Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: QZJZJpy8vZZbmg0bCF1C2f7uzpOzClk1Zl2eJTItXPI=
Subject key identifier: 01:2C:2E:80:B3:FC:FE:5B:AF:B4:B6:34:30:40:71:01:74:E2:09:41
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 01969CE2DD090308BE526C52D8657143A5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 1525
Signing time: Sun 04 May 2025 20:00:35 +0000
Manifest this update: Sun 04 May 2025 20:00:35 +0000
Manifest next update: Mon 05 May 2025 20:00:35 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: BMG0TKw3BWSZRdxH/rnwtCE0rN0GviY1ZqJ3figD5ko=)
2: DRmZJybrlbdXMMtCv-LzVRORQZk.roa (hash: 5OPrd1Swg2Ws5p7BB56DIY7Qpw55Ar+XvquToD8doCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:dd:09:03:08:be:52:6c:52:d8:65:71:43:a5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: May 4 20:00:35 2025 GMT
Not After : May 5 20:00:35 2025 GMT
Subject: CN=012c2e80b3fcfe5bafb4b6343040710174e20941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:3d:40:69:71:32:b9:ce:4a:a4:23:75:a1:
d6:f8:0c:70:50:e5:9c:28:54:c4:b4:b2:24:e5:cc:
a8:1e:c1:e8:ab:ec:87:f6:a6:1a:11:c5:8a:0e:dc:
09:d9:2f:23:51:7e:dc:20:f0:7c:f7:8d:68:08:a6:
60:04:65:4c:64:a3:08:f6:cc:91:eb:c9:4b:e2:01:
a9:5a:29:b0:c4:a7:67:4e:8b:20:3e:b8:d9:21:bc:
77:f1:b1:cb:48:76:07:70:09:da:c2:44:5d:07:2b:
33:ce:4a:44:25:47:d8:30:09:93:7e:e3:8e:19:c0:
dc:7f:c3:2c:a9:a5:89:14:dc:1c:44:b2:42:af:8d:
f1:e5:b2:e6:23:28:c8:08:cd:69:dd:85:d7:3c:a6:
8f:f4:07:0f:66:5c:aa:fa:a5:19:97:a3:10:00:85:
1a:ea:e0:7e:fd:c2:29:cd:5f:65:83:22:b1:b4:f1:
1f:ac:93:18:76:41:37:b4:89:b5:b4:67:52:bc:c3:
cd:b2:9c:6d:bc:c1:f2:f0:d2:3a:60:2f:67:97:06:
9a:55:26:f1:75:88:32:87:ab:69:6a:12:f9:7e:dc:
3b:18:fb:21:c1:21:59:5a:30:da:5f:9b:93:b7:e6:
f4:cc:ef:9d:fb:0e:95:96:84:6b:a4:d1:1c:e6:62:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:2E:80:B3:FC:FE:5B:AF:B4:B6:34:30:40:71:01:74:E2:09:41
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:1f:14:c2:4b:ce:36:83:34:4b:7b:f9:86:93:56:ea:c5:
0a:19:25:8e:6e:b8:6d:67:e2:62:31:c6:1b:90:9f:4e:40:12:
c4:9d:90:68:f6:48:4f:b7:a8:96:5d:50:2d:b2:34:b5:e1:23:
97:ad:eb:c9:e8:d4:4c:68:2f:bd:ba:10:23:34:37:6c:3e:f1:
d9:3c:36:c1:fe:7e:ca:df:c7:0f:ba:2e:e5:16:87:ce:9c:91:
78:8d:89:26:09:49:53:bf:79:24:7a:c2:4d:dd:f7:38:8a:2a:
08:69:1e:a4:9b:d9:4a:cb:51:a5:69:0c:90:ea:f9:d8:e7:81:
d5:24:9f:f4:ea:f6:30:c7:60:a3:06:e3:74:a7:58:f8:56:17:
69:48:41:2b:c2:00:ba:ab:25:b6:09:0f:2a:2e:3e:ab:9d:8e:
ec:29:21:51:ad:d1:f6:a6:40:19:8a:74:47:36:28:7c:5c:d0:
d8:86:9d:bb:fb:59:4d:75:18:55:3b:d2:eb:ff:25:0b:a0:4f:
23:19:19:86:5f:37:97:b0:f5:a6:f9:5e:95:99:a5:53:78:43:
2b:5a:24:5c:d1:e6:e2:6a:ce:28:7c:84:f0:64:8c:cc:cd:74:
06:be:39:a0:ec:bd:36:4b:53:63:6e:89:74:88:db:6c:07:8e:
b6:ac:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:01 2025 by rpki-client