Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: +4TC6zOsyrYPmldHUT/bSCyhb5CEMe0MXsjhOQnzYO4=
Subject key identifier: CC:8D:E3:43:69:08:89:0F:CB:1D:E0:88:9F:88:46:3A:85:63:AF:5A
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 01958B845DE425C2899AA85FF123FE19F73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 09ED
Signing time: Wed 12 Mar 2025 18:01:02 +0000
Manifest this update: Wed 12 Mar 2025 18:01:02 +0000
Manifest next update: Thu 13 Mar 2025 18:01:02 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: 2Dcw/ZBa5vg8ReCRKicp0G4kqFfKVsKqxwPsvFP6l1A=)
2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:5d:e4:25:c2:89:9a:a8:5f:f1:23:fe:19:f7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Mar 12 18:01:02 2025 GMT
Not After : Mar 13 18:01:02 2025 GMT
Subject: CN=cc8de3436908890fcb1de0889f88463a8563af5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:38:c3:17:39:90:2f:3e:a7:8a:89:8c:9b:
39:23:b4:20:9e:50:a8:2a:74:48:a8:f2:dc:d1:d0:
5e:99:91:b6:10:4a:cd:90:33:c0:e8:cd:e3:2a:18:
ab:8f:a1:22:f6:5d:8f:b5:43:b2:99:0a:ed:92:23:
3d:ab:9c:31:23:0b:83:e8:45:26:44:c8:f5:c4:a3:
38:50:f8:8c:7d:dd:9d:3c:e1:fb:df:a1:f6:f9:73:
01:12:3b:89:13:82:72:75:5b:92:85:32:c7:6b:b9:
ae:0d:1d:7b:71:a4:d0:97:5a:91:30:99:48:26:fe:
62:80:80:38:33:1a:83:ff:0e:d3:cb:7a:cf:e7:60:
75:08:21:1a:48:b4:77:3f:e7:32:35:ce:0a:4d:15:
89:02:7d:44:e8:84:5b:a6:23:8d:95:22:2b:64:c7:
4e:5a:fb:fa:20:9a:96:62:5f:b4:33:a7:c5:4e:82:
2b:14:b6:46:a2:50:60:b6:97:74:fe:76:89:d3:d2:
59:19:e5:34:e7:cd:df:9a:8d:06:c3:3a:95:74:00:
47:fc:9d:5d:56:a6:be:34:1c:fe:d4:80:7e:95:48:
81:dc:89:fe:ac:47:00:e5:49:3d:55:a2:df:7d:64:
09:70:8f:1a:29:13:cc:b9:53:00:e5:2f:b4:14:ec:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:E3:43:69:08:89:0F:CB:1D:E0:88:9F:88:46:3A:85:63:AF:5A
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:77:0f:1f:b3:28:61:d4:8d:36:4f:9b:0a:31:ff:c5:ad:ef:
a9:84:20:b5:98:d7:be:11:ed:94:7f:41:f9:38:c9:cd:34:30:
14:18:17:7e:b5:bd:c6:41:ef:70:00:1f:31:57:22:71:c4:00:
06:31:f1:60:3b:65:4e:bf:19:0f:32:74:29:64:51:78:a3:07:
01:9b:74:74:d2:df:2f:8e:3b:10:2a:75:c1:35:9c:7c:35:e6:
ba:c7:8b:68:32:93:15:9c:9c:07:9a:f3:ca:ca:f4:39:11:19:
55:54:ac:0d:6f:94:6d:17:3e:78:e4:94:5c:3b:1e:ae:5a:96:
ce:bc:a6:00:5b:f9:dc:2a:d8:94:dc:62:2c:2e:f9:f1:62:ed:
63:2e:81:dd:39:25:9c:c0:58:c4:ca:42:ce:50:56:7e:a6:94:
f6:6b:5b:11:b9:4a:61:54:50:96:53:d5:e6:12:09:a8:30:30:
37:03:88:24:09:ee:49:f5:fc:38:52:c7:11:2f:68:1b:14:70:
ee:c0:fa:6a:f7:74:83:c2:d6:46:79:07:11:ac:dd:27:cb:60:
1d:29:23:41:64:fc:d5:ab:39:4b:a3:b0:88:99:ec:93:2c:d2:
33:0f:95:f8:e4:15:e6:36:2c:a1:7c:86:95:e2:49:3b:fc:dd:
71:a0:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:28 2025 by rpki-client