Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: tR4tLoVJaA3J7vm+Rd3U+1zb+btBWlE5b+x47iIdZoU=
Subject key identifier: BF:04:B9:82:55:2A:E6:A9:C8:81:28:FC:42:78:E3:22:12:5F:1A:0A
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 019638772279D30199F3BD3C993D0F564415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 04AA
Signing time: Tue 15 Apr 2025 08:00:53 +0000
Manifest this update: Tue 15 Apr 2025 08:00:53 +0000
Manifest next update: Wed 16 Apr 2025 08:00:53 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: W2hgICNp8UM3ox/yzkgClfiVd1NTCYPCxHUW+uqocQA=)
2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:77:22:79:d3:01:99:f3:bd:3c:99:3d:0f:56:44:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Apr 15 08:00:53 2025 GMT
Not After : Apr 16 08:00:53 2025 GMT
Subject: CN=bf04b982552ae6a9c88128fc4278e322125f1a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:19:a0:bf:a6:a0:1b:f5:dd:0e:65:ac:02:
89:22:0d:44:c7:a5:dd:f8:a9:b7:d2:41:b5:ec:e7:
1d:5a:5c:3b:c2:1c:aa:f5:7c:af:c6:ee:5d:33:1d:
a2:32:49:72:59:0f:5d:06:d7:ba:7d:4c:46:c8:0b:
62:40:f4:90:e6:5c:ff:b7:54:9d:9a:03:89:2d:d9:
e2:f0:ae:43:a9:3e:2a:88:f8:aa:c5:8a:60:52:f2:
87:8f:e5:35:d2:10:f4:e0:d2:3e:56:22:b8:65:e1:
92:e5:5c:0a:31:c0:d6:0e:07:0a:0d:27:01:99:ce:
fb:da:c3:de:1a:ba:69:88:b2:0a:c4:4d:0e:b1:ab:
a4:dd:98:72:7f:25:e5:8a:01:73:e7:17:d4:0f:b6:
a5:0a:91:52:2d:41:62:1e:15:de:6d:a2:8a:cf:67:
12:4b:dc:f2:29:f3:71:9f:b2:83:8c:d7:17:6f:8c:
e2:b1:42:9d:f8:7d:a2:4f:4a:68:30:3c:06:61:a1:
66:a2:2a:9d:b2:95:9e:9c:ed:66:79:ce:ae:28:54:
71:f7:5b:cf:82:22:2b:51:c7:dc:82:c8:e4:a3:04:
37:b4:4e:19:eb:a4:fa:9e:b3:d4:0a:28:db:fe:3c:
a4:2b:a5:f0:5b:e9:48:96:52:ce:5c:45:b0:70:a3:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:04:B9:82:55:2A:E6:A9:C8:81:28:FC:42:78:E3:22:12:5F:1A:0A
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a3:22:da:8b:35:be:7f:ea:fa:c7:bc:52:58:95:c3:c3:30:
6f:a6:ef:07:63:2e:a3:cd:6e:e5:4b:27:61:ab:17:79:ae:83:
4e:05:97:d5:3a:b6:b7:08:ee:fe:56:f0:00:01:2b:c1:d7:1b:
6c:6e:bd:b8:4c:74:4c:ae:2f:cb:80:0e:09:ee:6e:2e:0e:09:
e1:f6:42:b7:d4:f5:5d:bc:2b:31:ee:10:49:46:8b:22:3a:74:
0e:b7:74:a5:e0:eb:e0:9a:3b:bd:d0:d9:db:54:e3:60:0c:d5:
dd:9f:d9:f9:ed:1d:f1:9d:c4:0c:bd:66:89:fb:df:76:8d:7f:
27:e0:04:47:54:67:8d:1e:8a:07:75:4d:e4:25:7e:cf:92:9f:
6d:c2:29:7b:fe:28:f6:e7:8a:10:da:5d:67:b9:c2:1b:8e:5c:
be:75:13:8f:1b:d8:f4:97:81:f7:48:ca:e6:53:06:1e:58:f5:
31:86:a1:55:74:5b:74:57:eb:59:8c:89:e1:c3:02:c7:ee:20:
65:55:6f:f7:9d:25:68:c2:f0:be:25:e9:10:99:50:02:69:a7:
30:59:4c:85:5e:4f:fe:c6:c8:fd:a4:9a:e0:d7:f3:7d:6a:7d:
48:6a:4d:10:ea:52:c2:35:15:af:97:b3:46:6e:81:27:93:93:
8d:93:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:50:17 2025 by rpki-client