Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: l/joli2bYBPZY6FnoEsEcPADrfKhyTnbggKzPFR3CrU=
Subject key identifier: 6A:5B:A3:04:08:1D:B8:57:CE:7B:F6:A8:A4:D7:61:E8:7E:E0:0B:FA
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019610C50A871ABFD010515A2BEB39554405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 0ECA
Signing time: Mon 07 Apr 2025 15:01:10 +0000
Manifest this update: Mon 07 Apr 2025 15:01:10 +0000
Manifest next update: Tue 08 Apr 2025 15:01:10 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: 1N5gjzDHR/AVWk6ME1TZBk7cnCIIIJNgOAHKtHhY7DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:c5:0a:87:1a:bf:d0:10:51:5a:2b:eb:39:55:44:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Apr 7 15:01:10 2025 GMT
Not After : Apr 8 15:01:10 2025 GMT
Subject: CN=6a5ba304081db857ce7bf6a8a4d761e87ee00bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:41:72:90:a7:5d:0d:04:5c:2a:f5:d6:a4:
7d:83:fc:31:28:e2:a3:7c:eb:dc:fd:b6:19:b3:f2:
91:eb:0e:7b:01:c4:8f:6e:c5:c3:0f:b4:94:51:50:
57:72:af:36:62:9e:cf:6d:09:77:a2:a0:96:f5:62:
a6:37:f6:1d:07:dc:60:44:66:ef:07:cf:49:7a:bb:
17:87:f2:8a:61:cf:50:e9:0a:7e:02:9e:be:32:b1:
ea:95:f1:1f:1e:e9:a6:0b:37:d8:a1:a4:05:a0:ea:
c9:92:cb:55:c0:26:84:1e:6d:5d:46:5d:00:bd:0a:
6f:7c:74:92:32:66:8c:0f:9b:81:17:e5:92:4e:63:
10:51:47:0a:4c:80:58:22:48:5b:4e:c6:38:02:3f:
88:9c:24:e3:49:61:34:23:b8:cc:fa:a9:a4:60:26:
0f:1b:8d:57:97:02:2e:23:d9:49:86:ba:33:57:15:
0a:8b:51:ac:79:94:2e:78:8d:79:88:cc:43:c5:56:
f3:96:73:c9:9a:b4:18:25:ab:24:4d:b6:8a:74:a9:
c1:ca:35:9e:53:55:c4:7e:84:3d:59:6d:e2:80:74:
ae:ff:42:ef:92:73:20:7a:2f:f3:c4:58:fc:5d:87:
5d:05:01:63:0d:c3:e2:c4:8a:c5:dd:30:4c:24:f8:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:A3:04:08:1D:B8:57:CE:7B:F6:A8:A4:D7:61:E8:7E:E0:0B:FA
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b6:5d:1e:04:91:76:f7:87:60:a1:92:a4:b2:79:c0:6f:fc:
31:2f:4c:e8:b4:10:c8:0b:1c:d4:c9:ca:58:7f:99:e4:25:af:
32:0f:8f:bf:18:ec:f7:0f:06:aa:69:a9:d1:38:da:d1:b8:09:
25:02:fc:b1:68:d3:17:96:bd:5d:60:98:fc:70:0e:c1:e5:04:
bd:96:56:05:40:55:50:70:f3:73:18:49:cd:a1:e0:83:f4:68:
d2:47:fd:a3:13:5e:34:a9:37:ae:93:c9:46:2a:ba:19:fb:8b:
fb:f1:62:20:d9:bc:a5:4c:7a:0f:56:f5:ec:9f:dc:21:3e:0c:
e2:6b:bd:f4:a3:82:3c:9c:0b:dd:06:27:cb:36:a6:e2:a0:2a:
19:5b:82:e4:7d:29:88:b8:be:7e:ac:29:49:ad:b5:fd:db:a3:
97:9f:f4:04:31:b1:ff:cf:4a:ae:5d:c7:18:78:34:12:09:73:
38:0e:89:cd:b5:e9:ec:79:0d:09:74:6a:64:16:9a:73:7a:50:
b9:cf:71:11:38:0e:35:ee:4c:06:19:90:6d:d6:cc:b3:4e:38:
3d:a0:c4:98:8d:bf:f3:b0:ae:38:2b:a6:50:9d:d8:1f:e7:6b:
68:82:79:84:fd:9a:09:ed:6b:3b:69:4d:40:38:93:ee:78:5e:
b8:b3:6a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:28:45 2025 by rpki-client