Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: r8bWCkIQAVC6kYEE8cA9lZkRjb8NG0KrURHsbE2f4Fs=
Subject key identifier: A5:C5:D5:57:81:D8:9A:E2:CC:8E:7D:B2:5C:33:6D:0B:B7:03:C8:8A
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 019651920FAF7326EC944190B54078D2439E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 05:00:48 +0000
Manifest this update: Sun 20 Apr 2025 05:00:48 +0000
Manifest next update: Mon 21 Apr 2025 05:00:48 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: Kscd2uoUBgwPFR6FM3A8rn3qfL2IJxzNRntaP2GeBMg=)
2: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (hash: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:92:0f:af:73:26:ec:94:41:90:b5:40:78:d2:43:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Apr 20 05:00:48 2025 GMT
Not After : Apr 21 05:00:48 2025 GMT
Subject: CN=a5c5d55781d89ae2cc8e7db25c336d0bb703c88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:44:96:62:4a:33:8c:78:f7:03:c8:c9:86:
fa:b0:87:3d:51:d2:63:1f:bd:44:e9:e3:c6:e4:bd:
02:c0:18:22:9a:86:e1:f7:1b:e9:02:aa:2e:b3:82:
01:a0:6e:1b:10:7a:20:d1:c1:43:8c:bd:4c:44:d8:
34:06:d6:34:1b:b4:5e:19:73:b4:46:12:f6:af:40:
c2:b0:9b:2f:11:a4:f4:35:2d:84:29:59:19:dd:5f:
9b:8e:65:cc:82:8d:92:ae:2d:ff:e8:ca:8d:ad:22:
bb:68:d4:37:2e:6a:91:d3:7e:aa:94:0f:7b:75:46:
2c:15:5a:49:b4:6e:65:fd:97:56:4b:02:af:57:e5:
f9:79:3f:b0:4d:45:bd:3b:7a:cc:c2:12:93:83:6d:
7e:f4:16:56:9a:60:73:bd:77:01:ae:d7:09:38:6e:
4f:43:f6:35:b6:4b:14:be:24:6a:64:6f:ef:db:46:
fc:28:1d:b6:43:27:94:9b:8f:1d:0f:9d:e9:73:b2:
27:f0:dc:f5:8b:80:3a:c6:4a:23:5d:64:aa:29:5c:
ad:19:b5:68:0a:a5:76:7f:9d:9c:f3:61:de:2d:13:
1d:66:9a:52:1e:77:fd:54:81:1a:7f:23:e1:0b:0a:
19:71:dc:df:a7:22:ee:b6:4f:e5:dc:f0:e0:fd:c4:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C5:D5:57:81:D8:9A:E2:CC:8E:7D:B2:5C:33:6D:0B:B7:03:C8:8A
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:82:b3:24:6a:87:ec:89:ab:8b:02:51:e0:82:53:5f:68:09:
b5:d5:6a:42:18:88:c3:77:aa:c2:ad:83:2f:7d:2a:98:0b:56:
0e:13:89:e7:be:27:ee:6b:0e:be:ae:77:15:cc:b0:ca:b5:f3:
66:06:05:44:4c:26:e5:cc:95:75:05:cf:41:e3:b3:3d:32:72:
c7:d5:8b:96:5b:06:95:e3:74:dc:c0:c1:b8:f8:99:05:2a:f9:
2b:ae:09:12:d5:7d:59:57:73:2c:fa:c8:d3:de:43:e6:2c:3d:
21:ba:4a:b5:47:26:75:1f:5f:30:00:90:5a:83:f3:ed:dc:93:
98:87:42:dd:1f:eb:f5:e1:0e:17:22:12:0b:57:08:96:d7:82:
c2:e0:52:fb:60:71:79:9d:ab:ae:70:cd:c0:77:07:99:0a:82:
0e:5f:8e:00:9b:d6:f2:51:5f:db:1e:cf:05:c0:41:5b:8b:14:
a8:13:92:09:12:c4:47:11:24:d0:e7:72:36:67:ff:ff:43:ec:
01:e0:a8:80:ca:e1:4c:1a:af:be:1c:88:28:0e:3b:46:e8:6b:
b8:6c:6f:ec:aa:88:23:3d:7c:3d:ee:42:95:6d:92:e6:21:70:
86:d5:f9:14:e7:1a:70:b7:a0:ff:e9:39:21:44:13:9b:5c:a0:
d8:ac:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:25 2025 by rpki-client