Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: PICEGYCjVYJmdjYc8HmMdKnqD0yatxSEDmOpGbpkBMc=
Subject key identifier: 5E:8B:E5:80:4D:5A:EC:66:E6:F9:8B:ED:A5:F1:B7:F7:BE:1E:64:4E
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 01964E90EDB5D05F7E840D6A288633FFF743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 0E23
Signing time: Sat 19 Apr 2025 15:00:42 +0000
Manifest this update: Sat 19 Apr 2025 15:00:42 +0000
Manifest next update: Sun 20 Apr 2025 15:00:42 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: QC3Yv9k9ZC20flMbfUH0nTmyTiYQKB7+UaoGEbFxZ68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:ed:b5:d0:5f:7e:84:0d:6a:28:86:33:ff:f7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Apr 19 15:00:42 2025 GMT
Not After : Apr 20 15:00:42 2025 GMT
Subject: CN=5e8be5804d5aec66e6f98beda5f1b7f7be1e644e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b3:4e:d7:93:8e:81:af:ac:81:fc:69:fc:98:
e7:b0:f2:71:1e:df:61:03:1b:dc:ee:c9:cf:8e:13:
a5:95:ad:3d:d7:7a:44:20:76:dc:a8:42:93:9c:f1:
7e:da:e9:3e:d8:28:f0:bd:de:ca:78:38:a0:90:11:
6b:16:9e:b1:b8:a8:f5:50:73:ad:d4:16:f1:16:06:
5d:4f:de:fd:c8:84:44:06:bc:b3:e0:0a:f3:99:74:
b5:6b:9f:83:a2:79:30:40:37:64:b3:fe:10:77:ca:
06:43:0e:b0:44:fb:b9:a8:cf:7c:d9:62:b2:ae:bd:
90:74:df:80:55:6a:17:22:43:8d:e2:78:9a:62:e3:
51:65:5c:a9:fb:d8:49:13:4e:75:8c:b5:9c:0e:ce:
42:65:b6:50:5c:c7:de:06:b5:37:91:f0:ff:11:d8:
2c:c8:ba:62:d9:68:7b:2a:40:ba:29:07:7a:1a:82:
0c:15:0b:2b:02:8f:af:0b:16:d8:65:07:cd:30:be:
7f:3b:ed:15:dd:ea:8f:08:e9:2d:7e:fa:59:86:cb:
00:45:64:a7:96:a2:d1:15:cf:e7:01:22:25:fa:af:
b3:ae:7b:e6:4e:c0:d1:72:9d:df:af:93:21:cb:71:
e8:b2:34:42:dc:57:60:1a:5b:32:a6:b8:23:95:2f:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8B:E5:80:4D:5A:EC:66:E6:F9:8B:ED:A5:F1:B7:F7:BE:1E:64:4E
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:66:7a:84:b2:61:a3:67:2c:a9:a5:22:55:a8:e0:ec:13:82:
52:11:b6:47:18:7b:63:9c:11:2d:ef:12:b4:d8:f7:71:d3:ce:
d1:87:da:85:69:3e:83:af:c4:96:c8:ab:fc:cc:31:70:9b:11:
9f:15:6e:62:60:0f:05:5b:25:fe:13:50:f9:37:e1:83:49:f9:
ad:48:20:1d:8a:b4:14:49:ce:bb:61:e9:f2:ea:65:77:0f:46:
11:88:12:19:86:0f:f2:f8:66:4d:b9:86:c5:a8:f7:8f:7d:b8:
70:85:03:00:b9:d9:15:81:66:7d:4a:4b:f9:f9:80:c4:5c:8c:
dc:2c:58:6c:ee:56:54:fa:d7:1e:ab:4b:92:d2:e5:43:42:d4:
38:bb:d1:91:99:9a:ed:d8:19:64:3f:cd:9f:b9:0b:87:ed:98:
65:f8:9a:57:71:fe:93:0b:b3:55:cb:3e:c1:68:80:a1:43:59:
4d:d2:05:c1:86:ab:f5:9f:02:c6:d3:af:4b:17:74:d7:ab:73:
ca:34:4f:f2:20:7c:2e:26:9b:ec:1f:bd:dd:75:46:60:41:73:
5e:f7:45:33:8d:86:27:1c:a7:37:43:f7:7a:46:a2:32:fe:66:
e4:8c:59:72:22:2b:07:6c:9e:cd:1d:aa:5e:a8:6e:9b:7e:5a:
af:75:6a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:20 2025 by rpki-client