Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
File: 4e2SJYT2My2woOpx4XX2ql6NN54.mft (raw, json)
Hash identifier: gFdlHURsP/yNoWuuSc1oxPOCSfMCo5zl/3DMruuI/pU=
Subject key identifier: 78:52:92:A6:AE:2B:2B:71:CF:CF:11:ED:E5:86:D5:0A:7B:0A:2E:82
Authority key identifier: E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
Certificate issuer: /CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Certificate serial: 019653498971053E455E48E388B86451AD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
Manifest number: 0631
Signing time: Sun 20 Apr 2025 13:00:50 +0000
Manifest this update: Sun 20 Apr 2025 13:00:50 +0000
Manifest next update: Mon 21 Apr 2025 13:00:50 +0000
Files and hashes: 1: 4e2SJYT2My2woOpx4XX2ql6NN54.crl (hash: Zo+m/zUNF8a6DQ5i/FCG1QE11SrYK9mNbu4RKnmzTLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:89:71:05:3e:45:5e:48:e3:88:b8:64:51:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Validity
Not Before: Apr 20 13:00:50 2025 GMT
Not After : Apr 21 13:00:50 2025 GMT
Subject: CN=785292a6ae2b2b71cfcf11ede586d50a7b0a2e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:3b:e2:65:88:58:4a:f6:62:a4:82:6d:f5:
e8:0c:84:85:76:71:e4:97:01:af:6b:bf:e5:a4:85:
a2:88:f3:65:98:e2:2b:99:68:67:df:c7:c5:61:89:
55:85:8c:19:bb:77:34:36:5a:0f:93:50:7e:91:78:
7d:77:1d:3e:60:38:d7:7d:c7:92:5a:87:a7:29:9f:
58:65:e5:18:d3:5d:8b:b8:12:46:8e:36:9c:70:3b:
4f:f5:f5:2f:91:f1:4b:27:8e:22:68:c0:10:bc:01:
73:16:09:a7:02:af:62:10:22:e0:d4:ba:a4:2e:d3:
a1:1a:78:cc:b7:55:34:93:5e:02:0b:3d:50:62:94:
e8:0f:da:0b:76:8f:85:92:3d:c0:10:57:6d:9f:ff:
76:ba:8a:ae:df:8e:8b:6e:fa:6e:49:9b:3a:0b:d3:
5b:fb:dd:60:5a:61:83:03:53:96:51:ad:36:c7:72:
9e:d6:49:6a:6c:00:ed:0c:d7:19:48:67:71:59:7b:
0f:bf:65:91:9f:1d:60:7f:14:3b:63:0f:82:ef:cd:
b3:a5:fc:0e:00:c7:13:24:ed:cb:c6:1f:fa:b5:97:
1e:16:9b:44:4e:69:01:62:62:17:3a:0b:28:19:17:
a1:1a:f5:a8:b7:a5:61:f5:64:33:20:59:76:48:ae:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:52:92:A6:AE:2B:2B:71:CF:CF:11:ED:E5:86:D5:0A:7B:0A:2E:82
X509v3 Authority Key Identifier:
keyid:E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c8:50:ea:33:42:18:94:8c:97:7f:be:d2:3c:6c:22:0e:09:
38:7e:3e:86:38:f3:dd:f5:7f:65:1d:71:59:54:14:72:d8:38:
55:0b:99:97:a6:56:8b:0e:a1:e4:f7:93:2b:3e:2b:21:e6:bf:
87:2e:98:63:17:52:5b:b6:44:8b:96:df:be:9e:e4:4e:43:e4:
19:7f:a0:d7:c7:0b:c0:d4:32:cf:bd:80:41:60:4b:59:f1:42:
40:72:aa:31:d8:a3:3b:20:10:91:f2:4e:cb:40:cc:54:c6:a6:
a8:38:a3:42:06:80:83:16:ba:0b:be:7b:ba:cf:43:76:af:9c:
dd:ec:e4:5a:91:ac:0d:d3:ee:db:2d:95:e1:12:3b:fd:64:65:
cf:d0:38:24:43:80:a7:c8:89:0a:1e:fe:4e:7a:10:07:47:cb:
2b:5d:e7:d3:ff:0c:fd:79:86:83:07:20:5e:ed:f1:c7:3f:8d:
f9:a8:ae:ca:d6:5d:64:cb:6b:eb:08:33:5b:c0:42:64:e6:83:
ce:ff:10:90:fe:ec:c7:38:83:37:9c:cb:37:ff:4b:57:71:c6:
01:bf:fe:db:1e:c7:21:b7:fc:e9:bf:40:c3:51:47:9a:72:df:
50:83:d0:4f:95:59:10:a3:90:a4:e3:d8:6a:82:c3:d2:3b:a8:
8e:02:26:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:13 2025 by rpki-client