Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File: 4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier: mITZXnn9mpFLaYEvbYs/OXRFmJ+pz2AwkUpPK/+rwMk=
Subject key identifier: 6D:C2:59:98:4E:92:91:AA:F2:B8:BA:4A:D7:89:B0:21:5A:FB:C6:45
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial: 01969E6335A6290E786BB3A16BFAA7B8BF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number: 0420
Signing time: Mon 05 May 2025 03:00:24 +0000
Manifest this update: Mon 05 May 2025 03:00:24 +0000
Manifest next update: Tue 06 May 2025 03:00:24 +0000
Files and hashes: 1: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: oGdiDMzuVcSXa5NVRlyknH4gNatLCQzxKzKaRv56dAo=)
2: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (hash: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:35:a6:29:0e:78:6b:b3:a1:6b:fa:a7:b8:bf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
Validity
Not Before: May 5 03:00:24 2025 GMT
Not After : May 6 03:00:24 2025 GMT
Subject: CN=6dc259984e9291aaf2b8ba4ad789b0215afbc645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:ae:b7:b8:18:86:a3:42:ff:dd:b4:91:ff:
af:80:37:62:98:c4:2d:47:20:24:bc:af:43:47:41:
49:20:ed:c4:b9:8c:cc:be:62:b5:4c:93:83:dc:f2:
71:e7:58:13:2e:30:0d:18:df:71:c6:b8:f2:af:15:
cb:e2:00:a4:a9:a4:ee:f6:8c:60:e4:94:91:a5:17:
e6:24:f9:d4:4b:3e:37:52:71:00:e3:3d:36:98:c4:
e9:44:c9:d6:2c:53:2e:de:0a:a1:01:43:76:2d:ab:
22:b5:a1:e5:34:95:2a:11:b0:29:db:ce:eb:d0:3a:
8c:cd:4f:82:5d:4d:d0:47:17:76:d6:d7:b8:70:b8:
ee:cb:af:a2:03:29:2d:82:1f:37:f0:de:9d:d0:3b:
f1:00:c7:d5:5e:87:30:76:0e:ef:06:ff:1f:fc:e8:
2a:b3:73:78:30:2d:c0:1c:0b:07:6f:39:14:58:1c:
83:6e:b3:1e:3a:e1:8a:ab:3c:4f:c3:f2:28:d6:de:
ea:05:c8:a5:a5:f4:1e:da:ca:23:77:c4:20:99:52:
17:df:97:3d:4e:f8:69:fe:cd:4b:f6:49:b3:84:d7:
9a:3d:a6:8e:2a:a8:75:17:3e:2d:82:df:e5:8d:60:
6c:85:b5:85:86:9d:1b:e9:e7:5f:4c:91:3a:88:aa:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:59:98:4E:92:91:AA:F2:B8:BA:4A:D7:89:B0:21:5A:FB:C6:45
X509v3 Authority Key Identifier:
keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3f:47:c6:15:91:00:ed:bc:ef:03:a7:18:c0:c8:4f:15:9a:
95:66:30:07:5d:d8:d3:23:c0:37:a9:d4:ae:05:59:df:0e:3e:
b7:01:14:35:49:53:51:79:b8:48:9b:da:12:45:8d:98:b3:ec:
4d:6a:88:94:8a:2e:6c:2c:93:d9:5b:51:75:f5:49:11:f9:c2:
c9:2e:cb:ab:ad:c0:23:11:fd:e8:b8:3e:7a:29:ae:9c:92:32:
fd:b1:0b:38:f2:44:7c:8f:da:70:d0:ed:95:b2:55:ac:19:19:
20:f6:3d:03:1f:d9:52:c5:81:4d:0d:94:c4:06:11:3b:a1:71:
e0:f6:f3:02:41:02:37:33:27:c5:d6:95:73:32:df:11:ec:bd:
43:09:52:79:ca:34:7c:a5:bc:9c:ed:9a:30:8b:f3:60:40:79:
0b:1e:31:3f:a1:c2:0b:98:2a:64:2b:c4:1c:4d:e8:3c:e4:25:
eb:7d:c6:59:a6:ec:79:13:eb:de:64:ed:50:b6:88:e8:be:b6:
47:7e:e1:f5:3d:78:14:a8:43:d1:ef:b8:88:d6:bb:8c:d6:5a:
3e:32:91:5c:b0:e7:22:4c:41:df:6f:9d:95:8d:07:43:d7:94:
53:7e:df:b3:ad:bb:be:28:78:7f:eb:04:e6:3c:18:7d:a1:64:
90:4f:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:23:46 2025 by rpki-client