Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: 7ugTKOZo9CxgeyoRBm7g+jlJEWMBVeuSztuHmNqLoQ4=
Subject key identifier: 14:3A:E9:BA:75:48:5D:9A:F0:59:FF:EC:43:3A:D9:12:1A:9F:D2:6E
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 0196AD68535704AE28D8EB1E574AF2E4D2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 1492
Signing time: Thu 08 May 2025 01:00:17 +0000
Manifest this update: Thu 08 May 2025 01:00:17 +0000
Manifest next update: Fri 09 May 2025 01:00:17 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: nxtEtKYg8TSqiY3nVW/p1ro6dhWoDcyejHHujTma3q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:68:53:57:04:ae:28:d8:eb:1e:57:4a:f2:e4:d2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: May 8 01:00:17 2025 GMT
Not After : May 9 01:00:17 2025 GMT
Subject: CN=143ae9ba75485d9af059ffec433ad9121a9fd26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a3:28:0a:2a:06:f7:9e:b7:bf:c5:94:60:a6:
ff:9b:c2:25:ac:ff:12:5b:b5:74:2b:64:8b:46:2e:
d8:72:63:29:eb:02:c4:88:d6:08:22:b0:e7:63:8d:
3c:26:90:91:81:7c:65:f0:03:df:4d:2f:9a:53:7e:
e8:5e:0e:6b:05:7a:6d:e4:d6:eb:fd:be:42:87:92:
a3:69:f6:47:de:06:28:41:9f:44:1b:3d:1c:35:da:
7f:3f:6f:e5:75:d1:46:b3:7b:83:97:aa:6c:95:48:
c3:a5:ae:30:ba:73:c0:51:91:4b:19:5b:18:87:a7:
5a:81:b3:19:11:e4:88:c9:f8:d2:d4:f5:3d:37:63:
5c:07:af:d6:22:54:3e:47:5e:db:3b:39:57:5b:75:
a7:b7:07:95:69:2f:65:6c:47:5e:cf:34:c9:1b:e0:
72:fd:fd:48:24:e0:5a:e4:85:ca:ae:cc:c7:b6:db:
02:55:a5:dd:4c:a9:4c:fd:f4:a2:1c:8b:f7:96:fe:
88:ed:2d:b9:d2:58:62:89:e1:a3:7e:c2:fd:97:39:
4f:ca:0f:d6:d3:65:ad:f9:0d:b4:83:bd:f0:9c:92:
33:00:4d:2e:0d:c9:41:2f:61:51:e8:e5:f2:64:5a:
66:22:1a:b5:7f:9c:c1:ad:74:cb:4d:60:b3:5f:7b:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:E9:BA:75:48:5D:9A:F0:59:FF:EC:43:3A:D9:12:1A:9F:D2:6E
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ec:e3:8d:2c:56:6e:54:40:a5:ea:5a:19:b2:fb:58:99:22:
81:b1:7e:2f:20:0b:d2:50:8c:5a:0d:c8:ee:a6:11:6d:82:9e:
3b:57:bc:5e:3f:30:69:99:2d:cd:e9:32:0c:7c:62:1c:91:da:
84:ab:7c:30:ee:20:b3:04:07:59:ca:79:30:13:f8:3c:72:08:
fe:b0:d6:9c:b7:12:67:42:41:78:64:b0:5b:30:f3:4e:96:12:
3c:d4:f8:ad:08:df:95:cd:f0:eb:91:c4:ea:6a:1a:cb:bf:ee:
06:1d:f9:c5:48:9f:d8:97:8a:c8:0c:16:36:e4:34:8c:aa:4a:
42:e0:09:64:7a:83:ec:4a:1f:ee:4b:95:f0:78:16:e0:b1:9d:
83:ac:62:e4:3d:0d:6b:0e:d0:57:bf:99:9c:03:21:32:a9:15:
40:cc:3f:a4:a7:50:f7:ac:3d:02:01:df:ec:63:99:8d:27:7d:
16:28:b5:dc:56:b7:bd:ee:d0:9c:ae:fd:1c:02:81:ae:1b:cd:
13:26:9b:6d:ca:f8:c9:8b:1b:b4:b4:1a:df:71:3b:2d:02:a9:
bf:25:bc:2f:98:a4:d9:f4:b8:40:1e:37:ba:2d:7d:b6:18:87:
ef:40:3d:b2:9a:cb:36:9a:4b:9a:27:22:48:0d:24:ae:ff:d3:
bb:be:93:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:06:32 2025 by rpki-client