Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
File: 4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json)
Hash identifier: VJ5sGDo73/AasVmKSXaR6780NEDS+3kvdkt4VZs3ZUg=
Subject key identifier: 28:BF:ED:7E:E4:38:4E:C6:F5:AD:6E:FF:F0:E1:A0:94:68:3C:5A:18
Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
Certificate issuer: /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Certificate serial: 0196A3F7506AD0FE1DA3670DAAA612CDA1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
Manifest number: 021C
Signing time: Tue 06 May 2025 05:00:16 +0000
Manifest this update: Tue 06 May 2025 05:00:16 +0000
Manifest next update: Wed 07 May 2025 05:00:16 +0000
Files and hashes: 1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: skb2aaJpYVig0NEppNwhBKcmiWMyf+o9Go+fCRN+/a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:50:6a:d0:fe:1d:a3:67:0d:aa:a6:12:cd:a1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Validity
Not Before: May 6 05:00:16 2025 GMT
Not After : May 7 05:00:16 2025 GMT
Subject: CN=28bfed7ee4384ec6f5ad6efff0e1a094683c5a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b6:48:29:b9:4d:c0:e2:86:4b:08:e9:b0:95:
28:39:54:e1:2f:0e:10:36:8e:d6:0d:52:e8:ec:3b:
51:85:a3:ac:0d:de:26:ed:50:63:2a:47:f3:15:55:
cf:96:f5:6d:62:16:df:9b:68:01:b1:d6:19:63:02:
74:3c:dd:75:1d:e8:be:06:cd:91:dc:d4:75:81:df:
c4:3e:02:55:a7:6a:e6:ac:63:40:95:a0:cf:7a:82:
1f:47:af:b5:62:a4:03:71:8e:dd:f5:35:16:d9:24:
e4:a0:c2:ea:f8:25:58:02:dd:bd:ea:b2:5b:82:c3:
f4:5c:6a:f7:36:e7:36:96:1d:0c:55:f4:a3:12:d0:
8d:fb:5c:55:10:ef:b5:ce:d8:b7:32:c1:cc:80:1e:
6d:b7:0a:0f:c8:7c:c4:c5:3d:c0:11:59:1b:e9:93:
9f:f5:1c:fd:d9:00:1c:54:cd:91:f4:e0:95:b6:73:
b6:b4:a3:bb:5b:15:4c:09:bd:00:ea:09:da:8d:d5:
a1:c8:47:94:5a:c0:73:38:6b:b3:ef:4f:dd:4e:7d:
71:e6:2d:14:1f:6e:1d:fd:f5:c9:7d:de:49:8c:39:
00:15:41:4a:3e:4f:6d:84:38:21:92:8a:60:63:d1:
dc:4f:e8:56:7b:40:bd:0c:e7:cd:1d:75:70:e2:2d:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BF:ED:7E:E4:38:4E:C6:F5:AD:6E:FF:F0:E1:A0:94:68:3C:5A:18
X509v3 Authority Key Identifier:
keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1d:10:f7:a1:4d:a4:f2:af:94:9c:b0:3c:ed:23:8a:6e:13:
34:c4:94:fe:ca:8d:9b:a1:5f:81:1e:5c:af:39:1a:52:48:da:
ca:09:ce:00:0d:b8:37:74:1f:43:16:4f:c0:90:20:b5:49:9f:
6e:b3:39:81:61:9c:11:70:81:78:bc:b6:99:35:e4:6d:2b:69:
3d:66:58:f0:9d:8e:ed:1a:39:4a:6d:18:77:f9:3a:0c:24:98:
27:d6:33:55:cf:4f:28:69:04:35:cf:1c:55:6f:68:ce:9d:17:
07:3a:64:a5:c1:87:e4:99:c9:84:0b:28:14:68:15:9c:5e:d4:
b2:3d:85:43:4e:62:59:48:58:aa:2b:c9:28:fd:0b:48:38:50:
4a:cd:2b:1a:dc:a8:c5:7d:28:28:8e:b6:39:78:ed:29:49:c3:
af:d1:68:60:7b:c5:a8:1f:c0:b9:2c:a4:a7:6e:80:f5:5a:ea:
ef:cb:82:5e:92:25:43:f4:32:aa:4a:9f:bc:35:94:6d:fe:17:
7e:b8:6b:38:7a:76:91:00:a6:ff:77:61:19:6a:e1:00:1f:9c:
3d:3c:42:43:2a:eb:e4:00:2f:14:10:34:ff:2f:b8:05:bf:38:
2b:72:ed:6f:d8:11:93:f8:75:d1:28:95:92:59:a0:26:c6:a4:
78:96:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:49:48 2025 by rpki-client