Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: xtjk88zFp/nxMMXTP0A0LKE8RSpOSH/SohYVVdNFmZg=
Subject key identifier: 83:A7:7D:29:62:FF:EA:BB:25:40:17:F6:B9:C0:CF:87:66:96:81:04
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 0196BAED9F1E08C49149F5C7CC12972E8FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 1404
Signing time: Sat 10 May 2025 16:00:56 +0000
Manifest this update: Sat 10 May 2025 16:00:56 +0000
Manifest next update: Sun 11 May 2025 16:00:56 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: n2qEd/Cfc6V8Alj24t0HQRufeUviCzzzA+C8xoQz4aA=)
2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:9f:1e:08:c4:91:49:f5:c7:cc:12:97:2e:8f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: May 10 16:00:56 2025 GMT
Not After : May 11 16:00:56 2025 GMT
Subject: CN=83a77d2962ffeabb254017f6b9c0cf8766968104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:cd:d3:8d:a9:b6:6d:91:9d:ba:b4:9b:de:
95:30:b7:d0:a3:9e:59:1f:75:95:4b:d1:69:4a:65:
3b:fa:13:1d:e9:cc:70:d6:fb:12:34:0b:94:5f:ee:
bb:9c:42:6c:99:52:7f:a0:69:db:61:ed:48:1e:b1:
fb:ef:70:3f:0d:29:1e:bc:cf:bd:53:1c:e6:e1:c2:
d1:72:0f:00:61:25:93:c4:91:f3:27:76:09:83:71:
38:3b:8e:de:d1:36:48:6d:e8:a3:53:3a:7f:a2:16:
46:db:9b:e5:84:4d:fe:74:e5:6b:3b:09:7a:b3:36:
96:0b:19:35:a1:1e:38:78:15:a2:fa:31:6b:7a:ca:
b9:f4:43:03:6e:86:5a:fd:34:92:56:42:f8:bf:4b:
ee:45:71:9c:df:67:fd:bb:c8:94:61:c6:98:46:58:
ef:80:df:46:c0:68:71:be:1c:46:5a:ed:e2:58:63:
0e:78:e6:60:5f:06:28:59:2d:7b:57:2b:46:e6:2c:
bb:aa:4c:38:43:b0:87:02:9b:72:dd:35:10:36:c0:
d3:57:64:ec:93:b4:18:e2:07:10:85:97:93:5b:32:
1c:aa:c0:62:bb:58:b4:59:d7:b8:b8:e5:29:60:c3:
27:11:22:f8:cf:11:1d:bf:9d:96:23:39:08:d9:9b:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:7D:29:62:FF:EA:BB:25:40:17:F6:B9:C0:CF:87:66:96:81:04
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4e:83:e3:e3:92:54:2d:6a:1a:6f:09:20:c7:fb:9d:df:bd:
66:1d:1b:b0:53:12:ba:2e:d8:9c:23:f1:5f:e1:6d:db:80:59:
bb:1f:95:42:c4:81:ac:82:d2:41:24:24:7e:bb:d4:55:0e:9a:
0a:ed:0d:9c:85:77:7f:e5:85:07:32:d6:ae:55:63:da:29:86:
92:e0:05:56:01:22:48:96:0f:69:f2:7b:75:5a:1e:c7:1d:12:
eb:17:06:20:e4:4b:78:7b:4e:fe:1d:d1:4c:52:87:77:e3:7d:
fe:10:f7:3c:58:0e:e9:4a:41:79:33:d6:d2:ca:71:c4:f0:82:
c5:8b:05:2f:09:3e:74:59:59:3e:81:b5:48:31:36:79:46:f8:
fe:7e:89:3f:cc:5f:3c:ef:36:88:ba:fe:f2:eb:f3:49:52:ea:
cf:2b:5c:2f:f2:da:fb:8a:ec:42:9e:d0:69:e6:81:99:42:a9:
87:96:a2:65:8d:8a:65:2f:17:d7:ef:64:17:e3:69:98:84:39:
e8:2f:de:e4:be:bd:19:9c:75:00:1d:99:3e:2a:9c:84:0b:3b:
de:e8:4f:f9:02:f9:ba:e0:4b:ff:c5:aa:1b:cd:00:15:f6:66:
67:2e:cb:e2:81:0a:4a:1b:e5:3f:72:70:c8:a4:fa:75:c4:81:
63:c7:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:59:46 2025 by rpki-client