Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier: duJ4QUC/gfs3Dt30izu2lQCkDnod3Ey3YytsGXcGACg=
Subject key identifier: 07:72:39:A0:C0:56:64:4C:7B:A1:B7:C9:C0:72:DE:53:12:C5:FE:AA
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer: /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial: 0196564A0F58CCE5642687CECF3D4CB30963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number: 017D
Signing time: Mon 21 Apr 2025 03:00:16 +0000
Manifest this update: Mon 21 Apr 2025 03:00:16 +0000
Manifest next update: Tue 22 Apr 2025 03:00:16 +0000
Files and hashes: 1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: 8yQGz3WY26q+d1BBV3EPLZJNY5qRCC2lnnD75lX+3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:0f:58:cc:e5:64:26:87:ce:cf:3d:4c:b3:09:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Validity
Not Before: Apr 21 03:00:16 2025 GMT
Not After : Apr 22 03:00:16 2025 GMT
Subject: CN=077239a0c056644c7ba1b7c9c072de5312c5feaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:4d:72:e3:aa:6a:82:b8:57:d2:e7:a9:11:
43:f2:b8:a9:3e:91:b8:3d:8e:72:12:90:e9:46:13:
40:8f:94:e8:40:bf:a6:0c:a0:38:26:e1:fb:b0:72:
d7:24:71:07:c6:67:35:5c:9a:d6:88:53:d9:88:dd:
05:d6:79:ec:2f:a3:cc:e8:7a:5e:3b:f7:15:6b:82:
f3:f4:79:2a:1d:40:45:67:ab:66:d6:42:ad:b8:cc:
47:da:74:28:f0:ec:08:e4:f9:eb:97:b4:b0:0c:c8:
13:2c:5e:ac:5d:26:20:a0:4e:e1:d7:a5:cb:fe:04:
4f:60:4f:d8:75:76:e3:48:75:e4:64:31:63:68:3c:
c9:fc:89:70:2b:da:a4:95:be:aa:3c:cc:54:9b:5f:
fe:e5:0e:c9:27:0b:4f:8f:8b:95:9a:30:6f:11:86:
67:2a:ff:a0:cd:dd:0d:04:cf:4c:57:5d:e9:b2:fa:
68:8b:5e:b4:e7:78:b3:48:df:69:fd:66:52:d7:6a:
41:b4:e9:a0:22:95:53:c8:94:31:ae:c4:0c:e6:1d:
a9:e3:53:43:6d:ca:8b:8d:25:61:38:06:b8:52:ee:
ea:4a:c5:b6:27:b6:ad:cf:e1:18:1f:75:f2:dd:ae:
9b:ee:5c:76:0d:8a:7b:7f:17:a2:21:fe:82:ea:b3:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:72:39:A0:C0:56:64:4C:7B:A1:B7:C9:C0:72:DE:53:12:C5:FE:AA
X509v3 Authority Key Identifier:
keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:74:21:84:72:be:a3:8e:57:5c:7c:dd:c8:0c:6a:3b:f0:c7:
52:e6:df:64:70:4c:91:62:ee:b6:ba:11:02:54:68:68:a3:77:
1a:2c:6f:4d:10:ea:25:24:8a:6a:c6:4a:c5:79:33:d8:5d:80:
37:9b:87:37:00:6b:d5:5b:67:91:3c:c9:5f:8d:e0:59:62:a3:
39:17:e2:7e:24:71:24:e0:cf:3c:50:9c:95:b4:14:be:58:7a:
d1:79:ed:d9:bf:45:cf:4f:d8:9a:5e:f0:9f:14:5f:72:38:82:
ff:8c:aa:ee:de:98:8e:ea:de:4b:da:31:70:50:7f:81:f5:4e:
c5:94:25:70:49:5f:6a:81:e3:f2:e2:8e:74:2b:d2:c7:aa:0c:
69:46:31:4c:c9:4c:9e:2e:8e:63:94:1c:e9:86:f2:07:60:47:
e2:34:fb:b4:a3:8d:b8:6e:53:65:38:7e:c7:8b:33:2e:70:2f:
05:b1:fb:09:30:2d:b4:b4:8f:79:78:ca:a6:23:fe:37:91:b8:
9e:2d:e6:36:22:90:c0:e5:7f:53:eb:4b:20:55:cf:27:13:7a:
78:07:95:5b:da:78:27:20:15:98:1a:10:61:ca:32:80:37:7f:
74:7c:8b:f6:c1:d0:fd:f6:96:4e:da:47:47:cd:de:cf:33:40:
f4:67:ea:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:14 2025 by rpki-client