
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier: 6AukvHClxx0WKED/fy7kEb2FGDAYu48eHB/83dSG9fM=
Subject key identifier: D4:40:82:2B:43:1F:BA:6A:0F:4E:F4:BF:7A:76:E3:CD:F5:9C:72:93
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 0196B1455EE03AC6CC577658CBC60CA3CE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 19:00:35 +0000
Manifest this update: Thu 08 May 2025 19:00:35 +0000
Manifest next update: Fri 09 May 2025 19:00:35 +0000
Files and hashes: 1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: YrZKlTPrhz8ac/8MDxiGPePDYOmP7WtOGG9CKofXBVY=)
2: GfCJvI9nayXOG-c9-kNZYMtGvRY.roa (hash: iErUIkofrDIWovm2VEktlTu0LGFlXqiT+Jb2IEFCjN4=)
3: b6PxSRMMpYMDelZhlHVJswnGzlY.roa (hash: 2hbPovorwIzKGKG+8Z0PbXVcSz91V4CX1uoPUPOxcMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:5e:e0:3a:c6:cc:57:76:58:cb:c6:0c:a3:ce:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: May 8 19:00:35 2025 GMT
Not After : May 9 19:00:35 2025 GMT
Subject: CN=d440822b431fba6a0f4ef4bf7a76e3cdf59c7293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:37:c4:5b:55:a8:3e:e5:a1:7b:22:27:c8:
b2:d2:49:97:87:81:45:4d:3b:14:d2:93:20:88:e0:
40:40:78:b6:c5:e6:8e:5f:8d:5b:62:27:d5:40:32:
00:98:d3:7e:9f:e7:91:b1:65:e0:96:3e:45:f2:f2:
6d:9a:94:83:85:70:9d:50:7c:a5:6b:8f:0e:d7:7d:
1a:53:c9:c9:ba:9a:e1:00:0f:9e:7a:5e:6a:e5:61:
90:0d:52:b4:7a:2f:14:a4:be:4f:2b:c0:43:9a:a6:
bd:96:04:f5:03:2f:e1:5b:eb:64:3d:31:a1:85:72:
27:24:d7:21:03:9a:35:c4:ae:e2:79:76:78:5d:c1:
93:b0:14:fb:71:03:6e:06:cf:eb:c5:5a:f0:89:bb:
d6:c5:f3:0c:cb:2a:4d:4b:d5:69:ae:a5:5d:dc:50:
44:15:39:01:4e:36:7d:db:cf:af:d1:a2:0e:cd:13:
3d:89:c2:6b:87:fb:bd:16:f7:4b:91:9f:0b:68:39:
9e:ff:75:14:f6:77:f9:64:14:bd:d2:47:db:6b:74:
0e:f9:1a:5e:89:6a:a3:53:c1:d3:98:88:cf:49:bd:
ff:34:d0:62:f0:65:bc:8f:eb:4d:33:a1:e6:93:fb:
c9:72:7d:0a:6a:62:1f:5a:90:f4:2f:c9:9e:bb:74:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:82:2B:43:1F:BA:6A:0F:4E:F4:BF:7A:76:E3:CD:F5:9C:72:93
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:dd:50:26:ef:2c:24:93:cd:d7:2d:a9:19:d4:42:07:bb:99:
52:e2:f3:a8:15:76:51:e3:ab:99:1a:ea:82:c7:49:66:e3:d6:
65:ae:a5:36:a8:4a:bc:1d:77:0e:80:33:b7:81:bc:77:3f:84:
4b:bf:ea:8c:f5:d4:f1:5d:e6:00:74:87:53:de:1d:54:e2:31:
44:e6:96:97:45:16:e7:a3:cb:7f:0e:44:39:e6:8a:1c:a2:27:
17:ec:d7:bd:72:1e:31:cf:71:9a:5b:6a:59:21:bb:df:4b:87:
6a:f1:15:82:61:3b:4a:89:78:1a:83:63:16:7d:2d:f7:dc:7a:
8d:65:40:3d:f0:81:7b:16:80:ab:3a:f5:2d:8a:02:8f:e8:c5:
b2:7c:54:46:fd:89:2f:a9:60:8c:06:45:e2:de:a2:40:7f:a9:
d5:93:cc:9f:60:64:11:ef:f2:c4:59:9d:8f:ef:f5:b3:cb:c2:
4c:84:c4:85:c4:a6:a9:50:1a:a3:a1:81:43:de:09:94:f6:a0:
b0:b7:52:e9:96:a2:e0:3c:00:24:24:de:da:c0:c3:53:a1:18:
6c:cb:8d:be:8f:09:25:a5:0a:6d:25:8a:69:4f:60:ec:32:ea:
76:53:f2:34:e0:ec:6d:a3:11:fd:11:07:6d:9d:8e:0a:ff:ea:
54:c3:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:11:15 2025 by rpki-client