Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
File: 4xubYpkE1DhFESeFW1L4guvhYqo.mft (raw, json)
Hash identifier: oak+XmIFHOjOwW2SWLsdMCULPnfoTNwMzRYPcbPvBoE=
Subject key identifier: 46:07:73:91:DE:ED:36:C0:68:26:66:7E:C9:81:C9:67:34:ED:B7:63
Authority key identifier: E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
Certificate issuer: /CN=e31b9b629904d438451127855b52f882ebe162aa
Certificate serial: 019610FC0C4598E799F52251B5F8BBE4FE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
Manifest number: 0E0C
Signing time: Mon 07 Apr 2025 16:01:15 +0000
Manifest this update: Mon 07 Apr 2025 16:01:15 +0000
Manifest next update: Tue 08 Apr 2025 16:01:15 +0000
Files and hashes: 1: 4xubYpkE1DhFESeFW1L4guvhYqo.crl (hash: ZXgXsZvDxIpSTGwRx6ua3x2Io7UTJboe5PPaJgDBc5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:0c:45:98:e7:99:f5:22:51:b5:f8:bb:e4:fe:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31b9b629904d438451127855b52f882ebe162aa
Validity
Not Before: Apr 7 16:01:15 2025 GMT
Not After : Apr 8 16:01:15 2025 GMT
Subject: CN=46077391deed36c06826667ec981c96734edb763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:d2:78:7b:69:00:55:5a:21:2f:fa:2e:92:
14:78:90:a2:fc:f7:68:ec:91:e8:bd:28:a2:06:28:
21:d0:55:81:bc:80:15:67:7b:78:83:2d:7f:ba:d7:
83:32:0e:85:97:7d:88:d1:ce:04:be:b1:46:49:e9:
44:c6:9c:07:a7:ff:e9:c3:cc:4a:36:02:89:7a:73:
c8:47:72:5f:10:48:90:da:8f:56:d7:77:35:19:4e:
18:ec:36:86:08:7e:74:a5:c4:4b:2c:c7:73:4c:79:
82:26:4f:27:20:7d:b2:97:f7:f2:3d:1c:63:eb:c7:
af:f7:c2:f4:90:e3:a0:ab:54:6f:71:87:8a:58:39:
16:0e:21:01:0c:68:0c:7a:c4:51:97:29:87:b0:c1:
e1:0c:ba:be:f1:23:f0:d9:54:c8:a0:0b:89:e4:e7:
60:8e:98:1b:35:cd:a5:8b:bf:88:fa:be:6c:34:80:
ec:69:a2:d9:c6:84:53:80:bb:7a:0b:62:5b:f3:ef:
d2:1e:1c:d2:67:81:5f:4e:db:fb:f1:94:fd:eb:27:
32:31:70:5f:82:fb:8d:6f:88:e6:fd:9b:b3:b1:9c:
89:6b:37:1c:bf:8f:0a:0a:26:4d:2b:16:1f:6a:52:
f1:20:da:b4:7c:0f:f0:2a:00:6d:a2:d9:b6:0f:0a:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:73:91:DE:ED:36:C0:68:26:66:7E:C9:81:C9:67:34:ED:B7:63
X509v3 Authority Key Identifier:
keyid:E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9c:9b:22:03:76:74:3b:b0:2a:e9:8f:e0:e8:3f:51:c8:50:
f5:bd:8b:57:e8:b2:3d:97:88:30:39:47:d3:fd:9e:ac:bd:0d:
25:67:83:d0:b8:be:57:b9:32:5c:79:0d:e5:d7:48:de:7a:54:
6e:9c:b6:a5:aa:f8:45:89:46:cf:c7:6b:1b:0c:c1:e9:28:76:
63:7d:e8:9c:91:70:63:da:19:05:64:37:b2:30:f4:fd:75:ea:
a6:1e:32:7f:a6:f7:57:46:cc:a3:aa:56:5a:de:71:7a:70:86:
7d:0a:61:3d:eb:56:11:b0:05:af:ec:be:8e:ef:8a:a1:60:77:
90:0d:cc:c6:9d:1c:24:9b:01:9a:52:18:67:9f:f8:5a:9d:d9:
c6:4c:bb:db:95:87:ff:94:09:83:b0:1f:f9:88:26:61:b8:bc:
04:6f:4e:9a:09:5b:e0:c5:17:a6:88:b6:ce:12:34:19:9e:fe:
54:34:79:28:ff:d1:3f:b4:5f:31:51:cd:b8:a5:ad:2f:25:fe:
97:f2:c9:cc:2c:e3:3e:a9:aa:0e:98:29:21:09:0d:64:b0:5e:
1b:46:8e:1b:a0:eb:da:77:7f:d2:88:b0:f3:d4:01:a0:89:20:
bb:10:9a:f2:42:6b:59:fd:8f:b5:59:b9:ea:60:b3:fe:72:83:
0b:8f:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:33 2025 by rpki-client