Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: DSKydxjxL1RX3Q8YJEnklwWycG3ZYXgC9tNZlCnCv+s=
Subject key identifier: EB:07:ED:70:A0:4A:32:31:43:6E:01:CE:C2:BB:FA:96:B8:0F:04:D3
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019655A5BD13F02AA3FD567F23F7B463405C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 00:00:47 +0000
Manifest this update: Mon 21 Apr 2025 00:00:47 +0000
Manifest next update: Tue 22 Apr 2025 00:00:47 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: 4cs1ZjpAG0rFNXigUFHBzetexVye+7AGSls0SyRpGCQ=)
2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:bd:13:f0:2a:a3:fd:56:7f:23:f7:b4:63:40:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Apr 21 00:00:47 2025 GMT
Not After : Apr 22 00:00:47 2025 GMT
Subject: CN=eb07ed70a04a3231436e01cec2bbfa96b80f04d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:d9:f4:77:47:60:e6:71:75:21:3b:02:91:
02:38:37:db:ee:0a:96:16:e1:ea:3e:4a:7e:dd:e3:
1b:de:18:e6:f4:ae:7e:5f:89:1e:8b:00:f8:17:ba:
83:6d:45:60:83:9a:e9:97:39:36:bd:f3:13:19:fd:
11:d6:87:87:0f:52:c5:d0:3b:3a:e2:27:32:a4:61:
67:1e:d3:1a:6f:6e:8a:3b:63:58:a4:f5:11:f5:38:
d8:cb:15:1e:76:48:0b:03:bf:dd:e6:21:a9:34:5d:
50:b6:a1:06:76:57:4f:3f:77:ce:05:e3:5d:87:1a:
8d:b6:2a:f1:bd:cc:f3:8d:d3:e3:14:53:70:6d:67:
25:ba:4e:17:9b:f6:f5:07:8b:d2:b9:eb:4e:ee:40:
26:4c:1e:8b:f1:f5:dc:a7:94:08:1b:2f:ae:34:96:
49:e0:ef:5a:88:35:92:36:8b:21:50:b2:96:e5:57:
7f:fe:99:06:cc:fa:f8:21:03:3d:8d:a4:c7:f4:dd:
a3:c9:61:ae:19:fe:19:f9:2d:5b:e5:3e:32:38:bc:
8b:dd:ca:f2:25:38:95:86:e1:9e:d7:c9:72:9d:66:
3b:03:ae:e0:31:2d:1f:7b:60:02:62:ab:9a:bb:7c:
0e:ba:a2:3e:fb:5d:ab:9c:3e:a5:18:25:1b:99:68:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:ED:70:A0:4A:32:31:43:6E:01:CE:C2:BB:FA:96:B8:0F:04:D3
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c6:60:15:d1:ae:53:cb:84:a6:0f:a5:9a:f1:bf:ac:d1:1e:
f7:fd:b9:c8:0b:52:54:b0:70:9f:98:c6:46:2b:c9:19:96:ba:
b5:8b:30:9a:cd:71:dc:67:d7:25:86:69:bb:3e:db:79:27:c6:
2d:3d:8f:c3:12:ff:e2:96:f8:3e:6b:ca:ea:55:23:10:e9:40:
15:9d:ff:ad:4d:94:af:71:7d:3b:5c:36:fe:e1:38:54:21:69:
07:21:9a:9e:f8:57:52:a7:f5:0c:81:b0:66:70:14:38:a4:ae:
cc:d3:8f:f7:ff:63:50:04:97:c1:24:0c:3a:dd:70:89:0e:30:
64:7b:a5:e1:69:fe:c7:d6:c4:42:4c:0f:a2:c6:06:db:27:97:
02:1b:e8:9d:1d:34:b9:c0:e3:80:48:c4:24:4a:e2:48:03:7f:
89:95:0b:52:e1:d1:aa:09:a2:cc:9c:9b:2b:39:e7:0e:d2:76:
88:14:fe:a4:52:67:23:77:5f:af:ed:cc:f1:bd:3e:2a:87:dd:
47:a5:06:17:22:f8:5f:3b:fe:11:f0:3d:83:2e:ad:4c:6d:3a:
9d:1e:62:e2:eb:55:d1:c9:4a:ba:3c:2f:9a:af:39:7c:a4:d4:
7c:83:18:70:45:0c:ed:cd:a1:65:33:06:52:97:53:e9:68:01:
e6:f6:6f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:57 2025 by rpki-client