Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: h/SisiPd2f0/XxpxeC22ni8zK6GYQhBbm1+l4kd7h6A=
Subject key identifier: 2B:4B:B7:D2:FE:DE:3E:52:12:19:87:12:D4:7C:0F:D9:44:EA:88:1E
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 019655381C1178E214B2D896A6A4B50F1347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 0378
Signing time: Sun 20 Apr 2025 22:01:02 +0000
Manifest this update: Sun 20 Apr 2025 22:01:02 +0000
Manifest next update: Mon 21 Apr 2025 22:01:02 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: NHnJgoGos3TyRMiBJSd9MyCGgq1RTsQBDkH01Mr/qXM=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:1c:11:78:e2:14:b2:d8:96:a6:a4:b5:0f:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Apr 20 22:01:02 2025 GMT
Not After : Apr 21 22:01:02 2025 GMT
Subject: CN=2b4bb7d2fede3e5212198712d47c0fd944ea881e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:a5:8d:08:ba:9e:0e:28:1b:5e:91:64:ff:
db:09:04:cb:0c:18:88:f8:97:21:7a:85:ba:fe:9d:
ce:9d:0f:b7:b5:83:24:51:64:0a:7a:3c:3b:f2:7e:
1a:33:98:fa:5f:2a:e3:47:33:88:e2:ac:5d:8b:7d:
22:e3:84:7e:bd:9f:4e:6b:f1:60:be:9d:d2:1e:2a:
5a:15:05:77:3f:9d:88:70:66:88:d2:d2:11:69:18:
81:6d:2c:86:46:8c:1f:b7:9b:1a:fe:0a:41:d8:ab:
53:26:aa:0c:23:bd:32:41:82:b8:79:24:23:79:96:
73:fe:c4:ac:17:12:9e:ce:d7:86:2e:37:38:45:79:
6c:80:35:00:a0:ac:4f:22:0d:3f:bd:d0:07:6a:b6:
1e:62:a3:51:9f:e6:f9:e9:b3:55:ee:7f:5b:3d:7f:
78:ba:41:52:5e:7a:fc:17:b8:09:75:f1:7d:8a:18:
64:99:b1:9a:60:40:f1:a3:2a:fc:8d:14:b7:bc:f1:
fd:90:d0:cb:94:6a:2f:c2:56:48:05:28:cf:45:06:
32:a7:c7:2d:dd:a4:67:f6:df:61:33:77:20:41:dd:
73:99:9c:d1:69:ff:60:fc:b6:72:d0:87:5d:ca:7b:
46:06:14:7b:28:34:7a:6f:d4:5a:12:e1:ae:a4:f7:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4B:B7:D2:FE:DE:3E:52:12:19:87:12:D4:7C:0F:D9:44:EA:88:1E
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d4:4b:ef:56:04:90:47:9d:1d:3d:5e:5b:8b:9b:96:f2:c8:
fc:12:85:0d:53:36:48:25:be:99:7b:22:e8:04:13:13:50:91:
dd:19:e7:0e:de:4a:35:d3:50:97:21:65:10:b3:88:27:85:6c:
01:7e:9b:d3:30:1a:05:9c:9a:10:9e:18:fb:68:1f:82:c4:60:
5a:9b:ac:1f:33:b9:cc:6b:ce:4f:0f:bd:9b:41:f0:81:8b:fe:
85:99:47:9c:b8:70:f8:3d:40:0b:4d:d7:c5:88:4d:bf:1a:fb:
1c:49:50:ee:1b:db:0a:ea:44:2e:d4:3f:d1:f1:cd:6e:c0:60:
b8:14:c9:33:9d:9c:52:34:1c:b3:a5:97:f5:7d:07:9a:2a:6f:
d8:2d:bc:62:6c:be:96:79:0a:59:03:1f:06:d4:3c:8c:27:f4:
a7:ff:88:41:30:fb:ad:48:40:26:c1:82:71:41:b6:96:8a:83:
f7:77:d6:8d:73:be:47:85:e9:b8:70:ce:4b:ba:80:05:21:c5:
22:5e:c8:e0:d5:2a:eb:df:c4:9b:78:8d:04:81:27:ce:b0:2e:
c8:ce:5f:98:9b:b8:96:e9:46:12:99:43:62:97:7c:85:53:9d:
69:fa:db:58:a0:45:19:66:b6:0f:88:2e:75:51:7f:fc:5d:ef:
3a:03:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:38 2025 by rpki-client