Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
File: e4mF-uoIWYwFzDC4LigjBq95MxY.mft (raw, json)
Hash identifier: j9QcYp9EX0a99yh//g00+kvLdlpqYpcCQ/rwJQHToBQ=
Subject key identifier: 38:B0:0B:52:AC:57:7D:33:E1:61:1C:CA:0D:67:CB:21:27:62:89:D5
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 0196C2026C834E69F3FA941D1071C9548CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
Manifest number: 0DD1
Signing time: Mon 12 May 2025 01:01:00 +0000
Manifest this update: Mon 12 May 2025 01:01:00 +0000
Manifest next update: Tue 13 May 2025 01:01:00 +0000
Files and hashes: 1: e4mF-uoIWYwFzDC4LigjBq95MxY.crl (hash: RvKt7vJIRNTFMj+aDqaxG2tykEo+xASn8PK5fEOQQAo=)
2: wezzDoLmoG44JNaFHHcOefdwrnE.roa (hash: feMtqmKbJF8l19fJuaMh5zzlgwe36jwzuX192DfrtQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:6c:83:4e:69:f3:fa:94:1d:10:71:c9:54:8c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: May 12 01:01:00 2025 GMT
Not After : May 13 01:01:00 2025 GMT
Subject: CN=38b00b52ac577d33e1611cca0d67cb21276289d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:2b:5f:df:c0:5c:e6:92:94:bc:88:a2:b3:
79:48:02:28:09:90:7c:70:1f:bb:07:3d:7d:f4:21:
16:fa:91:d8:ba:2d:ba:83:9e:91:82:74:9a:0a:d9:
a0:d2:18:ce:99:38:06:56:35:03:ed:01:6c:54:32:
17:e7:d4:cd:d3:e8:41:43:bc:ce:68:16:c2:aa:bd:
9c:f5:fb:bf:05:4f:55:db:36:d0:e7:e0:d0:b8:36:
7f:7b:13:8f:c3:93:2b:3d:a6:36:1c:03:b4:45:ed:
1b:a2:90:f0:5b:4d:c5:45:ea:53:16:9d:03:c5:9b:
ff:60:bb:fc:28:ca:2a:c6:f7:d3:df:fa:c8:0d:93:
28:65:f7:71:7d:e3:7c:5a:20:f5:04:54:5a:56:3d:
71:bb:85:23:d2:b3:1d:d0:30:ce:60:dc:97:29:76:
ee:eb:70:13:4c:2d:58:32:26:89:a2:41:41:22:73:
ab:bc:6d:84:0e:0f:56:58:a1:6d:d9:84:d0:1f:57:
43:bc:c9:fe:fe:84:b9:ea:d0:dd:8f:34:73:8a:1c:
6d:78:cd:32:03:75:81:01:d2:f8:d5:37:2f:25:b2:
5c:8c:2b:2d:bc:7a:67:0d:51:de:8d:49:85:a2:92:
75:4d:40:30:5f:0a:32:87:a2:8c:08:3d:6b:fa:b1:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B0:0B:52:AC:57:7D:33:E1:61:1C:CA:0D:67:CB:21:27:62:89:D5
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f9:b8:dc:49:03:1d:d4:7c:9f:00:e0:b6:8d:7c:49:ed:d5:
e1:ae:01:16:2b:ef:4e:c7:e6:53:68:02:88:c0:09:1d:08:d8:
b0:22:c8:2a:b1:a2:c3:44:bb:18:91:2d:df:1b:a4:b4:e1:9f:
15:a0:c7:f0:57:6c:2e:cb:86:ea:b8:27:a5:b2:03:a7:e8:b4:
e0:74:66:37:a7:2e:bc:f7:96:43:0d:1c:15:d5:b6:11:c9:cb:
6d:ea:09:04:fc:7f:fc:24:b8:e7:9e:98:2f:cc:c1:df:47:0e:
e3:1e:c9:b6:4e:bc:34:79:2c:27:e9:c6:39:b6:65:e6:f3:b2:
3d:00:50:e5:e7:31:28:49:bd:70:a8:ef:bc:6c:66:de:ae:50:
ee:45:3f:13:5b:b0:fb:f2:d7:84:51:a0:f7:a3:3e:1e:ff:40:
df:26:c5:2c:a0:12:0f:a9:4c:69:85:0b:58:81:d1:6e:bf:ba:
4e:57:cd:bd:35:8c:98:33:02:23:8b:f8:40:56:6c:ab:e3:d6:
ef:40:ae:7c:c0:5f:e4:0a:30:82:24:ab:01:fe:0c:8f:17:c8:
3c:4c:af:60:cc:01:c0:f8:15:4c:99:8c:a3:5f:0f:e9:cf:c9:
47:4a:77:fd:63:46:c5:13:a4:c2:bd:02:10:fe:fc:12:90:96:
88:f3:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:20 2025 by rpki-client