Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: Hvmx7awB5K62rE6lPNLV8w7xrSLvQdHfNAX3rKwp4fM=
Subject key identifier: 03:3B:DD:5B:85:0D:FD:8E:3C:09:4E:76:DD:CD:67:46:93:5E:B3:1C
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 01964CA296FD4BB5D6662EA32922A6BC4E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 06:00:45 +0000
Manifest this update: Sat 19 Apr 2025 06:00:45 +0000
Manifest next update: Sun 20 Apr 2025 06:00:45 +0000
Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: pXS/zPGIXCWloPi8DgckDbiMuiLryYfROGI+fq5hlqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:96:fd:4b:b5:d6:66:2e:a3:29:22:a6:bc:4e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Apr 19 06:00:45 2025 GMT
Not After : Apr 20 06:00:45 2025 GMT
Subject: CN=033bdd5b850dfd8e3c094e76ddcd6746935eb31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:47:52:23:66:d4:69:26:ff:d9:9f:03:77:
ed:ca:95:8e:e5:a8:82:f2:68:bc:27:77:37:1f:79:
7f:ae:c4:09:b3:0e:c9:fd:d9:4d:1c:36:74:f3:82:
aa:87:38:c1:19:0f:ab:de:3e:3c:79:09:a4:3b:e1:
bb:95:f2:b5:3b:2d:17:4f:96:6c:33:a7:3b:44:47:
b1:05:a8:d5:92:fd:13:78:3f:53:2f:87:09:0a:ae:
23:ec:d4:2e:15:27:1d:07:77:30:0e:11:d9:28:0d:
5b:ca:af:d5:86:34:4c:1f:ad:7a:98:44:35:73:de:
40:7e:4b:eb:9e:df:82:3a:7e:c9:73:f7:6f:78:30:
16:03:e3:2d:81:e8:31:62:54:0c:06:71:1f:79:89:
e8:82:3a:14:de:09:f6:e5:01:30:2c:7a:a8:69:62:
41:f2:d7:0b:2f:31:b0:d9:09:c3:58:5c:3c:35:84:
44:60:d6:58:e0:02:2b:9f:19:bd:b8:6a:34:8b:40:
98:d7:f7:87:27:4d:14:4d:41:e4:fb:b2:ee:22:d1:
af:b0:ae:7b:d0:7a:62:78:c9:d5:1c:5e:8e:82:bc:
3a:25:01:31:69:46:66:7f:bf:3e:04:27:b9:ee:3f:
bf:f9:76:0f:5f:4c:08:0f:09:5e:f7:59:60:c6:b9:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3B:DD:5B:85:0D:FD:8E:3C:09:4E:76:DD:CD:67:46:93:5E:B3:1C
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:1b:68:46:ed:a9:08:47:f6:d0:5b:4a:a0:b8:fb:3c:7a:
a5:1e:47:84:73:72:9f:6d:0a:58:2b:fa:ff:bc:a1:04:88:f4:
14:2e:2f:69:87:b8:bd:5b:f6:4a:55:90:82:5b:58:75:4e:6b:
06:76:92:fd:ee:13:e6:3c:a3:a1:07:3a:d1:f1:18:88:46:95:
74:ee:ba:d3:8a:1c:bd:49:1a:3c:20:83:0b:fd:06:28:dd:22:
10:fb:d9:22:a5:4c:49:8c:d1:57:71:a5:d2:96:f9:9f:93:d4:
33:05:d3:65:45:38:5e:8f:c2:e8:d2:3f:85:a4:8f:cf:f3:e4:
50:bb:6b:df:e5:34:25:a0:6e:7a:9d:2a:e1:f9:ae:6b:12:cc:
bc:b8:08:38:71:2a:53:06:ab:f5:6d:8b:94:bc:94:27:39:0c:
3c:c9:41:7c:ea:af:9f:7f:45:38:c6:9d:a9:12:94:85:38:de:
7f:ee:58:31:3c:a7:4f:86:b2:ef:94:9f:6b:d1:42:87:6c:3b:
5c:ff:c5:70:26:28:93:93:72:73:1e:f9:95:2e:99:3d:e7:a4:
b7:01:a5:bc:6e:ba:c5:d6:bf:04:49:e7:46:6a:63:6a:24:59:
b2:87:3d:35:14:7e:de:f5:1b:46:53:61:31:71:fa:fd:ed:69:
ed:b6:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:24:18 2025 by rpki-client