Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier: H2AI9IEPl1nNyXDiH7Jajbz4rKFmXMDIN4aGAkv2eEw=
Subject key identifier: E1:EB:77:1E:75:D9:23:8C:1F:9F:C0:45:38:0F:7A:9A:C7:73:6E:2D
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 0196556EC8BCBDB6CFD3D686EF8FB5B39DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number: 10DC
Signing time: Sun 20 Apr 2025 23:00:45 +0000
Manifest this update: Sun 20 Apr 2025 23:00:45 +0000
Manifest next update: Mon 21 Apr 2025 23:00:45 +0000
Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: JsoJ7qh0yfRU8xS+O5H0TsiGJcf5LFKWMB0GzJmOvOY=)
2: nD4yzDe8gN70BN6Uz9ud-RgMLcw.roa (hash: 7QOqgSW5O1ke2t+FI1SJBMG+D851WexAWFy5Iq9dI8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c8:bc:bd:b6:cf:d3:d6:86:ef:8f:b5:b3:9d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Apr 20 23:00:45 2025 GMT
Not After : Apr 21 23:00:45 2025 GMT
Subject: CN=e1eb771e75d9238c1f9fc045380f7a9ac7736e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:88:9c:7b:b7:1b:35:c6:67:4e:41:8e:9d:
45:d3:48:2f:1e:4a:63:da:89:9e:4e:2d:f2:8f:b1:
6e:25:36:bc:00:02:c9:a1:9d:32:f5:e2:18:7f:27:
e9:62:3b:33:d8:6a:9b:fb:27:06:4b:54:d7:5f:2a:
e5:8a:14:d5:f3:ff:73:67:20:62:f2:02:6a:28:9b:
c9:bb:1c:41:f8:ef:ca:89:02:0f:2a:b7:99:b0:52:
60:c7:64:81:be:bf:b0:01:d1:09:b7:c7:24:cd:79:
ef:b2:d0:21:4d:ea:14:df:03:70:d0:24:c3:0a:76:
a4:c6:c5:47:fd:12:17:76:7d:9f:0c:a6:c6:8e:b5:
ca:4e:9e:5d:71:51:0c:be:44:f8:9d:e4:0e:37:b7:
2b:e7:cc:6c:4c:13:91:ad:8d:dd:6a:10:fb:5a:12:
37:fe:47:ab:bd:6f:fc:4e:29:67:10:67:c7:98:93:
60:34:47:21:a0:98:9f:66:85:7d:38:05:a3:5e:32:
27:13:f9:80:18:80:b2:fc:a8:e7:66:5b:ee:79:15:
29:1c:a2:2d:f8:57:50:2c:15:9e:83:f3:f5:99:7e:
c1:4c:60:10:68:8b:a9:5b:cb:41:aa:3b:3a:88:20:
bb:d9:0d:75:34:21:10:9b:00:74:d8:21:cd:44:2a:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EB:77:1E:75:D9:23:8C:1F:9F:C0:45:38:0F:7A:9A:C7:73:6E:2D
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c6:a6:f3:a3:40:ca:8c:d8:92:4a:33:99:e0:03:56:93:36:
0a:50:73:36:82:2e:54:0e:24:38:8b:c0:85:15:7f:2b:b0:75:
ce:55:98:0e:b0:bc:69:74:8f:a2:ea:ea:78:eb:7d:d4:14:56:
61:25:34:33:64:c6:b0:5d:66:a0:97:97:12:1a:8d:7d:a8:0f:
7b:ef:7a:5a:90:de:19:ce:ba:ed:b0:4f:a5:1d:ad:44:63:d5:
ce:d5:e5:a5:11:d5:a9:a9:7f:bc:44:6d:3d:39:99:3a:bd:62:
be:e2:85:25:b5:99:23:6a:b3:7a:ce:71:1c:03:20:21:d2:e4:
31:80:aa:34:ba:91:04:1c:14:38:e0:c2:a4:54:b5:61:f2:e2:
30:d5:9b:91:31:10:eb:b8:64:b2:1a:ea:40:7b:9c:a1:6d:29:
91:c6:67:4e:cd:b5:74:5b:54:79:ee:75:5d:69:77:39:b6:f0:
b7:67:e6:b3:03:4a:ca:52:aa:ea:2a:f8:32:8e:b9:02:ab:40:
cd:1d:1b:8e:14:ee:12:15:8c:fd:f6:65:f5:7b:26:b1:13:86:
1c:37:0b:c2:45:bd:9f:e3:51:60:23:2c:24:14:6c:b9:45:2a:
4a:b9:bf:77:92:0e:e3:b4:2d:f0:91:e6:e5:e9:7a:d7:4b:c8:
fa:13:67:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:34:59 2025 by rpki-client