Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: FoIgjgL7BnDXNU7o8gJOZjvqbc9ICg8yp3Ax7AG2XhE=
Subject key identifier: 77:DE:9C:E3:0D:01:3F:19:8D:3F:F9:9E:BF:A1:55:9D:3C:43:A6:2B
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 019655A5DA5FDC4742A3947114593C700C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0683
Signing time: Mon 21 Apr 2025 00:00:54 +0000
Manifest this update: Mon 21 Apr 2025 00:00:54 +0000
Manifest next update: Tue 22 Apr 2025 00:00:54 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: aDUCiM2efi7j/vHj8GFg0Aml/8DqwDnH58RT8o3T+X4=)
2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:da:5f:dc:47:42:a3:94:71:14:59:3c:70:0c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Apr 21 00:00:54 2025 GMT
Not After : Apr 22 00:00:54 2025 GMT
Subject: CN=77de9ce30d013f198d3ff99ebfa1559d3c43a62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:00:3a:ec:df:56:a3:f8:96:de:0b:c8:f7:
d3:32:c5:cc:5e:1a:45:2f:6f:25:a0:7c:ce:d2:1b:
d3:e3:16:5f:b7:5a:04:98:d4:8c:7c:63:6b:8d:0a:
d8:ac:18:f2:2a:30:ee:30:f2:34:d7:90:de:f4:1f:
69:d6:f8:6b:ff:d7:2e:9c:28:c0:d7:66:99:97:07:
5f:62:70:35:81:03:01:e1:6d:56:8e:c0:a4:9c:aa:
c6:3e:64:fe:aa:64:5a:6c:c1:07:e2:e2:33:89:0d:
17:10:00:55:dc:0f:d2:70:97:cc:c6:22:fd:58:1a:
b5:f8:40:0d:2a:f1:86:0d:6f:5a:d8:0d:2f:f2:98:
54:94:11:0a:35:77:8c:72:9a:cd:71:56:f0:5d:79:
a8:66:ac:72:48:59:2b:9d:7e:18:8b:3f:94:35:81:
2a:ba:fe:42:a8:4a:7c:4c:7e:60:f2:76:06:ea:17:
3c:3d:0f:94:01:fd:d5:e8:4d:1e:f7:c7:a9:85:ae:
c4:e8:2e:42:21:a9:d9:85:cf:0b:fb:ed:ca:90:c9:
fc:a6:20:b8:6e:3a:eb:9a:77:37:24:d2:ef:86:cd:
6b:0d:e8:dc:a9:4d:00:35:fa:f7:5d:9d:87:c5:55:
5f:3b:7a:30:03:6f:f3:1e:c7:bb:2b:62:25:01:38:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DE:9C:E3:0D:01:3F:19:8D:3F:F9:9E:BF:A1:55:9D:3C:43:A6:2B
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:90:9f:f5:80:03:37:50:a6:48:f6:66:f4:12:96:1c:94:b7:
88:34:41:0f:1d:77:ac:eb:8a:2e:6e:75:f8:aa:2e:b6:33:cb:
0f:2d:95:4b:0e:64:88:02:fd:78:38:44:a1:9c:3a:fb:b6:e0:
dc:fc:e3:33:6d:3e:36:ff:64:63:37:e0:b1:26:a2:cd:10:66:
f3:5c:98:f5:23:5b:3a:4d:d0:dc:fe:5f:2a:96:67:7c:e0:81:
9e:ef:e0:80:d9:1e:17:32:5e:b2:b9:55:53:37:eb:6f:41:c4:
98:d7:da:dc:73:48:3a:84:71:e0:31:52:b4:89:8c:67:b5:1a:
9c:e3:ac:62:d0:bb:0f:d4:65:9f:94:8f:24:8c:4b:3e:2f:ec:
71:85:39:48:0c:4d:b6:d8:1f:1a:fc:6d:1d:8c:0d:12:f5:5a:
d0:ff:b7:d8:47:b6:3b:a8:f3:3c:a7:8c:ee:47:4d:ad:0e:39:
0f:19:43:eb:a5:9f:bc:6d:e8:14:6b:13:d6:24:b9:16:e0:ec:
96:b5:c8:41:cd:00:c2:b9:e8:ef:23:e4:73:cd:c3:21:7a:64:
af:a7:85:1c:eb:ba:86:42:9e:a3:86:58:01:81:81:fc:ad:f7:
da:5a:fe:92:0e:d9:77:e0:0f:7a:ab:e1:8d:23:0f:34:87:0c:
50:0e:78:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:22:49 2025 by rpki-client