Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier: IpgslIUhhp13lfo7IK+jbKisVlkQLHPOkOwh+SrgNVQ=
Subject key identifier: CD:8D:E5:00:9A:B5:85:2E:6F:E9:64:DB:E4:07:2C:8B:CE:A5:00:B9
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 01969F75E97F07BE2B0B00C8FEBF884FD744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 08:00:26 +0000
Manifest this update: Mon 05 May 2025 08:00:26 +0000
Manifest next update: Tue 06 May 2025 08:00:26 +0000
Files and hashes: 1: AwXuQoOBDpLkL6JkvNNI78Almh8.roa (hash: rgsGgbJMkxlD2Xt53P3qCIDlwFDG3I1YNJZMV8rGCso=)
2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: nAIA/TSM7axx5fMK2weNxHQKbI6HP5oLb7HSt/j9WyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:e9:7f:07:be:2b:0b:00:c8:fe:bf:88:4f:d7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: May 5 08:00:26 2025 GMT
Not After : May 6 08:00:26 2025 GMT
Subject: CN=cd8de5009ab5852e6fe964dbe4072c8bcea500b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:25:b8:44:02:27:18:63:9d:82:f3:88:ad:
9c:3d:a6:7f:c7:c5:3c:ac:00:e3:15:d0:de:76:62:
78:f1:31:88:26:c4:92:67:24:41:e9:c9:2b:6c:17:
6f:c2:51:ca:49:43:4b:57:26:f7:3c:63:60:67:d3:
7f:c7:9a:17:6b:c3:0b:2f:fe:50:08:d2:e4:ef:0f:
9a:11:21:7a:05:c4:fa:b6:19:0f:cd:bd:61:68:9a:
c8:5d:94:1e:7b:62:9b:2b:e0:b8:bf:39:c5:5a:d3:
dc:45:10:ce:15:69:ce:52:e5:b0:f8:6b:5a:a9:27:
a2:dc:65:cf:88:c6:9a:6f:78:26:6d:c2:c4:9e:9e:
7d:f9:af:77:b9:94:eb:81:7d:15:64:cf:f8:d6:98:
fc:20:7d:52:26:8a:47:11:1b:c1:22:e9:29:80:0d:
9a:cc:3f:cd:9c:49:12:fa:30:40:88:f7:fb:8a:00:
5a:4f:cf:22:29:88:9d:13:8c:e4:24:39:30:06:8d:
09:40:89:2d:ba:76:bd:78:c9:2c:f1:c1:41:33:4f:
ae:d8:c7:3b:d7:8c:57:e6:69:3d:60:8d:9b:f3:53:
19:42:3e:44:4a:39:1b:52:ed:02:28:72:b4:1b:83:
ba:bc:cb:56:76:b4:68:2b:0a:b6:f8:b0:34:de:fe:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:E5:00:9A:B5:85:2E:6F:E9:64:DB:E4:07:2C:8B:CE:A5:00:B9
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8e:21:21:98:b6:9b:d0:65:f7:a3:0b:a7:b0:ff:41:07:89:
85:72:c0:ca:d8:5c:74:65:bf:16:a6:df:23:4f:be:89:c3:d0:
6c:47:19:4f:ce:b3:83:bb:18:a7:77:36:51:22:4b:64:97:9f:
1a:61:1f:a0:f4:0f:6d:d8:38:0a:2d:b2:de:10:0b:4e:c5:d4:
e1:c9:d7:48:00:19:e0:43:4a:fb:24:b2:0c:15:f8:c5:68:2b:
08:9b:f1:1f:fd:aa:e5:4e:c5:f0:10:a3:c8:dc:3c:a9:19:1c:
29:1b:f8:8b:30:f0:73:fd:d3:09:47:00:c0:80:e1:9e:13:12:
57:86:9f:77:24:cd:ad:7d:36:28:11:1f:76:4c:78:c2:f4:1e:
e5:8b:aa:51:6b:4c:88:33:e4:0f:a0:06:e7:74:54:f6:35:a6:
a3:56:8c:96:a4:3f:6a:80:04:8c:76:15:46:10:50:ea:ac:cf:
bd:4a:8e:12:72:eb:04:98:2f:01:e2:6d:9c:fa:0b:ee:b5:02:
a8:e4:ac:bf:20:30:88:98:b3:d9:83:d2:24:9c:f1:e9:e3:7b:
81:af:e0:4c:b7:77:80:fe:c7:b5:18:fd:d9:aa:f8:3e:4a:b5:
eb:24:41:44:c6:98:f1:4b:f6:41:1e:b2:37:88:7b:bb:34:38:
c1:30:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:46:23 2025 by rpki-client