Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: YrXQKIqsSp8Bo0Hm/DJfIima913FKwItI5t4geTBa+s=
Subject key identifier: 64:3C:CF:FE:E2:32:F2:F9:C4:E4:B7:37:E8:EC:B6:B2:CD:12:48:15
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 01964D476F1EE358664E0BBB2FDE36C127F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 0560
Signing time: Sat 19 Apr 2025 09:00:49 +0000
Manifest this update: Sat 19 Apr 2025 09:00:49 +0000
Manifest next update: Sun 20 Apr 2025 09:00:49 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: 36jxhK3UpgazzugMVzk5oXTCCVIs+0nDfT+2Lnsx4z4=)
2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:6f:1e:e3:58:66:4e:0b:bb:2f:de:36:c1:27:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Apr 19 09:00:49 2025 GMT
Not After : Apr 20 09:00:49 2025 GMT
Subject: CN=643ccffee232f2f9c4e4b737e8ecb6b2cd124815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:5c:48:e7:07:cf:bc:98:6f:8d:3a:33:bf:
ad:22:f2:f9:dc:8e:e7:e5:70:a0:91:55:15:9c:e0:
69:02:13:a4:9b:27:4a:78:c7:70:8b:7a:69:2c:51:
5e:d1:2b:2b:9c:ef:9d:01:b4:e5:6a:0a:b8:6b:63:
28:68:9a:7d:b9:51:eb:77:1a:75:45:04:6f:c9:2b:
5d:d3:03:c4:21:92:2f:87:fc:91:89:9b:67:20:10:
2c:78:50:86:88:3a:e5:65:fa:1b:48:f7:ca:38:c4:
72:97:32:a5:92:1b:08:ac:b4:54:c6:4d:b3:ff:5d:
78:bf:89:39:f3:c9:ef:f3:88:5e:fa:5c:7a:1b:eb:
9d:f9:f9:6b:87:18:ec:37:fa:32:f3:09:e1:bf:cc:
66:65:b2:c1:8d:27:5d:2f:55:24:12:8e:4e:0c:5c:
82:bc:aa:c2:2b:35:0e:3a:ca:2b:5b:17:6b:c3:2f:
a8:44:fc:ff:41:a0:8e:aa:14:e8:8c:55:90:05:7e:
74:c5:01:ca:1c:43:4c:66:94:9a:e6:c2:b3:8e:3a:
23:a9:69:a7:9f:66:6e:70:39:9f:af:71:ef:31:92:
72:19:14:9e:7d:d6:b5:44:40:6e:a6:e2:89:84:11:
45:18:02:40:d1:db:64:30:ad:b1:b1:db:88:94:09:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:CF:FE:E2:32:F2:F9:C4:E4:B7:37:E8:EC:B6:B2:CD:12:48:15
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1f:9c:5d:2d:4d:7d:56:89:b0:24:fe:4f:1d:54:de:60:bf:
c3:f5:fd:6f:c5:3b:14:7d:68:5f:1f:a8:3f:a2:df:82:0d:e2:
28:24:23:28:ec:56:bc:51:23:84:f1:04:24:77:b0:f6:fc:d9:
99:fb:55:5e:d9:39:b7:65:d1:97:3b:a2:c9:89:99:19:dd:cb:
60:ca:92:96:57:f2:b5:9f:ed:ea:3e:e2:20:15:89:e7:5d:9d:
fb:6c:b4:00:ba:86:80:97:2b:35:23:78:09:61:38:2e:d0:09:
3f:42:45:0d:1e:6e:a5:cb:ed:7e:e6:72:37:3c:d0:79:f9:53:
82:42:cd:45:ea:93:21:ca:a8:bc:d9:19:c3:67:ae:1e:3d:e9:
7b:93:ae:5f:ea:5c:86:9c:31:5b:ca:cf:a8:3f:a1:3a:e3:52:
30:49:7f:fd:c7:34:59:6d:32:a6:ca:99:02:ae:35:11:15:48:
a2:c8:96:4c:a7:58:59:13:65:05:70:ca:14:7c:b9:85:d3:9c:
ec:fd:2d:c2:a6:4b:46:46:1d:fb:b3:56:00:1b:6e:5a:9a:ad:
14:df:bc:e0:62:24:69:d8:a8:e7:cc:ef:51:cd:53:34:ac:dd:
86:c5:94:59:b9:23:46:f9:1d:da:88:36:5e:00:6e:bd:bc:f4:
c6:8d:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:43 2025 by rpki-client