Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: 5f3ZFPZgWj9jb8Q6THiJdbtoYTrNhJSI3YRXYMx9JO0=
Subject key identifier: A0:D6:E3:C0:5B:97:C0:27:60:0A:D0:FA:16:AE:42:90:89:C4:FA:A4
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 019654251F20C0C9A4BCECDB5A37ADBD1638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 17:00:40 +0000
Manifest this update: Sun 20 Apr 2025 17:00:40 +0000
Manifest next update: Mon 21 Apr 2025 17:00:40 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: eUGWFXkL4DhKjBXW6QvbGbKAKpLmdsQsXv2D2un63RM=)
2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:1f:20:c0:c9:a4:bc:ec:db:5a:37:ad:bd:16:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Apr 20 17:00:40 2025 GMT
Not After : Apr 21 17:00:40 2025 GMT
Subject: CN=a0d6e3c05b97c027600ad0fa16ae429089c4faa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ed:9f:00:94:91:9e:04:d9:8e:42:ab:b9:61:
6e:d8:3d:37:1c:10:4f:97:36:cf:52:1c:dd:c2:b5:
2a:2d:3e:1a:73:9f:83:d3:4f:0a:5c:1a:00:a5:1b:
c9:14:c9:70:71:34:8b:37:68:83:b3:c7:0c:ee:ff:
30:98:c4:55:80:3c:e9:a4:d3:b5:ae:78:49:21:d9:
05:d7:a9:4b:77:5d:3f:93:b4:ab:2b:49:8f:0a:39:
f3:aa:42:fd:31:5c:34:4e:fa:6a:60:de:e7:4a:5b:
a7:4f:61:2f:05:78:84:3c:ee:34:99:b0:58:67:e1:
91:6e:b5:fc:a7:e2:5f:89:4c:a9:04:51:0d:42:e5:
f1:9f:96:a3:9c:3c:23:6d:15:8f:52:03:ce:5b:7c:
19:50:5d:c7:58:3e:6e:2e:ef:c5:97:e9:ca:bb:ee:
e2:df:fd:df:ab:d5:a9:5a:78:e8:0c:5f:7e:98:2b:
29:49:6e:96:8c:df:1a:9b:f8:b1:9b:2e:cd:47:20:
dd:51:0a:2d:e6:28:16:f7:42:02:af:e9:58:74:4b:
4d:df:ef:20:3c:bb:50:44:50:5b:81:d4:8c:2a:9c:
60:72:57:14:54:a9:a0:e7:e4:62:4d:ad:4a:42:9e:
ae:c4:f2:a1:2e:9b:2e:d9:01:41:06:bd:ea:7d:51:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D6:E3:C0:5B:97:C0:27:60:0A:D0:FA:16:AE:42:90:89:C4:FA:A4
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5a:79:42:70:d9:a1:c1:0a:a8:04:f7:1a:24:d2:f8:bb:17:
6e:2a:11:da:4a:8e:54:f0:61:ca:92:73:95:b6:9e:4b:c2:6c:
48:95:a7:5c:e1:d8:2b:70:a0:c2:b8:fe:69:db:2f:62:20:93:
44:54:6d:9d:0f:7a:60:b3:39:b2:bd:69:52:2e:20:58:b2:a1:
8b:93:33:54:08:07:7c:44:2a:f5:83:e0:24:b7:b9:96:8c:ae:
78:51:40:1c:28:8f:86:31:48:7a:44:73:f8:f7:8d:ad:62:d8:
16:2b:61:3b:20:ae:2b:5d:37:53:7b:bf:fe:04:a5:f6:cf:d5:
10:77:08:0c:c3:90:85:c5:cb:30:1f:3d:83:c8:cb:b5:02:89:
bd:ce:61:b4:74:2c:3c:5f:bb:55:d4:ac:44:e9:af:b7:0e:db:
2a:b7:fe:17:83:14:b3:b6:ae:b3:88:49:52:13:70:eb:3f:72:
73:21:33:07:cf:c3:cd:79:b4:48:98:b2:90:91:b4:92:59:26:
bb:5f:b2:19:8b:f8:45:37:ea:68:8c:ed:64:80:62:b6:9e:d4:
71:9e:1c:35:44:19:91:db:26:2c:af:61:b8:23:6b:26:af:ff:
cc:6c:b1:13:73:ef:23:ea:b9:f0:c5:19:f9:a1:19:ba:84:d9:
52:0e:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:13 2025 by rpki-client