Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: iE8wClSs09G3a01co5z0xcTfPxgZ9tQGxqcIwn3C564=
Subject key identifier: E5:12:53:68:E3:49:42:B6:26:9A:C1:A8:38:83:A8:18:BE:71:ED:D2
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 019649A2243CB4D344214F3E2AD98FF92DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0A09
Signing time: Fri 18 Apr 2025 16:01:24 +0000
Manifest this update: Fri 18 Apr 2025 16:01:24 +0000
Manifest next update: Sat 19 Apr 2025 16:01:24 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: bJq0/mqteuLFDNewmfE1pdxY4F/EuNNdTl9LYZZvEwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:24:3c:b4:d3:44:21:4f:3e:2a:d9:8f:f9:2d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Apr 18 16:01:24 2025 GMT
Not After : Apr 19 16:01:24 2025 GMT
Subject: CN=e5125368e34942b6269ac1a83883a818be71edd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:18:c6:80:ef:eb:f8:34:b5:90:26:4a:93:
cb:55:c8:19:f8:5b:e5:17:75:38:4b:8b:66:89:ba:
4a:22:cf:8f:83:22:ed:3e:80:1d:63:54:56:1d:0f:
13:30:5c:71:47:73:08:b1:6f:73:4b:a6:cd:73:62:
37:f5:79:b5:df:3e:34:86:c0:68:b2:42:09:85:bc:
51:b8:50:83:53:6e:13:b4:26:30:44:36:da:bb:5d:
68:a8:29:1f:2f:aa:f9:06:66:61:c9:d8:05:77:dd:
03:69:20:bb:87:b4:32:c4:84:83:a7:62:a7:8b:2b:
d9:ee:ff:f8:60:4f:06:47:6d:ed:95:08:5e:cb:0f:
b3:8d:bd:44:36:46:91:1b:3b:91:27:b8:b0:5e:61:
da:26:be:8a:bc:c5:ae:b1:8f:b0:65:a4:ad:22:4a:
ec:8b:95:af:44:29:01:8e:cd:40:70:1f:4b:70:20:
58:41:f2:08:61:56:0b:b2:1a:83:a6:6d:6c:0b:06:
04:db:bf:08:ac:0b:1c:f4:83:04:be:a2:c8:77:22:
70:dc:14:12:08:84:b6:bd:16:9c:b7:ee:de:b9:5e:
3f:4a:69:05:2d:18:68:77:d3:22:e0:e6:4b:61:d8:
ef:54:f1:9a:c5:7e:a4:bf:95:9b:81:6e:f2:75:47:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:53:68:E3:49:42:B6:26:9A:C1:A8:38:83:A8:18:BE:71:ED:D2
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:82:12:25:44:7a:e4:f3:c5:3b:69:6e:c8:88:10:9b:2b:85:
bf:1c:70:e8:b2:d0:9a:db:17:cb:bd:53:3d:4e:48:66:eb:05:
7a:ef:02:4e:44:2d:ac:db:c8:e9:34:69:86:16:76:32:12:d0:
df:55:ea:99:fa:20:20:d7:37:f2:61:b3:33:3f:00:45:d1:c6:
fb:ef:48:56:97:33:0a:d3:c7:0b:69:1f:ab:f5:79:45:03:50:
84:0a:78:2b:a9:41:f7:d8:44:09:15:d0:aa:c7:24:d4:40:fb:
19:1a:f2:4b:1e:c0:56:5f:bc:2e:f3:66:2e:01:c1:b9:08:77:
6c:49:a2:92:3b:a3:29:d6:87:f1:c8:14:b5:d7:33:b4:f0:02:
5e:4b:66:8f:f6:a7:32:ac:40:8d:21:f0:25:91:f7:98:71:8c:
aa:fd:b0:9f:8e:96:b9:c8:2a:b0:51:a3:b7:7d:ee:96:a2:0c:
86:a4:ee:41:a2:bc:31:7c:91:c0:73:0e:13:36:83:c5:86:4c:
48:87:1d:63:ac:54:c6:5d:cf:f8:f9:ec:7e:2d:77:e6:97:5b:
bd:c6:cd:8d:24:22:ae:8f:41:8f:67:30:22:77:fb:c9:c6:cd:
b4:43:02:06:ba:07:89:7a:44:9b:bf:af:7c:87:9d:94:f3:8c:
ec:b1:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:16:57 2025 by rpki-client