Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: lhY5X7C7F4Aosc8kGoxy/NY0iLZO89Nci+tyH3tb5MA=
Subject key identifier: B5:D1:66:FF:44:2D:94:44:DA:88:29:7B:4C:9F:1F:66:7C:1A:F1:24
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 01964FDA2F1DC39A435A276FDDB23514EECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 1133
Signing time: Sat 19 Apr 2025 21:00:21 +0000
Manifest this update: Sat 19 Apr 2025 21:00:21 +0000
Manifest next update: Sun 20 Apr 2025 21:00:21 +0000
Files and hashes: 1: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: r38py1rMjHOMooN3F6oat2nAlFDfVIzHzaDep/9W+ec=)
2: mOT0OYFh_GTToGk2uZIA05IaKkw.roa (hash: GG4lCtM4E3X4xtxRGjZF0g1O2sssvUKDA/6mYRaIOI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:2f:1d:c3:9a:43:5a:27:6f:dd:b2:35:14:ee:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Apr 19 21:00:21 2025 GMT
Not After : Apr 20 21:00:21 2025 GMT
Subject: CN=b5d166ff442d9444da88297b4c9f1f667c1af124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:89:be:3f:32:81:57:6a:7e:a5:0b:97:d4:
4d:de:20:a6:e0:5b:a9:4d:49:5e:e0:4e:bc:81:16:
70:a9:0e:2b:ae:ab:75:e9:7c:e8:d3:cb:de:54:70:
88:a9:88:70:19:36:61:7f:46:54:01:0e:cf:54:25:
c7:23:55:85:ee:fa:2a:a5:e3:47:ae:5c:a2:20:9a:
d0:27:dc:fa:e5:02:5d:2c:e8:32:2e:30:0e:9c:6f:
ae:1e:30:1a:9f:3b:e6:e5:78:b0:3b:d6:43:0c:7a:
5b:b9:06:5e:56:cb:dd:9d:58:54:a4:72:ba:ff:10:
f3:21:a1:c9:ad:d1:58:04:d6:da:e7:ff:b1:98:da:
49:53:c5:42:2d:67:54:b7:88:bd:16:5f:35:c4:04:
92:9d:bc:18:5b:78:5a:77:33:c3:34:a5:f6:ed:fc:
de:1d:40:ff:da:77:bf:9a:63:1d:3c:59:38:81:f4:
b3:84:09:65:ce:d4:56:e2:bf:7e:6f:fe:aa:50:fb:
7a:3b:f5:e8:f0:b9:7f:ee:4f:4f:02:02:e3:af:23:
e0:7c:d7:fb:70:a3:84:cb:a0:5d:52:67:5a:e9:0e:
e6:f0:54:e7:2b:53:2a:64:0a:59:6a:2c:3d:9b:c8:
c2:33:ab:a5:22:a5:49:13:be:4e:3b:a4:05:b1:0a:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D1:66:FF:44:2D:94:44:DA:88:29:7B:4C:9F:1F:66:7C:1A:F1:24
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a9:eb:07:fc:92:6e:e4:9d:d1:45:50:d1:78:2c:e0:8c:ec:
18:48:d6:e6:3e:b8:2f:0a:5e:a9:f0:04:c1:69:35:11:05:39:
01:b9:3e:54:ac:4c:ca:a3:5d:13:30:99:72:c1:83:18:5d:8d:
8b:72:b5:61:74:20:a9:97:80:83:f7:7d:90:76:98:95:de:8d:
dd:e7:2d:e1:81:53:e3:91:4a:c8:07:61:8b:03:46:3e:8c:8b:
c7:3c:46:56:7d:a6:15:4b:23:43:08:62:0d:26:b0:5d:77:34:
cb:fa:c7:03:85:b8:b9:f1:e6:17:06:40:93:72:09:72:f1:61:
88:d3:11:69:ee:0c:73:0c:68:0a:ec:68:4e:69:35:72:2b:25:
2f:ba:66:21:a5:d2:be:4f:0e:c6:45:0c:67:8b:8c:99:55:a8:
28:85:92:42:7a:1c:35:cd:82:ac:9d:c7:71:98:68:03:fd:57:
92:0c:03:f1:f0:70:95:56:1a:1b:9a:c3:df:61:85:46:e6:55:
bc:74:f4:9f:ad:03:44:35:a2:64:71:f7:db:84:96:20:da:13:
f6:3b:15:42:80:58:f0:32:6a:9d:a5:da:e3:df:6d:63:66:d3:
a6:e8:6e:ff:fe:dd:52:be:92:8c:4d:4e:ed:e8:6e:03:05:43:
6a:66:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:28 2025 by rpki-client