Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: Ms4/h0Uk58ZwSuaZbvAwLdjLWS4EShsps4LaqMTBaVY=
Subject key identifier: A8:E9:F4:15:B5:50:AF:34:51:84:1E:27:72:55:51:D1:22:14:97:85
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 0196556EBCBDE874B8917207A12ACC8E13D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 137E
Signing time: Sun 20 Apr 2025 23:00:42 +0000
Manifest this update: Sun 20 Apr 2025 23:00:42 +0000
Manifest next update: Mon 21 Apr 2025 23:00:42 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: T3FWXL/JcTJTgttVr0UUuNpTHmjV5kx5g+9fsadJRDw=)
2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:bc:bd:e8:74:b8:91:72:07:a1:2a:cc:8e:13:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Apr 20 23:00:42 2025 GMT
Not After : Apr 21 23:00:42 2025 GMT
Subject: CN=a8e9f415b550af3451841e27725551d122149785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:c0:2d:a6:f8:7f:0b:d9:bd:88:48:f2:47:
09:8b:7c:cc:84:8f:60:6f:c4:6f:47:66:f0:a1:57:
4d:34:44:e8:a9:34:5c:65:2f:3b:47:cc:ac:71:55:
8a:b8:fc:63:75:fe:29:5c:54:b5:7e:27:9b:54:b4:
bf:5e:51:6d:ee:1e:ef:0c:47:cc:2e:f1:56:42:da:
24:e1:5c:95:04:4e:4a:75:da:94:f3:05:6b:2f:4c:
b8:60:5c:48:68:cb:8d:98:8c:96:c2:60:a6:fa:69:
70:2c:a9:08:58:d7:29:7c:17:26:71:a8:85:72:e7:
8a:64:7b:af:34:2f:ce:22:34:18:d2:81:b0:7a:65:
44:4a:ad:4f:bb:cd:ec:06:79:9c:9b:6a:ea:78:11:
d8:44:c9:70:5c:83:68:e1:85:25:89:e2:2c:cb:06:
b8:c6:95:7b:6d:b5:ec:c2:70:7d:de:f2:fa:d5:84:
96:ea:fb:25:9f:95:89:a7:99:1b:59:29:ff:44:e4:
24:67:b3:a9:7b:9e:cf:38:df:8b:92:2f:5f:b4:1b:
05:6f:e4:ab:06:f1:2f:b8:ae:62:76:d0:bf:d6:c2:
19:51:11:0f:0b:cc:c9:f4:bc:38:89:67:1f:c5:66:
ae:eb:bf:5e:38:e6:71:52:b8:b9:89:85:23:2b:6c:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E9:F4:15:B5:50:AF:34:51:84:1E:27:72:55:51:D1:22:14:97:85
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c0:05:81:d5:16:58:14:5c:97:c5:0f:a9:57:38:ab:67:f0:
4b:c6:a7:2d:d1:de:4d:6b:75:5e:15:18:c5:52:96:0d:b4:00:
03:bb:fc:26:72:bb:6d:f0:0b:5b:bc:e0:39:0a:ba:13:b9:bf:
ac:d8:1b:6d:7f:f5:2c:60:ef:99:2b:0a:45:f1:a0:84:6c:4a:
ef:0a:0c:a2:70:ec:f5:bd:de:9a:e7:79:63:6a:e2:bf:cb:f9:
8e:ca:68:0f:e7:59:f2:35:fc:22:0a:63:5a:aa:5f:2d:54:7f:
19:e9:5b:43:e2:67:33:8b:2e:cf:e9:d8:65:b5:2a:a3:c2:81:
46:d4:f0:a3:d6:04:98:83:f5:2e:8e:b9:f2:db:3e:00:a0:6f:
5d:08:9f:7c:05:1a:1c:75:4a:3b:4a:7e:26:94:9c:7a:0c:be:
ee:b9:9d:b5:7d:df:b0:b1:65:56:7f:79:e0:3b:e2:b7:a9:2b:
d4:7c:cf:db:90:91:a6:b1:14:2b:f8:d7:05:40:b3:b0:ca:59:
fb:95:a1:25:88:ca:7d:ed:c5:e4:34:6d:99:39:3f:cc:8f:5b:
f2:7c:d2:35:40:b0:ea:84:6d:d2:2f:af:a9:b4:50:cb:e3:e5:
49:7b:b0:6a:7e:35:af:e1:83:ba:b2:5a:fe:7a:19:a6:69:8c:
aa:c8:ac:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:49:05 2025 by rpki-client