Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: iWuhwwRr5BQRTiKru93ud662RyswlD/AmmAlfivFXc4=
Subject key identifier: 4F:00:79:C4:2B:BA:86:97:5B:B4:60:B9:C5:F2:B7:BC:42:CC:6E:C7
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 01965537F8AFDE762B1046D51924F348E411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 22:00:53 +0000
Manifest this update: Sun 20 Apr 2025 22:00:53 +0000
Manifest next update: Mon 21 Apr 2025 22:00:53 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: urYr0GI5v1Jb+zf98htEOsep5AxiokwQbUJMmMKF7bE=)
2: STK2SAlRO7jYy3vcEqTR9ikjblA.roa (hash: k6oW+GQsDjU/vILzjfv+z+LTQhLzDJ0y7rBRC2wvlVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:f8:af:de:76:2b:10:46:d5:19:24:f3:48:e4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Apr 20 22:00:53 2025 GMT
Not After : Apr 21 22:00:53 2025 GMT
Subject: CN=4f0079c42bba86975bb460b9c5f2b7bc42cc6ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:01:2c:d6:e2:71:91:7e:07:f0:ed:ad:d8:
23:30:1d:9f:cb:01:d3:77:00:6c:43:ba:cb:0b:54:
e8:25:ed:86:62:e1:a1:ce:82:bc:a5:33:60:84:16:
7d:9a:c6:9b:f8:a0:75:5d:4c:b4:4c:0f:e6:f2:c9:
60:b7:ed:15:ab:c4:f5:2d:30:d4:f3:4e:8e:90:b3:
1b:ee:0d:90:51:71:b4:71:62:a3:83:12:ee:ad:94:
eb:58:50:62:72:60:60:08:68:a2:73:16:04:48:e8:
38:17:b8:43:8c:cf:f1:39:5c:3c:68:ee:c5:b5:28:
ca:09:62:49:86:04:b1:77:83:6f:7a:82:a1:a6:5d:
09:d8:39:a4:56:ff:02:4d:48:31:1a:e7:f2:69:25:
f5:1b:eb:1f:6f:0b:f1:58:5a:1b:9a:bc:3d:c4:41:
04:8d:66:08:f1:e2:de:9b:6b:12:e4:d4:2f:60:72:
9e:50:b5:cb:18:4d:36:34:1c:c2:90:7d:9c:d0:d4:
ee:d3:92:33:9d:41:a2:73:51:bf:20:73:41:0d:0c:
35:14:e5:ca:e0:2d:80:bf:a7:f9:cc:3a:ff:5f:c5:
0c:65:30:1b:8f:12:ac:2c:14:df:e8:de:ce:99:e2:
0d:7f:6d:ce:08:9a:bc:10:77:b0:d4:a0:26:c2:e5:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:79:C4:2B:BA:86:97:5B:B4:60:B9:C5:F2:B7:BC:42:CC:6E:C7
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:39:ae:f4:df:f2:80:5f:cd:8d:e3:5d:de:35:bd:f1:c0:9d:
76:62:5d:86:53:1c:a8:b8:92:94:57:89:ec:ca:8a:a0:d2:bd:
da:03:3d:4e:84:e5:54:f6:90:29:f3:14:d1:a1:c0:ce:5f:78:
0c:cf:b3:9b:89:0e:01:c2:0c:83:dc:44:72:fb:ca:15:f9:01:
53:23:18:d1:e8:63:c1:72:3e:ce:0e:d6:cb:7e:2d:64:f4:b2:
5b:6e:f7:3a:0a:0d:62:3d:50:b8:5a:d1:a3:f8:2b:53:c6:de:
87:d3:c3:0f:b3:d2:04:52:05:8b:86:94:9d:24:d4:2a:21:37:
7a:62:d2:f4:4f:df:60:2b:46:12:4f:66:4d:17:0c:56:37:4e:
9a:ad:92:4f:38:55:e7:7a:95:4c:63:c2:66:88:0c:72:39:af:
d6:44:2a:fd:ab:a4:56:35:94:d6:39:ef:bb:5a:9d:b5:01:42:
78:c0:eb:d9:6d:43:35:a1:2a:a3:19:e9:c6:a4:66:dc:85:3d:
5e:e5:a5:cf:5c:36:a5:fb:bd:a3:7a:b1:f6:de:5d:51:72:e6:
43:6c:14:70:58:39:50:38:85:c8:d4:2c:36:99:4d:7f:c0:20:
fb:40:a5:9d:ee:22:56:4c:0b:7d:e7:46:ad:e7:14:37:03:b0:
75:ec:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:31 2025 by rpki-client