babPaNj+sq1snJfGEUbaOFvsCBQhXket2RWgiMMm5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:01:e0:b8:97:2a:53:89:b9:a9:32:30:9e:66:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Validity
Not Before: May 5 18:00:12 2025 GMT
Not After : May 6 18:00:12 2025 GMT
Subject: CN=90b7dd3b3bcfc35a84ace9e858f9dfdf45f18fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:7c:82:7a:e9:48:bd:8d:fa:7a:4d:c7:c8:
07:61:64:42:56:72:c6:1e:35:d7:ef:3e:59:78:41:
c5:3a:07:54:f2:6f:19:27:7c:0d:89:96:4d:af:34:
6b:db:5b:66:51:f3:1f:32:d7:e2:e1:c9:a0:35:ab:
bd:19:f8:4f:8e:69:5e:8d:97:5f:7b:0a:69:5c:4b:
b3:83:d6:87:5c:13:13:25:10:be:93:ad:84:14:1e:
57:23:09:a8:16:33:4f:d1:ae:8b:5d:68:6b:3a:ee:
d7:5c:a4:70:89:23:7c:dd:e3:48:c6:4c:d3:d4:76:
93:88:1d:91:54:31:55:9f:12:b4:61:95:f6:c3:4d:
57:d0:ef:fc:36:53:aa:9c:d1:c1:a6:18:9d:32:ab:
8c:00:03:15:6c:03:35:e3:8d:b9:00:1a:91:3b:20:
af:5c:e3:86:ec:cb:8e:35:a1:54:29:a5:e5:a8:c3:
e6:1a:d4:00:94:9a:22:4b:cb:a9:1c:21:b1:5c:ad:
f0:f6:e9:09:66:fc:20:bd:ae:0e:ac:72:fd:11:80:
b5:6b:e9:e7:ef:1d:ff:4f:ef:6f:6a:d7:59:34:73:
cb:df:fd:c6:c8:56:cf:46:28:aa:00:09:be:b5:2d:
9e:f9:64:39:08:cf:2c:35:38:b2:71:03:98:0e:2d:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B7:DD:3B:3B:CF:C3:5A:84:AC:E9:E8:58:F9:DF:DF:45:F1:8F:E6
X509v3 Authority Key Identifier:
keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4a:fd:30:c0:bb:8c:d6:9f:13:7c:cb:27:63:b4:38:a5:2f:
33:7d:09:47:77:72:8d:41:23:e7:5d:7f:31:70:6e:5e:54:4d:
4f:53:7f:82:29:16:55:ac:ec:fc:44:db:a5:2d:1b:06:1f:a8:
1b:26:d7:d5:f9:a0:0c:aa:0e:c8:e7:7d:1d:cc:62:e9:be:e0:
67:eb:f8:41:2b:36:8e:4c:50:4b:7c:a7:e9:28:fa:bb:2f:08:
4d:07:14:84:09:18:4e:6f:9d:16:18:0b:23:06:b0:73:24:d0:
a3:54:18:79:8b:14:77:f3:00:d8:66:f2:07:e7:b1:c8:c8:fa:
44:aa:92:05:1c:10:77:ac:af:ce:e7:05:25:65:25:dd:62:59:
7d:bf:43:f2:69:1c:1b:77:e7:c6:bd:1b:cb:e8:37:80:87:0b:
e9:fe:4e:07:ea:40:ac:98:c0:03:c1:4c:90:c9:36:38:06:b5:
8f:63:44:84:85:2c:b7:51:c8:b1:1f:3c:3c:f2:0e:ef:ad:8a:
50:93:f1:ab:ac:05:a2:65:03:97:f4:56:b9:99:8d:3a:66:f4:
e6:03:a6:cd:77:8c:82:89:a3:f0:cb:7d:d8:6a:ad:49:f2:49:
ea:98:c6:0e:91:e8:71:68:33:3c:c8:19:a0:ec:4b:a1:0f:db:
88:8d:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:27:46 2025 by rpki-client