Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json)
Hash identifier: bqXpv192jTyWJtdgHlgZPwUX8rrgYrfsLw3zxeDHBoU=
Subject key identifier: AB:08:6A:7E:7D:72:DA:8F:02:44:0B:9A:82:EC:4F:18:A2:12:71:B3
Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Certificate serial: 01965B037C451EB1A7F3A5019DCEB683433F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
Manifest number: 05DA
Signing time: Tue 22 Apr 2025 01:01:17 +0000
Manifest this update: Tue 22 Apr 2025 01:01:17 +0000
Manifest next update: Wed 23 Apr 2025 01:01:17 +0000
Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: q/d/J4O7eF5tPdc3tMC6oC1IGXBypEY5z9fZQIm0xVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:7c:45:1e:b1:a7:f3:a5:01:9d:ce:b6:83:43:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Validity
Not Before: Apr 22 01:01:17 2025 GMT
Not After : Apr 23 01:01:17 2025 GMT
Subject: CN=ab086a7e7d72da8f02440b9a82ec4f18a21271b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:0f:6a:60:38:d8:f3:c0:55:b5:9a:93:7b:
f0:9c:c3:ce:88:60:f3:35:53:72:c2:e2:32:f4:c7:
84:37:d2:e4:c8:c9:3f:48:97:9e:4b:7c:0a:b4:57:
bf:85:7a:25:0e:ae:04:3d:b9:ca:77:9f:38:bb:a8:
2a:99:2c:a9:bb:da:a2:6e:a7:f8:f2:1e:2d:42:05:
67:c5:ff:00:7f:41:94:2e:71:c4:9a:1b:29:ce:d3:
d0:ba:c5:77:5e:f4:11:e1:8e:e6:51:d4:7a:95:41:
69:0c:53:b7:ba:ff:6f:d7:3d:b2:f3:ef:8e:da:57:
22:67:99:7c:d3:36:e5:3c:34:89:9b:6e:d0:b5:77:
af:8b:37:7c:0c:ac:51:bf:24:67:eb:57:f0:29:62:
a6:83:10:e1:0c:80:6c:85:13:a6:59:43:22:26:c9:
d1:6f:08:26:31:f2:a8:ac:cd:e2:8e:53:3a:bb:52:
6b:16:ce:0a:c1:26:0b:b4:ea:c6:71:ba:2e:cf:21:
ca:36:ba:aa:70:81:9a:bd:00:1e:a8:78:2b:52:41:
57:9f:3d:26:99:49:c6:3f:e8:11:6b:30:79:f6:00:
43:90:c6:ef:54:b7:90:48:7b:27:1b:f1:37:3d:ff:
2d:03:f5:fc:fc:13:78:d7:17:14:38:51:78:80:4b:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:6A:7E:7D:72:DA:8F:02:44:0B:9A:82:EC:4F:18:A2:12:71:B3
X509v3 Authority Key Identifier:
keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:69:29:18:89:68:cc:e3:1e:0a:02:09:34:d8:9d:b7:a0:db:
8b:f4:83:fe:43:52:c6:b4:8a:bf:db:13:c2:92:26:5e:5f:5d:
3a:b1:60:fd:3c:ed:21:b9:ed:57:28:0d:04:c7:58:a3:8e:e6:
d7:11:d7:23:82:ac:6b:18:b2:3e:f2:88:0d:4f:0f:a3:9e:3d:
09:8f:e2:62:f5:d4:94:b7:57:ab:e9:3f:9b:a6:30:23:49:68:
3b:4d:31:48:bf:a6:27:e7:6e:4e:b1:e9:32:f2:bd:c1:d0:94:
64:de:05:14:ea:0a:2d:38:48:05:53:0c:9c:d3:6f:de:2d:5f:
f4:5e:b0:7e:f1:66:64:a9:3a:ad:05:34:44:75:c5:fc:c9:43:
23:4c:06:2a:00:02:77:b1:d4:05:82:90:ce:1e:19:bd:4e:fb:
dd:b3:8a:d3:f9:13:c1:f6:c9:33:f6:e4:48:03:ac:74:5c:52:
a6:bc:40:a1:07:6a:b9:ab:c4:db:a8:9b:e9:26:1a:91:65:9e:
1d:5d:5b:f8:f4:ab:b6:41:7b:b3:ee:48:f1:7f:ca:05:22:a9:
b1:ce:55:ee:28:d1:1e:5c:4e:02:46:f5:31:61:7d:00:5d:71:
68:c2:d6:48:77:90:6e:2c:6a:c6:69:c8:03:31:a4:98:3b:a2:
16:f7:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:45 2025 by rpki-client