Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: fxPv8kdUzQYCrH4cDvhB0dY6OkkJG8DpcNK8BbhKt/U=
Subject key identifier: A1:29:6B:5F:5D:1A:46:4C:D2:6C:87:EF:73:06:2A:D2:24:FD:6F:96
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 01964FDA1F6B923A671548D276257722DC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0927
Signing time: Sat 19 Apr 2025 21:00:16 +0000
Manifest this update: Sat 19 Apr 2025 21:00:16 +0000
Manifest next update: Sun 20 Apr 2025 21:00:16 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: TX2AyIjBVsKkGaEKMoDxicSMHUCBoo106yAmLF+i6QM=)
2: bp1oEKvy0k4AWur_R9trAhI-EY0.roa (hash: 1L++/xzP2iQbZgWJOfAhv8wOoNcuV9GiE8g7Q92+ZBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:1f:6b:92:3a:67:15:48:d2:76:25:77:22:dc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Apr 19 21:00:16 2025 GMT
Not After : Apr 20 21:00:16 2025 GMT
Subject: CN=a1296b5f5d1a464cd26c87ef73062ad224fd6f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:11:be:fa:39:07:6e:ab:8f:58:b6:c5:85:
8b:30:84:00:cd:3c:d5:33:f6:f9:f4:07:79:80:e6:
e3:5f:2f:e9:99:15:0b:13:93:7d:d8:56:da:b5:be:
17:5b:dd:70:86:c1:fb:09:58:88:42:41:fc:2c:73:
b4:3c:8d:00:26:64:d4:51:89:da:1a:69:30:8f:8c:
85:3a:21:a3:80:07:a9:79:20:be:a6:fb:39:12:4d:
f3:ed:2f:5b:0f:e9:a9:03:ae:55:42:78:82:0c:a4:
cd:64:1f:0a:1c:09:b1:28:e4:fd:8f:a4:c7:b1:6f:
3c:76:47:47:87:ff:19:f7:85:09:c1:da:5f:99:f6:
57:bc:55:31:62:cd:31:9c:75:1c:4d:60:37:8d:e5:
e4:e4:e1:a4:d6:29:bf:33:fa:32:2a:fb:60:94:60:
8c:7e:b2:b0:86:9f:14:d5:2c:25:f1:b2:01:f5:8a:
a6:c5:5f:96:33:42:29:5c:12:43:e5:c0:73:71:f0:
89:c0:75:32:28:a0:b4:2c:eb:55:60:a7:ba:76:d9:
42:2d:fd:8c:c3:e8:7a:90:4a:a9:3f:24:0f:46:e8:
19:78:a8:39:92:b4:e0:e0:76:1c:38:4c:de:b8:52:
3b:f1:db:27:6c:5e:ee:dd:26:01:56:a5:5b:90:90:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:29:6B:5F:5D:1A:46:4C:D2:6C:87:EF:73:06:2A:D2:24:FD:6F:96
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:48:97:da:a2:d7:51:94:10:0d:3e:4b:df:bf:ae:ab:71:39:
94:6b:cb:af:c0:db:b5:d5:31:51:2f:d9:f3:f0:30:19:48:32:
d6:09:17:5f:ff:2b:51:f7:a7:c1:02:2c:74:83:ff:e4:f1:d0:
8a:79:69:82:cd:93:6a:ad:7c:0b:00:c7:4a:96:b4:c3:93:a3:
8c:70:6d:b8:ff:85:e8:2e:a3:58:bf:7c:84:e2:c0:93:93:6e:
94:7c:10:de:79:e4:05:88:6a:3b:df:6f:19:90:68:35:04:aa:
5b:45:cf:b0:c8:cc:64:8e:83:1a:b6:56:e0:f0:14:24:4c:aa:
24:3f:68:6e:5b:83:c3:7e:e6:cf:a8:97:16:5a:a3:0e:a1:2a:
f9:91:5d:48:05:2b:77:5d:fe:61:85:3b:32:aa:86:f5:8a:08:
55:e7:7a:2a:b6:45:67:9c:4b:6c:8d:a0:ad:ed:63:ac:6c:bd:
83:71:44:b2:e2:0a:36:f9:c7:06:2c:b8:a1:83:d4:74:f7:d1:
ba:7b:8d:be:90:1b:35:5d:4b:03:43:b1:af:b7:4f:2f:8b:a7:
d0:00:34:18:6c:48:80:60:7f:61:93:98:c4:33:ef:c8:86:cf:
0c:a7:d5:e9:22:c9:02:49:b3:6f:1c:df:9f:ff:59:5b:58:4a:
1c:00:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:16 2025 by rpki-client