Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: fSo8Ux7DnhN+/LEo0XXNIdtJXFuKRzWoyE0UIAbs2aE=
Subject key identifier: F2:08:AB:2B:0E:35:13:55:43:F7:2E:35:CF:EC:69:FE:20:76:2A:CC
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 0196B85A38373EF60C4924175B44E974D8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 08F3
Signing time: Sat 10 May 2025 04:00:42 +0000
Manifest this update: Sat 10 May 2025 04:00:42 +0000
Manifest next update: Sun 11 May 2025 04:00:42 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: ZWW2FPLCHDrw7LRJyTcU3SokvWcpKTWyJkDYTGk1nYE=)
2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:38:37:3e:f6:0c:49:24:17:5b:44:e9:74:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: May 10 04:00:42 2025 GMT
Not After : May 11 04:00:42 2025 GMT
Subject: CN=f208ab2b0e35135543f72e35cfec69fe20762acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d6:3d:c4:da:ce:37:9c:d3:1a:eb:a9:a9:03:
6a:88:95:55:a5:63:c8:d3:76:bb:69:19:b0:cf:fa:
7a:e2:4c:d7:53:fe:f8:7f:cd:7b:90:bd:2d:b6:14:
01:05:64:59:23:f7:4b:db:f3:06:38:3a:57:b3:dd:
6c:91:7f:83:9d:39:f4:8b:3b:99:88:45:1c:25:10:
94:56:67:3a:69:47:09:e9:58:7a:84:83:66:05:82:
d8:bc:ea:2d:3d:e0:00:1b:b2:4f:fb:98:99:6d:82:
76:3c:13:b2:d1:27:c6:ec:54:7b:0a:10:80:ee:fd:
95:af:17:f3:ef:43:24:c4:1d:3c:82:ba:bb:0a:a3:
24:78:fe:06:03:bc:02:ad:60:1f:7a:c3:3c:46:34:
80:0e:36:c1:d9:4e:b7:40:18:93:e2:ee:dc:99:9d:
75:ba:c3:5f:30:fe:dc:11:9a:96:1e:6d:73:81:cb:
c4:d8:b6:72:d4:e9:24:d0:c5:5d:78:f2:df:3c:f0:
29:51:16:c4:ba:5f:1d:e4:0a:d8:72:7f:c1:80:aa:
cd:7c:63:98:a1:fa:bd:87:1d:0e:14:a7:ac:16:79:
e2:b0:6c:89:b4:41:14:98:32:84:f4:d3:3d:5e:2c:
f3:e3:3a:e1:bb:03:37:34:02:8e:ff:24:3e:8f:36:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:AB:2B:0E:35:13:55:43:F7:2E:35:CF:EC:69:FE:20:76:2A:CC
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:9e:3d:3a:3c:62:b7:33:2f:d6:07:a0:ff:77:61:da:10:18:
ff:10:31:4b:63:47:ff:b7:dc:9a:a7:f6:ca:f0:9f:3c:32:94:
28:4a:41:ca:9c:7e:df:fb:11:8b:72:f5:ed:0b:2e:2f:90:74:
c8:b3:da:ee:06:0b:61:2a:82:5e:26:5c:2c:10:05:ae:cf:cc:
23:ab:02:8f:52:14:55:c2:96:fa:d1:e3:c0:4b:b1:1d:9b:f4:
d1:81:5f:86:86:ea:9f:09:65:fe:1e:2f:aa:1a:b4:d1:ba:07:
f1:dd:af:b5:76:c0:28:ea:f9:b4:42:f7:89:aa:2a:2b:3e:0b:
88:19:e0:a5:a5:7b:d1:4f:1f:44:fe:61:bf:cd:01:8a:f2:75:
ab:16:c5:c1:f8:dc:56:23:c6:33:97:11:5f:37:5b:e2:49:e1:
cb:7c:a1:b9:c9:07:74:c0:40:d2:f8:5a:1d:88:ea:06:eb:96:
53:31:91:ab:ba:f8:86:b3:eb:b6:4c:e8:d0:7c:fb:6d:cb:fb:
63:4d:78:b1:66:b9:3d:d0:ad:76:bc:73:8f:e0:1b:db:fc:83:
4a:be:8a:ef:83:fd:0d:07:af:a9:49:7f:18:a8:be:99:41:91:
26:e8:06:ec:0f:84:ec:59:83:07:6c:88:4e:3e:d6:36:14:99:
a3:f3:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:18:24 2025 by rpki-client