Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: lQulIpuWrpT0gh6NkcIRjj6rmfP3F0VFSMRKBo+yx5A=
Subject key identifier: 2B:A4:FC:17:ED:15:74:47:A5:6C:06:12:BF:AD:07:D0:CB:41:4D:56
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019650B644D41662A3F069877FF46B41A994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 04C0
Signing time: Sun 20 Apr 2025 01:00:44 +0000
Manifest this update: Sun 20 Apr 2025 01:00:44 +0000
Manifest next update: Mon 21 Apr 2025 01:00:44 +0000
Files and hashes: 1: Myd15gMrCliz6UcSUIWdQJsW6Z0.roa (hash: KNSAanuPg0NI3AJP/E/C6OAIqMKQEnFg1+ec0Jx1Kuo=)
2: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: zWLmCv2eWoOo7Ygq3UiB3A9FDUaW31d2bR4N+al4F9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:44:d4:16:62:a3:f0:69:87:7f:f4:6b:41:a9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Apr 20 01:00:44 2025 GMT
Not After : Apr 21 01:00:44 2025 GMT
Subject: CN=2ba4fc17ed157447a56c0612bfad07d0cb414d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:7d:1e:a9:6a:be:18:ff:76:77:bb:47:3c:
85:17:26:71:e0:d2:02:e1:1f:d7:11:d2:35:28:b7:
a8:ab:2d:bb:dc:76:a5:b4:3a:bb:2d:6c:23:48:41:
64:94:3d:b2:d8:65:47:d0:6a:36:22:fb:74:c0:a8:
d6:60:7c:cb:82:c9:40:68:46:a0:26:6b:38:8f:e8:
74:fe:1c:d9:f9:9e:fa:02:53:23:f9:e5:ed:81:31:
9d:1b:51:76:3c:e2:02:31:3c:15:09:7e:34:72:3b:
9e:9c:b3:fd:f0:68:4f:2b:46:53:42:0a:de:4d:86:
1c:d0:e6:d7:18:04:00:a9:d8:e7:ca:80:25:ae:bb:
c3:0f:55:ed:30:f4:bd:0a:7e:7e:01:d5:60:20:3d:
c3:d6:3e:01:73:20:f3:76:d1:8f:c8:23:07:ca:cb:
4a:f0:ff:4b:1f:1d:03:2b:b4:d2:09:44:d1:c1:28:
f7:5c:84:10:e8:a1:b5:a0:83:0d:d5:48:b5:a0:1f:
71:37:03:b8:13:0d:c7:dc:2a:af:64:76:a1:a4:e6:
c4:45:4d:27:48:d0:06:c7:78:06:4b:98:ab:2e:85:
06:a1:23:b8:1e:26:0a:9e:12:df:76:1b:c3:27:95:
59:72:51:da:c1:dc:3c:89:e1:bb:e7:e4:8c:b2:e1:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A4:FC:17:ED:15:74:47:A5:6C:06:12:BF:AD:07:D0:CB:41:4D:56
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9f:03:a7:88:8e:43:26:5b:10:e7:c8:1a:5e:83:b6:d7:3c:
fa:9c:5d:35:b6:42:07:11:15:8a:29:84:df:30:be:a0:d3:db:
95:45:df:ab:0b:29:35:29:1d:0f:e8:cb:02:6d:9d:cd:d3:72:
bd:98:57:db:a2:ef:f4:4e:ff:66:48:72:48:93:a1:72:96:a6:
90:06:d8:81:13:fd:5e:9f:7f:22:78:82:35:e0:b2:64:3b:db:
2d:0e:0b:99:f2:1c:f6:11:51:08:db:2e:dd:17:82:12:13:cb:
10:39:2d:2c:4a:d9:f5:55:b0:d5:db:ee:ac:c0:57:57:79:7c:
7f:a9:40:dd:64:77:87:1e:6d:e3:2a:12:3c:56:01:83:e5:0e:
73:f0:54:e0:bc:ef:f5:b6:82:a2:76:70:48:a1:a3:1f:f4:56:
3a:f5:49:da:d4:14:c9:26:c7:80:4a:d5:35:73:f7:03:54:d2:
45:76:ca:d3:ab:d5:ed:e4:80:af:a2:db:08:77:72:95:29:54:
74:7a:e5:5e:3a:8c:98:74:58:ee:6a:8a:b5:ba:74:93:de:41:
5d:95:ee:d2:49:0b:77:c7:d4:1e:d2:d0:3c:8a:5e:e0:e1:e5:
b7:42:64:79:27:08:e7:50:67:b4:ee:8a:3f:40:a5:2a:b6:ce:
7c:3c:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:00:44 2025 by rpki-client