Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: UsY0m0JU1vu2t2N8d8Rcfz82MFxsUTnGxm82vdOtCfI=
Subject key identifier: 03:18:A0:FC:08:18:B6:E0:F2:F8:6C:3D:95:4F:A5:27:92:88:DB:D0
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 019657CB416C76B2B4C22A7C0410957B1F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 029F
Signing time: Mon 21 Apr 2025 10:01:00 +0000
Manifest this update: Mon 21 Apr 2025 10:01:00 +0000
Manifest next update: Tue 22 Apr 2025 10:01:00 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: yNtQ2F9IpK/Y3jxZFFE0kT7e5aAfVXQDsYILn/c8WI0=)
2: 8a9J3an90z8mWS8TkwqA1Af6V60.roa (hash: Sfg4OixpuznuGw9qd09AY2Lx61QBeTwn9kYrisQDEss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:41:6c:76:b2:b4:c2:2a:7c:04:10:95:7b:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Apr 21 10:01:00 2025 GMT
Not After : Apr 22 10:01:00 2025 GMT
Subject: CN=0318a0fc0818b6e0f2f86c3d954fa5279288dbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:5f:09:37:6c:c5:62:4d:df:63:04:c5:ae:
04:4d:c6:6b:16:57:e1:97:85:fd:7e:24:51:76:84:
9d:91:87:a8:3f:19:ed:5e:2d:2f:6d:05:f1:1d:3e:
7f:a5:e8:7a:50:e7:07:f1:3b:55:41:a3:55:28:f0:
48:78:f0:77:bb:3a:19:a4:44:1f:1c:6f:d4:96:8c:
d7:76:96:f2:b2:d6:0e:7d:53:01:43:67:f0:00:61:
f1:72:73:1c:1c:d5:77:fc:33:5a:f8:61:91:50:f2:
1a:f7:a7:d0:30:29:63:9c:cb:dd:3b:5e:8d:d1:b2:
73:d4:b2:92:48:8d:18:63:9f:3a:47:1e:01:82:07:
45:56:cb:c3:26:41:0f:c5:75:9f:12:fb:be:18:48:
00:22:f1:12:62:65:ef:a8:c7:3d:77:10:e8:3b:3a:
f0:d6:31:47:25:11:18:7e:74:a3:df:43:da:04:fb:
16:b6:97:c1:92:b5:92:8c:c6:44:c2:41:34:78:09:
d6:0e:c5:54:2f:64:8f:58:48:2d:d6:65:e9:ad:09:
a4:5f:b9:48:10:57:83:e1:19:86:cb:03:1c:fd:40:
da:a7:cc:54:4a:b2:c0:2b:96:46:72:5a:2e:54:a7:
c4:20:50:63:51:6f:a7:74:90:8e:8d:98:2b:43:0a:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:18:A0:FC:08:18:B6:E0:F2:F8:6C:3D:95:4F:A5:27:92:88:DB:D0
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9c:16:5a:c1:38:18:73:08:ee:b5:53:ce:3e:b7:86:45:9e:
3c:de:cd:f6:b6:09:0b:f4:96:56:d7:ae:a6:ed:7b:8a:bd:56:
27:f7:be:18:60:3a:ac:eb:37:30:8f:0d:2f:30:ca:ad:74:f6:
fe:c5:cc:e6:3f:96:81:0b:5c:7c:85:99:2b:c7:c3:37:c3:64:
95:30:a8:f4:e0:b7:16:4f:33:bb:f9:35:45:6f:41:3c:fd:01:
88:cb:d8:c9:62:ef:99:75:b7:36:58:f4:8f:fb:2f:cb:25:0b:
6b:b0:b7:61:54:13:54:28:ee:ea:ea:96:82:d8:cc:5c:39:fd:
34:7b:ca:eb:76:77:53:bb:7c:a1:7a:0c:83:95:b6:7e:a1:3e:
d7:35:a4:a3:51:71:50:36:22:c7:28:e2:7f:21:ac:bc:2d:47:
10:66:d3:79:f6:b0:46:8b:31:3d:d9:a6:13:f1:17:e3:6f:ca:
0c:ea:10:73:3a:99:7b:02:a5:9e:22:84:40:c4:8a:59:1a:f7:
1f:69:2c:c6:f9:c0:69:92:5b:9e:31:37:1f:5e:55:78:22:e0:
d8:24:fe:85:4f:37:86:1a:ac:2a:91:c0:5e:95:41:f6:85:93:
8d:a2:2d:8a:4b:6b:ed:a5:ee:9d:f5:47:09:d2:07:f4:9d:0c:
5b:e8:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:04 2025 by rpki-client