Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: wNCxxSGIFWhs0zZc9p6wCZYTuyf2D9rdHs0/kBs3J8Q=
Subject key identifier: 85:4C:B5:E1:F9:59:63:D2:5C:26:31:2B:FB:39:BF:3E:0E:AD:AE:43
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 01964DB52AAC028F8DD320F372A006300612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 04AD
Signing time: Sat 19 Apr 2025 11:00:40 +0000
Manifest this update: Sat 19 Apr 2025 11:00:40 +0000
Manifest next update: Sun 20 Apr 2025 11:00:40 +0000
Files and hashes: 1: ZjdD3KktHTJ1RlykxrS_PX6Dfls.roa (hash: rQU1YZETtvcj8idrb5JBb64s2ExLklRkDK8ZmIHJSuk=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: WRE4zuuyuxMrOvMdkhvWikxR/L5SkMlemLCfn+EeKRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:2a:ac:02:8f:8d:d3:20:f3:72:a0:06:30:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Apr 19 11:00:40 2025 GMT
Not After : Apr 20 11:00:40 2025 GMT
Subject: CN=854cb5e1f95963d25c26312bfb39bf3e0eadae43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:fe:69:70:4f:d8:a3:a2:c9:64:da:c7:2b:
56:9c:df:47:94:6f:af:b3:70:30:89:c0:fb:b7:9e:
9a:76:36:8d:00:57:1a:0b:4d:8e:22:63:06:91:30:
cf:c8:c9:3a:11:43:17:8a:44:6a:e7:38:51:9e:3c:
7a:73:76:e0:b0:a9:20:5d:bf:79:19:79:3b:37:84:
9a:a0:8a:fa:8b:6e:78:27:c2:c6:48:b8:ca:23:fc:
52:b7:32:a8:68:60:48:68:94:73:b3:a5:e7:b6:92:
3d:f9:02:bd:10:b3:77:49:72:82:07:d7:8b:b0:95:
49:0c:71:43:6a:6e:88:b5:64:24:50:39:09:3b:a5:
a4:b7:fc:89:86:c2:aa:d4:f4:6f:e1:4d:56:5a:a6:
e1:40:da:1a:a7:5e:4e:1a:94:55:18:17:37:c5:6d:
c0:84:ec:4d:a8:44:76:60:99:0c:19:bb:5e:e4:19:
8b:4c:c9:fe:fd:6c:06:eb:ab:51:81:26:8b:49:85:
50:ab:ce:ae:87:41:11:b6:f6:d6:8e:40:ea:a4:dd:
a7:0a:17:2f:8e:ad:10:4c:9c:f0:4c:a5:b8:22:66:
ec:9e:0c:b2:62:9e:f1:a6:01:61:37:0c:9c:c0:89:
17:5b:78:5f:dd:7f:6e:60:43:59:ce:1b:a2:c1:c1:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:B5:E1:F9:59:63:D2:5C:26:31:2B:FB:39:BF:3E:0E:AD:AE:43
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e1:f9:6d:51:89:39:c9:47:11:83:16:2f:07:bd:ef:be:2a:
f2:89:73:42:f8:3c:43:ed:36:d5:83:56:84:96:72:d7:22:c8:
47:d4:d7:a3:80:9b:cd:2c:ca:a7:36:39:20:0d:4c:02:77:90:
b5:09:ef:ae:60:d0:2f:c6:08:37:89:ba:11:91:d7:2d:87:18:
b9:63:1e:7c:17:62:ff:f4:00:4b:ca:6a:f1:da:f0:ea:20:19:
2b:7f:b8:7b:17:93:68:12:f3:96:47:ef:5b:ba:85:d3:ee:30:
49:d9:fe:fc:53:04:bc:9c:94:15:7f:5b:be:5a:b1:42:ad:a4:
4f:70:b8:d6:15:3f:71:03:6a:56:69:05:ad:d2:cb:96:67:cf:
48:bd:9a:d7:e8:c4:ab:a8:f0:62:25:92:3b:4f:57:9f:d0:3d:
ea:64:44:d3:ed:6a:98:60:2a:e8:9e:24:2a:32:2a:5c:2c:ae:
1c:33:c9:41:c7:91:53:a0:69:07:71:32:2a:3c:d6:ce:15:db:
60:e6:ad:60:d6:be:11:4b:f8:d1:1e:43:3a:ea:89:55:30:3b:
31:c6:15:f0:d5:01:64:ff:04:6b:a5:7e:42:a2:d1:37:36:08:
77:c7:60:6d:32:7f:e6:0a:40:d0:8f:06:ce:93:16:be:24:27:
d4:77:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 19:01:12 2025 by rpki-client