Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: hnBo8evs9w5WXTvJhCaC9mR4bIPOOFXdKKofkteRC3Y=
Subject key identifier: 85:8E:9E:7D:A1:B4:5D:75:48:A2:1E:20:80:BE:E7:1F:A7:2C:1B:51
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 01963387DC19FDEBB1B389F4839D97A9673B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 0619
Signing time: Mon 14 Apr 2025 09:01:03 +0000
Manifest this update: Mon 14 Apr 2025 09:01:03 +0000
Manifest next update: Tue 15 Apr 2025 09:01:03 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: HOxlMltQqapWrZV+poRHJbZKsvooiqM9W8pwViIB6rg=)
2: Y17oOJ4cy2XAOGSF7cV-mvshqNg.roa (hash: WzuVM00RV4G9sz/56LZ6o+LxunxTuItSjJs5x2gRuZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:87:dc:19:fd:eb:b1:b3:89:f4:83:9d:97:a9:67:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Apr 14 09:01:03 2025 GMT
Not After : Apr 15 09:01:03 2025 GMT
Subject: CN=858e9e7da1b45d7548a21e2080bee71fa72c1b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:bc:27:40:16:49:2b:a1:f2:33:10:95:32:
40:18:aa:cd:f7:95:cd:8b:d5:e4:04:56:c6:49:4a:
5e:58:95:33:9a:e5:fb:07:66:34:7c:c4:d0:77:1c:
79:27:5b:c1:22:53:5e:86:9e:02:50:15:29:f0:eb:
60:c3:10:4b:14:7b:f3:4b:ce:1a:46:d2:71:28:67:
3d:46:f7:c5:f4:b2:f9:26:a0:d1:44:72:89:78:b4:
dc:5d:99:77:84:b2:12:36:16:dc:e3:7b:15:c2:5a:
69:9b:ef:b4:ab:30:4f:d4:84:dc:2a:60:75:83:7b:
a7:9d:bf:5b:4d:99:1a:68:2c:2f:78:0b:dd:2d:f2:
14:f5:66:35:3c:5c:d3:39:27:e1:30:ce:bf:e9:e2:
f3:93:43:42:9e:1c:c5:d1:48:14:2c:15:20:fb:03:
08:cf:aa:3d:5f:1f:d1:37:40:7f:5d:43:d5:10:92:
d3:df:a8:e2:ed:72:8a:b0:ee:74:78:59:0d:08:e0:
12:55:f3:22:e2:61:6f:a2:0d:cf:06:3a:90:56:1a:
9f:57:17:c1:ae:43:20:af:e5:06:33:49:07:da:31:
08:d4:bb:b0:39:de:06:9b:24:2d:98:7e:fc:4a:37:
69:15:2c:58:02:21:1e:7a:ec:44:ba:49:70:f0:3c:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8E:9E:7D:A1:B4:5D:75:48:A2:1E:20:80:BE:E7:1F:A7:2C:1B:51
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:1a:e2:50:20:25:c6:9e:d4:d2:e4:90:39:e2:29:17:ab:93:
46:91:13:1f:a5:9b:2a:a0:dd:54:41:06:9a:c3:7f:24:51:95:
87:ad:1a:c4:9c:ed:bd:23:8a:c0:c8:31:c2:6b:44:80:9f:fe:
29:2e:26:39:89:dc:6c:0c:73:ac:b8:c0:65:9b:1f:91:c0:5d:
54:b7:26:29:ce:6e:65:a4:7c:ce:72:50:73:7f:73:68:da:a6:
79:88:5d:aa:bb:ba:fc:a7:24:15:a6:b2:55:48:8b:d5:0d:c8:
a1:30:ba:0a:26:d2:8c:ed:8c:65:e3:85:c4:95:ee:1d:3f:a9:
1b:cd:a8:3d:2e:72:fd:8e:2a:13:5e:97:c6:ba:1d:4b:b9:e9:
6b:d8:19:99:94:59:76:bd:82:ff:de:f2:99:67:0d:53:29:6d:
89:79:7e:93:b4:cb:71:c2:5a:d9:e9:d7:92:a0:30:9b:f4:cb:
86:c6:41:68:d5:0f:fc:f6:b2:91:56:2b:01:a5:32:00:a5:64:
f9:28:1c:e6:84:69:17:74:ef:16:3f:98:0d:fe:12:58:8f:98:
95:a0:bc:67:ed:7d:e6:49:25:9a:5d:13:54:5d:f4:eb:06:74:
69:67:f9:9a:69:f0:52:5b:e4:32:e1:8d:59:db:92:66:f0:0e:
73:82:47:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:47:58 2025 by rpki-client