Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: e8ACuvCcqxRV/LzN6HIjMYBCeztljPmt+8IofSBad/o=
Subject key identifier: 9F:04:C1:AC:7F:BB:59:B2:42:C2:4F:86:C4:45:C5:72:B8:9E:13:67
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 01964EFE71BC8746919FD2F24FF7BA6D4DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 45
Signing time: Sat 19 Apr 2025 17:00:20 +0000
Manifest this update: Sat 19 Apr 2025 17:00:20 +0000
Manifest next update: Sun 20 Apr 2025 17:00:20 +0000
Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: m/eAil5Vn0LRgqxZAxUeOali7Anap+q5S0lNhY62JoU=)
2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:71:bc:87:46:91:9f:d2:f2:4f:f7:ba:6d:4d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Apr 19 17:00:20 2025 GMT
Not After : Apr 20 17:00:20 2025 GMT
Subject: CN=9f04c1ac7fbb59b242c24f86c445c572b89e1367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:58:24:0e:96:49:9d:c8:30:67:84:b7:b5:63:
8c:70:15:f0:79:6b:b4:84:b8:49:a3:00:e0:6b:58:
0c:b2:c5:43:3e:43:97:8b:e8:63:ce:a6:30:39:95:
d5:10:de:6f:6f:2d:0b:37:14:4b:77:f2:1a:5f:c2:
7c:fd:04:75:5a:07:2b:9f:50:4f:63:a9:4f:b3:94:
d6:77:b0:20:c2:6f:35:fb:64:a0:0b:20:ac:bb:af:
c7:00:55:95:39:c0:17:96:37:4f:e8:68:fe:fd:11:
83:2c:e8:ed:03:15:d1:78:3d:54:a4:e1:a1:b6:4b:
94:de:01:dd:94:8b:3c:5f:9f:c1:a3:ae:64:78:b5:
22:9c:7f:3e:13:87:c5:ce:37:ef:2b:4c:e6:63:73:
da:c7:98:20:af:ec:19:06:57:fe:60:d8:47:a7:4c:
13:ef:0d:55:de:04:35:05:e3:23:e8:5f:e4:ab:f9:
59:e6:80:06:a4:4d:76:43:c6:a1:a1:cd:08:4b:ff:
1c:ed:f7:58:8c:23:ab:9c:2e:16:c0:a7:39:3f:27:
2b:26:f8:ac:ff:15:36:ee:bd:ed:e4:4d:09:c6:da:
c9:bb:ee:59:0d:31:81:42:a3:42:de:38:7d:6c:ab:
95:32:5d:1e:1c:90:fd:18:c7:60:fb:5d:4d:84:5b:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:C1:AC:7F:BB:59:B2:42:C2:4F:86:C4:45:C5:72:B8:9E:13:67
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5f:33:5e:96:96:e0:9d:95:63:66:60:4d:e3:d4:cf:63:bc:
01:63:24:f1:25:69:6a:fa:ae:53:86:a9:25:a0:5b:7b:9f:a0:
df:02:3e:cd:09:20:a9:92:25:13:be:be:46:a9:ab:ec:70:57:
0f:b8:f4:a5:d6:e1:58:56:b9:07:3a:d5:bb:4b:20:77:ab:7c:
2c:61:e9:d3:47:98:95:78:d7:17:09:73:6b:8b:52:00:60:da:
81:42:a3:41:0d:9d:d9:2a:ee:b7:30:bf:ab:e2:24:1a:b4:11:
1f:04:f4:de:22:dd:be:32:56:a4:88:10:e2:cc:a4:75:01:7e:
85:6f:73:e5:f2:6e:f6:a6:62:40:5c:db:8d:84:64:31:c0:47:
57:64:61:31:ce:39:01:5a:11:ed:e0:af:49:73:96:a8:e5:dc:
40:2c:49:15:27:e6:86:6c:d7:01:02:be:82:3b:c7:66:f3:7d:
76:3b:73:99:29:8f:69:cd:71:fc:b5:9b:df:4d:37:2b:63:ea:
5f:2a:1f:f2:90:98:88:80:52:51:03:1d:8d:1c:27:9e:af:f9:
00:01:87:2d:4f:6a:25:b5:f6:b9:ed:ca:8e:0c:53:b8:9f:bc:
dd:d2:16:01:1d:70:c2:ad:e2:e5:75:9b:b2:69:53:34:a7:3f:
15:d9:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:21 2025 by rpki-client