Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: a8f0H9+EImEUBcFvTAEHFRU6V9GsJaI/4RS8I+jtwVQ=
Subject key identifier: 8F:07:61:86:CA:3E:C0:75:7F:43:23:31:C0:7F:0A:21:47:C4:A9:F5
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 0196553777FE89E8861B3FCD7BE903202FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 22:00:20 +0000
Manifest this update: Sun 20 Apr 2025 22:00:20 +0000
Manifest next update: Mon 21 Apr 2025 22:00:20 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: sKAlZIV+BY3QtrUrr7bemrunOKZ+0SLZ7tgAc9BaWFI=)
2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:77:fe:89:e8:86:1b:3f:cd:7b:e9:03:20:2f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Apr 20 22:00:20 2025 GMT
Not After : Apr 21 22:00:20 2025 GMT
Subject: CN=8f076186ca3ec0757f432331c07f0a2147c4a9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:68:27:40:e0:46:0a:69:c9:51:cd:8b:33:
a8:61:cf:b6:7f:3f:33:88:5a:e0:3a:e5:86:09:f3:
19:18:2c:82:47:04:6e:bf:31:1f:e2:c1:29:66:e3:
9a:a4:a1:13:f6:cc:e5:00:60:a0:4d:33:c8:d1:e0:
cb:9f:d2:e4:10:41:af:73:32:23:a3:df:bf:15:d6:
64:1b:0c:cf:a4:bf:49:b0:44:68:22:5c:38:4d:6d:
3b:65:53:2a:65:60:b3:80:e1:1d:8d:24:f7:47:de:
3b:35:f1:9e:44:75:b1:6d:45:2c:76:28:75:3c:11:
75:c7:b9:54:2e:a9:9d:75:6a:ce:54:ef:e1:10:4a:
98:a5:23:21:d7:4a:c2:e6:cb:50:4d:0a:44:9c:9e:
9c:c0:b6:37:d4:e8:c8:3f:3a:cf:5b:d9:51:cc:5e:
3f:c9:24:f2:9f:da:b5:29:6c:59:0e:48:34:67:cd:
4e:df:87:7c:c7:cc:8a:d2:b1:53:bd:92:2a:75:a6:
f7:58:5e:a6:d3:37:8a:73:eb:06:05:36:11:aa:99:
f0:86:59:33:93:8f:e1:5f:ad:80:14:a2:7c:00:78:
79:74:d2:b0:cb:0b:a7:50:9f:fd:e6:a0:d2:a1:79:
0a:17:97:e7:75:f1:4e:86:72:68:47:5c:fc:34:00:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:07:61:86:CA:3E:C0:75:7F:43:23:31:C0:7F:0A:21:47:C4:A9:F5
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:18:47:24:e2:24:4d:e4:77:80:b0:98:b5:ce:ee:d0:5c:98:
7c:42:89:cc:7d:c6:51:92:d2:05:17:a6:31:62:c8:5a:e6:27:
f1:7f:38:52:11:60:2c:6a:a7:d6:de:24:fe:49:e3:8a:02:dd:
e4:95:80:6b:60:0e:7f:27:89:4e:3d:da:e3:17:66:09:33:9e:
ff:e7:f9:18:f3:4d:23:a4:dc:07:fd:43:47:0f:15:e2:20:0c:
7f:0c:54:e4:d8:f0:ab:76:3d:4f:a9:1d:13:cd:fb:14:99:08:
90:c8:fc:ae:f0:e7:70:41:67:f8:93:b5:dc:d0:30:ec:6c:8c:
11:67:90:39:a6:f8:fc:c1:f8:5b:b6:39:93:eb:a0:92:a7:4f:
52:d0:b5:bd:85:53:75:12:c2:8f:ae:df:47:f5:db:26:f4:f5:
44:59:41:ed:f9:b5:48:9b:26:86:c0:e9:a8:c5:ac:54:67:85:
db:f2:c9:7f:3e:19:f7:88:c7:fa:a6:5f:27:75:e5:e8:76:20:
41:62:9c:b0:7a:22:da:56:2e:55:8b:92:07:57:cb:a0:8c:16:
f2:75:a3:4e:4e:65:29:68:a7:dd:96:3d:32:15:9a:78:39:70:
4e:46:50:bf:93:a9:4e:53:af:72:24:4e:2a:92:49:0b:bc:ec:
b0:7a:83:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:05:17 2025 by rpki-client