Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: Db94huvf/I408ZLep5/A68CuYL1/vdZQml2EioZ0aN8=
Subject key identifier: 6E:69:E2:39:63:3C:19:6E:E1:93:E6:D8:8F:F3:D1:16:8E:40:80:64
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 019644B27C29166DA3DB8DB6B9F05DED4D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 1389
Signing time: Thu 17 Apr 2025 17:01:09 +0000
Manifest this update: Thu 17 Apr 2025 17:01:09 +0000
Manifest next update: Fri 18 Apr 2025 17:01:09 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: VpF93hADux7nJI+oX9/IeazfJSKYd+21nP4tRqD8E3g=)
2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:7c:29:16:6d:a3:db:8d:b6:b9:f0:5d:ed:4d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Apr 17 17:01:09 2025 GMT
Not After : Apr 18 17:01:09 2025 GMT
Subject: CN=6e69e239633c196ee193e6d88ff3d1168e408064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:8a:76:43:7a:2e:12:a8:01:ad:7c:85:e8:
1c:a9:b2:a3:34:9d:91:41:53:f6:50:5e:38:16:d3:
c4:a4:cb:74:1a:dc:19:dd:82:96:7a:31:46:57:6a:
57:5c:50:7a:2e:e6:68:17:45:0b:eb:b6:e6:89:63:
81:13:e4:36:92:80:99:0c:ac:c4:4f:2f:ee:0b:58:
1c:cb:b7:3c:c6:df:18:40:81:9b:f9:7c:cd:25:35:
3a:70:07:22:38:9d:eb:74:8f:b5:00:80:57:82:1a:
45:69:de:e8:eb:55:46:d5:68:1c:7f:86:82:7a:7f:
40:bd:68:6e:7d:1f:3f:06:9b:ed:32:f8:33:e3:46:
2a:e6:a8:28:9b:07:d7:d9:97:4d:08:f3:50:19:ed:
dc:60:07:08:5c:b2:4d:cc:fa:9f:d7:fe:b5:ea:ce:
f1:b9:03:8a:c7:3d:55:59:b2:52:86:ab:71:73:38:
c8:1d:0c:43:18:65:e3:c0:78:80:be:b5:cc:ab:d7:
52:02:72:69:5e:4d:fd:e8:63:2e:fe:cd:16:f1:45:
5c:6e:e5:e0:67:03:7f:82:3f:b6:df:2f:dd:ed:a8:
2e:b0:c6:a8:ba:3f:8f:e2:0e:99:57:96:1b:2e:12:
3f:8b:8e:40:7c:91:be:b6:6c:91:63:ac:de:b4:22:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:69:E2:39:63:3C:19:6E:E1:93:E6:D8:8F:F3:D1:16:8E:40:80:64
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:73:94:ba:90:dd:9d:4f:6e:45:e1:ca:98:c1:d8:8a:4c:6f:
0d:1d:fb:60:53:07:58:fb:f9:5c:44:68:fb:6c:2b:f8:4f:bd:
f4:96:8a:e2:2c:47:90:57:db:c7:58:89:a4:8e:f6:e5:2b:05:
5f:c9:ef:1d:1d:39:f4:66:ac:14:7f:6f:5f:80:46:0e:e3:c4:
48:60:43:e3:f9:8b:61:5c:da:59:db:23:ed:5e:ef:b3:b6:a6:
fb:39:b9:4a:a7:0c:84:f9:8c:bd:a0:1f:04:25:e6:3e:59:1e:
f6:55:e9:0f:f6:d4:96:78:dc:20:f7:f8:78:80:13:8d:cb:69:
99:cd:0d:a0:f4:ee:e2:58:01:92:d4:b3:03:77:95:25:f0:1a:
2f:ea:13:2a:f6:ce:11:c1:12:a5:3f:4e:1c:1e:59:64:59:cb:
39:52:9b:df:13:41:5f:37:24:de:be:bb:18:bb:89:b8:e1:60:
47:33:dd:fd:ec:be:28:95:af:0d:48:81:d2:ab:95:df:51:a4:
2e:44:d2:97:26:dd:58:d6:a1:08:26:75:9a:5b:92:79:40:72:
c3:46:ee:c9:8b:58:43:a1:bc:5b:85:64:b8:97:02:ed:36:6c:
fc:2d:fe:d5:80:86:83:52:fb:99:5b:10:1e:5f:4e:7e:11:f6:
ef:1d:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:23:41 2025 by rpki-client