Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: T+1Cv+gOzdsQqFeHbyhCNsJPlDhCngJovw3YryFwxnE=
Subject key identifier: 6B:91:58:77:DE:81:87:2F:A8:79:29:7E:0B:96:30:73:0C:17:46:05
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 01965C4C93A19B93081E7D0C8CD86B387759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 013D
Signing time: Tue 22 Apr 2025 07:00:44 +0000
Manifest this update: Tue 22 Apr 2025 07:00:44 +0000
Manifest next update: Wed 23 Apr 2025 07:00:44 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: FRGe4xAfHdGmKAGzXHluq4eLo4do3r5HM0osl3+RHe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:93:a1:9b:93:08:1e:7d:0c:8c:d8:6b:38:77:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Apr 22 07:00:44 2025 GMT
Not After : Apr 23 07:00:44 2025 GMT
Subject: CN=6b915877de81872fa879297e0b9630730c174605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:91:80:b1:ab:7f:b4:dc:88:53:5a:9c:23:
a5:54:e6:45:c1:b2:0a:ec:5a:e1:bc:b1:79:b3:88:
c2:4c:2f:b9:2c:70:59:5d:08:b9:37:87:81:71:50:
6c:2b:b5:bf:f8:04:6f:50:a4:de:45:84:b6:a4:2e:
08:30:86:c4:82:f1:a2:2b:be:52:72:fe:ab:2b:70:
cc:01:6d:7b:d9:06:d2:45:ac:42:97:9f:f1:dc:17:
1e:af:0b:85:2a:43:9e:23:ff:3e:02:32:25:e8:7f:
2b:13:24:ee:b4:68:b3:9b:b5:81:6a:cd:4a:26:16:
ad:82:d5:af:c5:d1:30:d2:3c:11:bf:70:db:dc:8f:
bf:a1:b3:71:0f:83:24:c5:8a:db:d2:a4:03:6e:cd:
8c:53:b5:4e:27:6e:3f:44:cb:c5:7f:2b:ac:66:4d:
58:5e:0f:70:40:5c:27:53:26:0f:6d:37:9c:bc:6c:
90:39:dc:0e:b7:bb:84:14:40:e1:3e:44:34:12:b7:
7d:bf:eb:f4:ad:25:1d:00:38:f4:df:0c:74:81:2e:
89:db:9c:65:b1:a7:08:95:bb:7d:ac:ad:58:7c:ca:
de:16:62:f9:c7:fa:20:56:e9:55:94:df:8a:ef:f8:
58:0c:00:e5:4d:8b:c3:e7:6f:13:81:e6:d9:ac:91:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:58:77:DE:81:87:2F:A8:79:29:7E:0B:96:30:73:0C:17:46:05
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bd:31:da:36:c5:cd:16:2e:cb:a8:a6:3f:7b:16:08:39:42:
fe:e2:a8:5c:a4:a8:90:ec:f0:b1:b5:cd:7a:f1:e9:2c:de:b1:
f8:bd:ae:d9:ff:9b:71:d8:77:d1:62:a1:e3:a1:22:ad:e5:ce:
19:f9:47:4c:84:96:f9:37:bd:6c:23:ce:a4:a9:1c:85:31:ae:
00:88:35:1b:b5:8a:46:a3:f0:50:30:f7:41:73:98:ef:2c:08:
4b:ad:25:01:a3:7a:d3:5a:a9:85:bc:cb:3c:9c:09:0c:bc:2a:
a6:ef:11:f9:f0:18:58:ca:41:44:60:a4:1a:72:12:09:18:a1:
96:07:10:03:5b:b5:71:a7:bf:c0:73:3b:9f:f9:61:ba:3f:1f:
66:73:16:bd:72:be:ab:bf:2e:62:e9:88:e5:75:f2:9a:7c:f5:
ac:58:2b:84:e9:41:e3:c7:d9:09:2e:f8:e2:3e:f1:76:f8:c9:
cc:17:b5:0d:dd:62:8e:a8:c7:e7:9d:91:da:88:d7:d4:ef:ba:
10:96:40:f8:bc:83:5b:e8:73:6f:f4:40:84:21:14:08:d5:f6:
5d:ad:29:f5:44:61:96:d0:ad:20:c9:85:f4:41:bc:99:45:3b:
2e:b7:f2:85:3e:80:86:7e:2e:5b:be:c5:d1:62:2f:67:bd:bb:
4d:5c:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:52 2025 by rpki-client