Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: dGsIJfb4qRUKpoGza/hvle1v7jB39z8ryXHneuYBqiA=
Subject key identifier: DB:A4:DA:0F:2D:BC:1E:BF:1E:1D:CF:A8:9A:B2:A0:20:E6:52:4C:D2
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 01965C8315B88826501EFBA53523C98F4D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: F2
Signing time: Tue 22 Apr 2025 08:00:16 +0000
Manifest this update: Tue 22 Apr 2025 08:00:16 +0000
Manifest next update: Wed 23 Apr 2025 08:00:16 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: xpw20yz+ojJhye8FbNTUMpXCucPlgamKqHsDce9pa4g=)
2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:15:b8:88:26:50:1e:fb:a5:35:23:c9:8f:4d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Apr 22 08:00:16 2025 GMT
Not After : Apr 23 08:00:16 2025 GMT
Subject: CN=dba4da0f2dbc1ebf1e1dcfa89ab2a020e6524cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:34:dd:32:be:6a:a6:5a:f3:10:f4:66:e5:
09:53:91:c2:1e:ef:6b:a9:58:89:48:b1:8c:0b:e6:
91:92:fc:02:73:e7:f1:d8:ab:f8:46:b4:08:15:d4:
9c:08:e9:af:2d:22:36:3b:fb:4e:c9:cb:cd:ff:be:
15:8d:04:cb:a2:b8:66:94:36:06:90:41:2e:25:85:
c9:cf:67:b4:36:d8:a2:0b:fc:d2:e9:dd:5d:f5:7a:
de:07:70:9b:87:88:b7:31:6e:43:e8:3c:ec:45:ef:
9d:a2:c1:5c:33:b0:f4:95:52:bc:1f:ff:8e:34:6c:
5c:19:63:d9:b7:33:f4:b7:6c:bf:66:13:dc:a6:fe:
02:91:46:f5:fb:96:61:15:b2:dc:fc:3e:d3:1c:b0:
b1:7b:65:b0:e3:a7:77:5f:93:c1:ab:f8:b2:ce:17:
94:3f:ae:9c:2a:a1:db:ab:e0:b0:66:7b:4b:2a:b3:
36:0a:12:53:98:0a:68:e3:05:90:c6:34:e0:25:39:
7d:74:24:d4:1d:6f:a5:83:48:99:7d:3a:4d:4d:f1:
3d:b7:d4:fa:4c:b8:10:b6:bc:ae:41:17:02:11:3c:
70:a7:2c:ef:93:68:3b:e1:bd:66:fd:33:2a:6f:f2:
0f:cb:dd:3f:81:d8:79:88:0e:2d:87:7f:8e:5a:d0:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A4:DA:0F:2D:BC:1E:BF:1E:1D:CF:A8:9A:B2:A0:20:E6:52:4C:D2
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d8:4a:74:53:3e:ab:67:aa:af:45:bd:94:5c:0c:4a:f3:0b:
ff:18:56:c4:2a:6f:9c:12:d6:65:15:4b:d0:3d:bf:08:c8:06:
0b:f1:17:96:3f:99:aa:81:e8:32:a9:60:c7:04:c7:15:17:ff:
65:02:b4:f6:56:06:9c:5d:68:af:38:9f:fb:de:68:73:0b:b6:
56:cd:11:c6:ce:ff:61:ae:2c:31:e4:6c:94:66:8b:56:a0:8e:
c3:31:b7:1b:0b:34:c7:81:42:7e:11:a8:e5:7b:ad:f1:7b:c1:
78:0b:69:07:1f:68:e9:87:d3:49:f9:8b:8c:ef:fb:32:b7:ff:
25:a2:54:5c:b0:f5:59:d9:5d:a6:cc:c6:19:13:a2:b2:13:58:
69:0c:2c:ca:9f:46:3e:4d:58:29:b2:70:69:99:b4:80:2d:24:
7c:c4:33:68:c8:75:bc:ad:1b:d6:b1:e3:9e:59:55:69:91:8e:
b9:cd:3f:3c:4f:af:dc:11:27:bb:d2:cc:12:83:91:2b:db:74:
07:0a:4b:75:17:ea:ac:94:41:a8:70:91:59:2e:94:55:b2:27:
0c:d7:70:23:fd:fc:53:74:5d:7b:4b:f8:2d:e2:0e:92:bd:29:
35:e4:e5:9d:43:25:a4:dc:b6:52:21:8d:db:83:4c:eb:3e:cf:
e6:48:32:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:01:41 2025 by rpki-client