Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: tkiF8dVMBV+nrTQXcK2eCCs82KrtdcbE22z+vLgzb/0=
Subject key identifier: 6E:85:8E:39:3E:47:4D:B4:9E:4E:73:DE:6E:41:6F:69:39:21:5E:1C
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 01963E420256D728948243D8488B2FD4C2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 0767
Signing time: Wed 16 Apr 2025 11:00:35 +0000
Manifest this update: Wed 16 Apr 2025 11:00:35 +0000
Manifest next update: Thu 17 Apr 2025 11:00:35 +0000
Files and hashes: 1: 1ypxGUz02dU-GrVHnawwOGAtbp8.roa (hash: s/FzoESG6FigLmQ9qVLEYvChgXRxC5KQ8IrkGKlYCxY=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: A1IoZScMVxF4f8rzdQCxUd0vhxgp5nabcVcdd9+uWWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:42:02:56:d7:28:94:82:43:d8:48:8b:2f:d4:c2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Apr 16 11:00:35 2025 GMT
Not After : Apr 17 11:00:35 2025 GMT
Subject: CN=6e858e393e474db49e4e73de6e416f6939215e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:b7:e8:88:02:da:56:9e:67:23:bc:87:f1:
e9:d4:c0:8d:0c:ea:e5:91:42:38:8b:16:24:57:0f:
bd:a2:93:ec:95:bb:de:9a:da:b4:4a:2e:61:c1:6c:
4d:c1:22:37:b3:1e:b7:07:18:d9:7c:aa:08:4b:8f:
f5:79:46:54:d4:cd:aa:19:de:4d:74:d6:cb:3e:17:
8c:13:38:fd:01:3f:a5:65:fd:bb:8c:fb:1a:73:96:
ef:bc:83:68:a7:a8:79:21:87:a7:99:1f:a8:60:57:
5a:15:86:ee:8a:bf:14:60:7f:40:82:bd:4a:86:12:
74:66:f3:f8:1a:00:a1:4c:3b:b5:1a:2b:15:a0:d9:
b3:a3:dc:98:a9:d2:03:09:b8:d9:af:f0:2e:8d:a3:
88:89:f4:8b:a5:8c:15:75:45:93:ed:7b:65:8a:b7:
3a:e2:d7:dc:57:38:a6:a0:c3:87:bf:7f:74:07:bc:
61:bf:8c:65:f1:7c:05:b3:94:56:33:fc:d6:88:48:
08:59:80:71:a8:37:89:62:6f:32:49:76:c2:b1:db:
6d:69:5a:ad:0d:12:77:dc:4c:8d:16:2f:e2:cc:3f:
a7:c9:d2:f9:67:10:01:29:09:2d:3a:a4:c4:09:80:
67:a5:d9:19:69:b0:18:10:6c:af:94:4b:ad:0b:1c:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:85:8E:39:3E:47:4D:B4:9E:4E:73:DE:6E:41:6F:69:39:21:5E:1C
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ce:65:7d:b4:85:a4:03:7d:d5:17:43:4a:ca:2a:a0:a2:b3:
e6:94:d5:08:48:e9:58:da:4e:b0:35:d5:24:ce:d6:45:8e:b4:
b2:28:41:a9:22:93:7a:00:df:0c:7b:e7:7c:1f:69:62:ce:e6:
85:69:30:6f:4e:3f:19:bc:4a:c5:d0:09:c1:c4:da:74:ea:be:
65:f6:ad:66:6a:b0:e7:29:1a:4a:28:43:48:e0:3e:63:41:df:
b6:83:6e:c1:b3:7f:09:02:6b:14:ad:70:92:15:ee:34:00:69:
9b:3e:01:9f:62:48:d3:56:0a:af:4d:16:6c:bd:c7:fc:08:de:
7f:e8:5f:1b:2c:6c:96:6f:20:d6:f5:78:d5:a1:ab:63:39:d3:
39:5d:00:d5:75:68:2d:38:14:c1:8e:da:a1:61:ef:b1:9c:ef:
6f:12:2f:64:f8:60:1a:c4:05:45:ba:81:38:70:cc:cb:1d:f7:
7a:41:af:1a:32:0a:69:6f:e1:63:1e:e9:c7:a9:58:32:70:04:
72:b8:dd:17:88:01:88:df:eb:d0:df:a6:e1:75:80:2c:a2:01:
3b:af:b9:eb:e2:fb:52:5f:1f:d7:52:d2:1d:f6:6c:8d:81:cf:
b9:4c:cc:19:f2:b3:09:7a:e2:a8:28:5e:79:4e:7f:4b:43:73:
77:b8:1d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:35:00 2025 by rpki-client