Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: LRpuoGRpVOOiu5NInHVP2LyUQEI4aL88kdYOH26nzwM=
Subject key identifier: 46:60:63:08:49:23:FF:3E:1D:40:7F:94:A2:16:7E:EB:D9:3E:8F:EE
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 0196564A4D6579BC3B5C20EC3CB589AFF0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0A56
Signing time: Mon 21 Apr 2025 03:00:32 +0000
Manifest this update: Mon 21 Apr 2025 03:00:32 +0000
Manifest next update: Tue 22 Apr 2025 03:00:32 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: bqLcSNtAa6MpJOtG1tZ9jflR/z8oe8hvml1E96E8H+A=)
2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:4d:65:79:bc:3b:5c:20:ec:3c:b5:89:af:f0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Apr 21 03:00:32 2025 GMT
Not After : Apr 22 03:00:32 2025 GMT
Subject: CN=466063084923ff3e1d407f94a2167eebd93e8fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:ec:1f:32:ea:62:70:5c:5c:ab:a1:ae:5a:
50:18:52:f5:78:0a:10:c6:60:1b:87:6c:3f:43:74:
d4:5f:56:2b:d9:6c:73:41:a8:56:72:5f:91:24:c6:
3f:ed:1e:a1:fc:81:51:7d:67:7c:a0:08:67:61:58:
cc:d6:69:14:01:87:ed:42:b8:af:11:c4:6d:34:86:
07:4c:83:59:7e:59:0a:38:42:1d:8f:89:6d:47:40:
5f:5f:d7:f5:61:70:74:fa:e6:4e:37:61:04:f7:35:
47:bf:d3:7d:a0:a5:34:81:8c:d3:31:d0:7a:09:cb:
16:aa:eb:49:b0:29:7b:a9:ec:dc:76:78:06:b2:48:
70:44:01:ca:83:c5:20:ab:69:1e:f1:8d:df:cc:a8:
f1:1c:01:e9:6a:f1:36:c9:1c:8d:f1:7d:6e:30:1c:
4b:fe:04:7e:8e:60:b9:bb:f6:37:7c:aa:e0:4d:07:
ab:2b:7c:d6:5a:cc:0f:fa:2b:c9:fb:77:8e:a3:e3:
67:dd:54:37:e5:53:da:53:e6:1a:36:fa:59:5b:41:
da:d3:dc:b6:4e:09:db:e5:7d:6a:bd:6f:6b:3a:75:
8a:4f:05:81:92:b9:ac:6b:c1:66:bc:2b:0c:f4:52:
3d:a7:6c:d4:e0:95:02:ec:b4:b5:f7:ad:40:3d:f6:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:63:08:49:23:FF:3E:1D:40:7F:94:A2:16:7E:EB:D9:3E:8F:EE
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2b:e0:e0:e5:12:8f:c3:4a:63:85:a2:af:df:ff:af:b9:5f:
fb:bd:c3:ea:e8:33:68:9c:b1:9d:c9:a0:76:66:e2:36:f6:27:
2f:6c:24:fd:f1:5a:6d:35:3d:65:7f:2e:39:82:59:36:57:ea:
f2:04:50:20:79:02:06:a1:01:14:27:08:b6:63:c8:e6:d2:5b:
9b:d4:19:24:42:50:46:71:ec:60:a3:c4:79:8c:be:e6:2e:6d:
8e:d6:51:e0:2d:8b:70:ec:24:51:a7:dd:da:16:5c:11:ab:6f:
54:d4:f4:1f:eb:bb:d8:d2:d5:32:fb:27:cc:86:63:05:96:74:
15:f1:79:ad:d0:7c:24:ff:e1:fd:86:86:8f:3e:19:31:34:a0:
e8:09:7f:17:26:f6:11:e3:44:ed:7f:24:2c:2d:32:19:00:75:
21:92:00:24:e3:63:58:33:16:05:17:6c:19:c6:4a:62:a9:9a:
37:46:f9:6c:f4:ef:fa:04:6d:7d:44:41:1d:66:dd:c8:c8:12:
10:9a:c4:4e:6e:5f:1b:d3:b2:95:8c:48:38:d1:65:32:f4:8d:
03:41:19:c4:16:04:b0:1b:28:a8:e9:bf:f5:5a:f7:d6:78:8b:
5f:6d:75:e0:5e:2f:d8:2c:b4:d4:b4:86:9e:f1:c0:63:6e:2f:
b2:8a:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:30:06 2025 by rpki-client