Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: RmORCHStC5iXRtA+CYSgkH9b+QCBtS8X62Y/it9agRA=
Subject key identifier: 67:85:B9:2B:00:98:C8:72:BD:F9:05:E7:69:06:A6:F9:5B:B2:27:21
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 01965D5F87CDDDCD13243075AED27F1A233A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 12:01:03 +0000
Manifest this update: Tue 22 Apr 2025 12:01:03 +0000
Manifest next update: Wed 23 Apr 2025 12:01:03 +0000
Files and hashes: 1: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (hash: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=)
2: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: K7RK9bU+gdhekldFj17RU89Vzz2DHSoqGT7a9AEuKLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:87:cd:dd:cd:13:24:30:75:ae:d2:7f:1a:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Apr 22 12:01:03 2025 GMT
Not After : Apr 23 12:01:03 2025 GMT
Subject: CN=6785b92b0098c872bdf905e76906a6f95bb22721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:fa:55:b5:ab:82:a8:5b:18:40:aa:9c:54:
56:58:2f:29:c2:99:e5:1f:04:ee:9f:11:d6:72:65:
c5:3b:2f:e9:1f:97:d5:12:54:c3:ce:53:e2:dc:45:
a9:3f:01:41:a1:c8:28:95:7b:e7:0e:61:3d:86:74:
1e:e0:e2:af:3c:75:83:c2:0f:e5:b5:07:d5:95:92:
10:a9:83:6d:82:d7:bf:17:80:80:bb:26:5a:9b:13:
aa:f6:e2:88:0f:af:16:18:a9:67:75:20:aa:e2:26:
5d:57:d0:d4:5a:9e:7f:02:da:80:dd:91:d0:98:5d:
0f:d5:cd:49:e7:fe:a6:4d:0c:75:72:dc:2e:09:f8:
b3:8a:21:bd:aa:c4:83:f8:06:e4:35:b8:e1:65:c6:
bb:34:60:2f:e1:25:19:43:e9:12:29:af:37:94:23:
8c:89:ba:63:46:30:8c:c9:21:cc:4e:e4:e4:c8:12:
59:b0:d1:bb:9d:87:cd:4f:91:b7:f4:5b:08:ed:bd:
50:c7:84:64:b6:14:1b:d1:4a:52:03:a3:9f:72:f5:
02:64:52:73:9b:44:c8:1c:d1:ba:fd:b5:42:b9:40:
8a:63:15:fa:f2:10:7a:60:1f:63:4a:2e:1e:44:f2:
4a:18:0c:85:0d:53:99:cd:65:71:47:01:c5:b0:ce:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:85:B9:2B:00:98:C8:72:BD:F9:05:E7:69:06:A6:F9:5B:B2:27:21
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c1:d9:e1:86:cf:54:d0:1a:71:97:75:1f:33:8e:ba:7c:2f:
44:fa:31:ac:9d:ec:a4:a9:44:73:f6:13:63:a4:2c:10:07:5d:
65:81:e7:78:3a:96:34:48:e7:9d:f3:6b:b8:5b:88:9f:0d:a2:
49:41:2e:0e:7b:24:c9:85:70:9e:7b:26:23:ae:c0:09:00:04:
5e:6f:de:97:de:80:e3:a5:45:42:b1:76:d6:b6:88:f5:89:18:
f3:e0:d2:3f:33:79:12:39:d4:06:75:41:01:28:81:d9:33:0a:
51:8c:d9:1f:9b:73:2e:de:7f:7a:72:3f:88:87:b0:e9:62:67:
3a:50:0c:97:13:52:28:4f:07:19:fa:1f:44:59:7d:45:65:45:
dc:c7:fc:9e:46:2c:00:6a:5b:20:3f:b4:18:e8:88:59:25:06:
14:a7:0a:33:14:d9:5e:67:3a:e9:bb:4d:04:3e:a0:67:bd:e0:
12:47:5a:62:bf:24:8e:96:b2:ab:45:97:52:05:b3:ba:83:44:
52:b6:7d:e1:36:48:87:12:1d:3f:ec:b5:ac:50:57:b1:be:b6:
87:ba:03:15:a2:ea:43:56:85:72:77:ac:28:17:d3:2a:ee:6e:
84:63:6d:bf:c7:5f:b9:f9:a1:15:28:63:a9:a2:f6:76:2f:b2:
5d:f7:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:23:47 2025 by rpki-client