Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier: +x8WRj+5Bk0pWWe9l+ydUujiIM5QnHylXG+WNpm1+UA=
Subject key identifier: 06:42:4B:DE:12:B6:F5:59:28:60:BF:E6:E0:50:8A:0C:06:C0:9E:19
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 01965537FAD3B8EA539EC29263FA6E47A7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number: 0D1E
Signing time: Sun 20 Apr 2025 22:00:54 +0000
Manifest this update: Sun 20 Apr 2025 22:00:54 +0000
Manifest next update: Mon 21 Apr 2025 22:00:54 +0000
Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: jYWwpE3Supji0Ef+tkkSQZ+7xIDxDF3SFLz65IOa8n0=)
2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=)
3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:fa:d3:b8:ea:53:9e:c2:92:63:fa:6e:47:a7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Apr 20 22:00:54 2025 GMT
Not After : Apr 21 22:00:54 2025 GMT
Subject: CN=06424bde12b6f5592860bfe6e0508a0c06c09e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:62:2a:4a:45:23:12:e9:66:c9:cb:e9:50:
7d:3b:4d:20:54:57:32:3a:db:f5:12:48:b6:5f:9f:
35:c9:f6:ce:6e:2c:ca:70:d1:da:65:e8:9a:41:67:
ab:83:c4:9f:9d:2b:98:6f:cc:b1:ad:91:d4:d9:ed:
01:91:20:d7:ff:6c:bd:79:ce:4a:c0:68:0d:50:97:
fe:38:09:77:e5:cc:77:c8:fc:5f:1a:b0:c9:f3:e3:
76:59:7d:e5:26:d4:3c:6d:3d:4d:a0:40:92:3d:d8:
61:c8:ac:5c:d6:e3:8f:56:61:3f:da:89:45:08:72:
39:c4:f2:9c:e1:92:8d:2f:33:ad:2c:58:b1:5c:51:
54:c8:5d:c1:a3:51:25:1c:9c:c5:4f:27:f8:0d:b4:
65:36:87:71:3d:98:c9:b7:0f:bb:28:e4:ff:a0:a8:
89:6d:55:35:75:bc:ed:32:93:46:da:93:5f:de:11:
68:f5:c8:37:3e:9e:7a:9b:b7:a3:fc:67:5b:66:a2:
0f:8f:dc:64:a5:5d:1d:00:85:e9:45:88:c0:c9:c7:
24:e0:9d:1d:37:bd:48:07:6c:d3:41:2f:73:07:58:
7a:82:11:12:73:96:28:1d:f1:76:51:b8:f4:dd:34:
18:c2:98:82:81:b5:1f:1f:55:04:3f:31:79:6e:e0:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:42:4B:DE:12:B6:F5:59:28:60:BF:E6:E0:50:8A:0C:06:C0:9E:19
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f6:de:95:ee:74:ac:8b:a2:36:f3:dc:63:92:1f:11:85:a8:
76:a5:aa:26:21:2a:ee:6d:00:8c:1d:38:aa:71:06:46:ac:bf:
d1:f7:2c:86:d8:26:ea:a3:20:8c:02:b2:f5:3d:02:e0:44:61:
62:f2:42:54:1b:eb:63:21:d2:2e:05:93:5e:63:f1:b7:04:ec:
18:31:c1:3a:01:37:ff:23:97:70:e5:29:04:d6:a8:c0:0e:18:
59:8f:eb:d1:64:ee:7f:25:e5:d6:d4:d6:0e:74:d1:5a:89:50:
aa:3c:03:99:29:9a:70:9e:2c:b4:e5:8f:fc:2b:13:d7:f5:2d:
3e:fa:5a:ab:05:10:a4:1a:42:c2:61:3d:c6:16:ba:4c:e5:75:
16:83:28:b7:a3:6c:30:9a:49:ea:55:64:1b:36:2f:63:47:d9:
af:4f:8a:95:53:c7:17:04:c3:93:ea:0a:76:d6:b5:46:45:57:
84:13:9d:72:61:01:50:82:7a:22:ef:0e:c3:6e:a5:f6:c6:2b:
e7:7d:10:9d:40:15:f0:4c:fa:9c:2d:c7:79:10:10:71:0a:a1:
c9:d7:79:95:52:4c:d6:96:68:7f:17:0e:97:f9:6f:2a:9c:9a:
17:6d:87:9f:1f:fe:44:09:9a:91:12:bb:77:c1:a0:90:d7:6f:
ca:ad:ab:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:03:06 2025 by rpki-client