Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier: fhM3bUdht5O0ZgvG4bSGrSlXFxeCk/T8X2P+GRlxqQI=
Subject key identifier: 80:09:2B:FB:E0:C2:35:72:AF:1E:78:D6:68:8E:7E:7E:17:0B:88:DB
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 01969FAC9841CCF3FC734472888EDE8C505F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 09:00:10 +0000
Manifest this update: Mon 05 May 2025 09:00:10 +0000
Manifest next update: Tue 06 May 2025 09:00:10 +0000
Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: 1xXTMKkYp7cYqD+MrcJ0bJ3+eKmq1b42I+YjbwK7HEM=)
2: Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa (hash: 9oeY/MAa6lvwYN19OiXxeJ1LVR37sI0FzCd1Eq/rgTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:98:41:cc:f3:fc:73:44:72:88:8e:de:8c:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: May 5 09:00:10 2025 GMT
Not After : May 6 09:00:10 2025 GMT
Subject: CN=80092bfbe0c23572af1e78d6688e7e7e170b88db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:ab:20:e7:49:72:a2:b3:bf:b3:46:96:44:
6d:ff:ef:c0:4b:8b:92:e6:f5:e3:61:6b:b7:72:2d:
58:48:96:08:89:be:19:09:61:af:58:42:b2:d3:f4:
33:03:96:32:0b:d2:62:98:24:38:6c:c6:dc:48:ea:
78:3b:fa:76:e1:f2:76:de:e9:5f:95:bb:3e:63:4e:
3d:42:87:18:b0:bd:bd:ed:09:b4:bc:33:61:bc:f9:
56:a5:18:64:7e:df:53:39:de:a8:9e:10:45:6e:87:
eb:47:56:a7:af:18:f4:2f:c3:42:e6:ea:de:89:d1:
54:8a:9f:39:6a:22:16:eb:d0:80:3e:fa:97:aa:66:
05:e9:b2:48:9b:58:27:5c:91:15:67:77:d4:4a:65:
e3:de:67:5b:4f:b8:33:fc:37:0c:c4:34:dc:36:e7:
73:3f:0a:bf:fe:8a:f1:12:ac:2d:07:31:f7:13:a6:
9d:8e:a4:ae:0d:df:47:28:0d:b5:b4:b5:98:32:80:
e0:51:1a:56:41:a5:39:71:0f:74:81:d6:46:37:a1:
7c:52:b1:03:c0:49:01:78:3e:e0:2e:f0:a1:82:4b:
8b:5d:ee:a5:09:ba:18:b9:eb:b3:c3:33:71:64:5a:
7d:8f:19:fc:da:32:0e:2e:ee:48:85:14:c1:6d:b3:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:2B:FB:E0:C2:35:72:AF:1E:78:D6:68:8E:7E:7E:17:0B:88:DB
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:db:f8:e0:0a:43:2d:a0:bd:d9:b8:80:37:84:c7:0d:44:00:
b1:b5:71:59:80:ff:20:8e:fe:d4:d1:1e:ac:a2:ce:de:7d:ac:
e4:9e:16:ed:a8:87:0f:c9:d3:b1:29:7d:fc:d1:88:0c:55:40:
54:8b:95:90:dd:c8:64:ef:3e:7d:f7:96:14:e5:70:c9:23:c1:
c8:f1:13:8f:00:45:af:e8:ca:c3:e3:01:e3:60:09:5a:1c:bc:
d0:10:3d:4f:50:ef:58:d5:81:b6:b8:ec:a3:a0:5d:12:03:87:
da:38:8b:7c:92:e5:a2:5f:e8:26:9b:b4:75:66:49:0a:9f:46:
2c:10:40:af:54:a6:6a:c3:2b:e4:09:37:d3:63:9c:97:e5:d7:
3d:08:50:62:7c:8e:93:96:35:af:ec:bd:74:de:50:e9:2c:10:
03:9f:58:72:77:24:04:2b:3e:84:b0:8a:09:04:56:53:ff:84:
8e:22:81:76:f5:39:3d:cf:73:b5:54:70:33:71:90:a8:ad:4c:
f8:b5:3b:a7:2d:59:7a:06:20:a4:26:90:cb:83:57:49:8f:b9:
99:50:23:88:be:4d:72:ab:06:22:80:74:ab:98:98:57:6f:d9:
04:cb:e7:a5:3d:3d:a8:67:b0:5a:f9:2b:2e:b5:e6:b6:fc:95:
d7:36:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:49 2025 by rpki-client