Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: l2oWVtuhHYluVpDCGMVQc6whL90ByZt3fO4RxVcQ040=
Subject key identifier: 9B:CC:8C:FA:93:09:D4:75:60:CC:CB:2D:45:B6:A2:92:C5:4F:30:81
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 01965C4CBED4B318CEB3AD4346C7FE2DE4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0593
Signing time: Tue 22 Apr 2025 07:00:55 +0000
Manifest this update: Tue 22 Apr 2025 07:00:55 +0000
Manifest next update: Wed 23 Apr 2025 07:00:55 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: FggyWmEq5406WD5sZ7OwDu/1XoI2OezjKy5yEYDFYhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:be:d4:b3:18:ce:b3:ad:43:46:c7:fe:2d:e4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Apr 22 07:00:55 2025 GMT
Not After : Apr 23 07:00:55 2025 GMT
Subject: CN=9bcc8cfa9309d47560cccb2d45b6a292c54f3081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:42:fa:26:e9:5a:01:79:e8:a8:5e:c7:1a:
c4:8c:8d:cf:e8:ca:92:a1:6d:38:9b:a6:c0:3c:df:
ab:14:2d:25:46:a1:0b:46:b7:26:f5:8b:02:ca:55:
d2:89:a5:04:43:0b:51:c6:fa:a4:bd:16:73:4f:4d:
e7:18:8c:55:6e:b1:97:2d:23:26:88:55:88:a0:16:
ab:ff:37:39:eb:3e:aa:b3:d6:f4:a6:6f:f7:c2:9b:
2f:94:c1:7a:94:55:a6:48:c9:f0:5c:73:01:87:1e:
33:b1:62:98:44:2c:13:84:b6:94:1d:12:8e:c2:7b:
65:3b:1f:b3:8e:96:37:53:05:55:13:ee:e2:30:3e:
14:19:81:69:42:1a:5a:8c:c0:b4:c1:41:2e:14:57:
12:57:4e:db:10:b4:8f:b3:bd:1a:fe:e9:c3:d2:29:
61:3d:bd:a4:c0:69:c3:8f:c8:77:a2:0d:95:b3:44:
0b:7d:f9:d6:08:5d:57:fd:92:61:19:25:9b:2d:64:
e8:a7:a3:70:07:be:6e:d2:9a:9d:34:06:3a:a4:32:
0b:17:c1:e8:b2:ae:00:58:f7:a4:da:33:25:c3:37:
5a:75:27:fc:4b:cc:c5:cd:42:26:b2:b4:54:8b:c7:
8b:a4:88:73:5b:37:a7:eb:30:86:48:af:de:f2:1a:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:8C:FA:93:09:D4:75:60:CC:CB:2D:45:B6:A2:92:C5:4F:30:81
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2b:f1:58:7e:d4:f7:69:ac:86:71:cc:01:11:63:bd:1b:98:
a4:c3:4c:09:3d:39:03:8e:22:2d:1c:07:3f:f7:45:05:c7:bd:
cf:b6:f3:04:4d:1f:0e:99:6a:ea:e2:d5:fb:25:ef:28:13:a6:
a4:e3:09:6f:d1:8b:04:bf:b9:e3:d9:5e:4d:20:e6:12:f6:08:
26:4b:4b:6b:56:8e:58:2c:cc:92:93:93:9c:23:3c:a7:31:c4:
19:4c:f6:0a:dd:83:69:58:84:a7:c0:66:7b:59:96:ba:3f:38:
b2:e4:f8:22:70:19:71:86:17:42:ba:b9:b5:2d:b9:4b:83:4f:
fb:1b:db:8d:c6:e3:38:d8:ef:28:fd:b4:49:96:86:86:6a:1b:
35:f2:04:c3:cb:b5:ce:7b:d7:43:33:d3:71:0c:66:bd:c3:e1:
e2:41:a8:0b:f8:81:c7:5c:21:b4:a6:86:5b:11:cf:9d:79:5d:
05:9f:bb:93:41:71:4a:3b:76:80:b7:c8:20:5a:8f:c2:e4:af:
7f:37:35:f1:27:2a:67:22:08:26:cb:df:e0:c3:eb:dd:c7:fc:
ed:e2:d7:66:f7:db:f2:4e:cd:ec:77:84:d1:f2:ea:6e:8d:a3:
18:a8:fd:c1:64:1f:08:35:46:71:36:96:74:0d:44:38:94:83:
fa:a7:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:34:53 2025 by rpki-client