Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: NUw9f/aUnWTl6KoitmvU4tvIxwm/WV55nOoG1i3+XFs=
Subject key identifier: B2:9B:44:87:CA:9A:26:AC:83:86:92:6F:B5:50:4B:23:D6:2B:CD:66
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 01960A8C23F578104678353A70D17799C226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 04B9
Signing time: Sun 06 Apr 2025 10:01:18 +0000
Manifest this update: Sun 06 Apr 2025 10:01:18 +0000
Manifest next update: Mon 07 Apr 2025 10:01:18 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: 6tTfciS6wKsIo/bMberedFesz0SS/NmNt5xw1PD3tzo=)
2: L4hlYKajNqyPnVVv7AIxEY7dFGs.roa (hash: dC2HFDiddhP1IjnshflG9aATVdgRr01kQzAT+rfJKcU=)
3: Xse_q1SIOApT0uJ4kO_NUiDFU1A.roa (hash: OR/vMeRN3fqz9meXU3XlPM8D3UPTvqtP1NKBnNpirBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:8c:23:f5:78:10:46:78:35:3a:70:d1:77:99:c2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Apr 6 10:01:18 2025 GMT
Not After : Apr 7 10:01:18 2025 GMT
Subject: CN=b29b4487ca9a26ac8386926fb5504b23d62bcd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:b9:da:8a:a7:0d:a7:65:93:af:02:ce:f2:
79:a5:5e:95:ea:9f:79:99:1c:ad:52:d9:25:a0:25:
48:0c:15:75:b3:fb:9a:90:53:35:6e:63:d1:c8:ca:
eb:1a:63:46:41:2f:0b:b3:1a:df:3c:32:34:61:d0:
db:a7:42:f5:47:46:be:80:20:c0:57:87:04:e7:5a:
08:ea:82:86:69:51:bc:b4:8f:ea:89:e6:42:14:a8:
54:06:e3:1a:15:32:7c:a2:40:2b:70:d0:36:33:ac:
7f:b8:7a:1c:17:5e:6c:5a:a6:05:20:7f:63:9d:4e:
76:33:e7:f2:d1:0c:8f:f8:db:09:5f:ea:cc:20:9a:
31:82:e1:8a:dc:22:c2:1b:bd:74:4c:6e:e5:78:b5:
b2:fe:ae:aa:6f:8d:45:ca:00:7c:fb:74:59:60:d4:
80:27:97:83:d4:4d:71:a9:48:e9:2e:20:61:1d:ee:
1c:7a:e8:12:9a:19:22:11:1c:02:d5:f7:f5:8b:36:
03:2a:1a:ba:3f:89:e8:e7:30:cc:06:59:97:6e:c7:
46:9f:42:bd:18:13:5b:ab:6b:4d:85:30:f8:18:1d:
94:37:25:54:2e:bc:b1:14:e0:dc:ba:22:e5:d7:6d:
5a:d3:e2:a8:b9:89:fb:62:5a:08:ee:6a:17:a4:ec:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9B:44:87:CA:9A:26:AC:83:86:92:6F:B5:50:4B:23:D6:2B:CD:66
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b5:86:87:6d:ab:14:08:c7:44:13:92:e2:7a:b7:5b:7a:ee:
ad:a1:74:a5:fa:68:a0:1c:86:f9:a9:7e:54:27:38:bb:7c:f4:
86:5a:b3:ed:7e:6f:68:58:9a:14:85:8d:66:e2:be:29:a0:4a:
b2:68:cf:b8:aa:fe:8c:d8:ad:a7:b4:c2:5c:fa:ce:fa:ed:e4:
bd:c5:cb:b8:c9:91:89:0b:41:ab:d4:30:22:03:1a:e3:a4:78:
43:9f:90:c8:c0:05:a8:d1:4f:40:1f:59:d4:9c:65:6a:a0:f3:
ab:a7:34:6d:2f:93:74:4a:38:59:e5:ca:db:fa:db:42:1a:04:
3a:26:b0:fa:4d:65:d6:20:24:5b:09:44:cf:ea:cc:4a:33:7e:
66:17:d7:e5:a0:18:72:93:a9:3e:9e:5a:a6:3d:4f:e2:78:5e:
9e:ff:6e:0c:eb:e5:73:04:29:0b:0d:d0:18:48:8a:72:7f:8a:
01:d4:56:3b:79:24:7c:8a:1d:9e:7b:ad:41:56:7b:6c:84:e9:
f9:b1:9f:41:22:4f:0e:00:5e:59:9c:7f:37:c8:d0:51:4e:4b:
1d:69:42:9e:d1:c8:c9:a5:ff:82:1e:18:27:71:52:05:b6:0a:
97:fa:55:15:46:7e:57:77:60:76:c3:2d:cc:5a:10:f9:c0:15:
93:65:2a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:32 2025 by rpki-client