Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: HAwhnklTJlmorfLynoQyAG3iqdq5mbeMAC+HAnLa/j0=
Subject key identifier: E2:88:80:36:9B:AA:3B:E0:10:67:1F:FC:95:42:37:F6:AC:1A:AE:77
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 019613C5CA1A3ECD335A1B8EE005EBBB59D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 0402
Signing time: Tue 08 Apr 2025 05:00:51 +0000
Manifest this update: Tue 08 Apr 2025 05:00:51 +0000
Manifest next update: Wed 09 Apr 2025 05:00:51 +0000
Files and hashes: 1: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: /Bj3JUYuDMn3/ldUgK8KGjesLYxzmqPcmLBSW3R3w6s=)
2: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (hash: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=)
3: mB8BgJX73rlkXVf4rQjQxZFmQ74.roa (hash: QKAp2j6WZ6bfCIMjIxWmPLwb9wQaET9IBZN0Uj+49mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:c5:ca:1a:3e:cd:33:5a:1b:8e:e0:05:eb:bb:59:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Apr 8 05:00:51 2025 GMT
Not After : Apr 9 05:00:51 2025 GMT
Subject: CN=e28880369baa3be010671ffc954237f6ac1aae77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:e3:88:c9:2c:a4:ee:5a:6c:51:ab:6f:bb:
f4:33:ef:4d:ac:71:a6:f5:c5:96:89:66:15:c4:bc:
7f:e7:65:f1:3d:9b:3a:16:02:2a:6f:01:e2:8d:c4:
78:3c:dc:32:fc:33:a0:d7:74:6e:a1:e1:43:80:ad:
5d:bc:8a:e5:bf:90:6a:4b:4b:43:a2:43:ce:80:99:
8a:c1:c0:d3:05:d9:70:3b:0b:0b:21:7c:2b:66:0d:
a8:14:ef:2c:dd:d2:45:36:86:7a:8e:fd:f6:06:fb:
37:6c:62:06:7b:0f:ee:13:54:ab:59:7f:d5:d2:d0:
41:17:c1:fe:a1:aa:60:37:3e:38:ea:37:26:28:76:
ed:64:af:ed:f0:97:37:db:5a:59:2a:0e:c1:10:86:
55:d9:b4:68:47:f0:18:9c:28:52:4f:3a:fe:b2:45:
a7:d8:6b:96:e9:4a:53:e9:56:84:4f:a1:df:cf:e0:
66:ce:62:45:26:2d:c6:c4:46:a1:d5:c7:26:78:0a:
74:c9:c7:cc:c5:81:c1:4d:7f:17:07:eb:15:04:0f:
00:4f:7c:e1:ef:c0:8a:36:f8:be:a3:cf:a5:aa:48:
3b:88:1d:9f:85:f8:c0:6b:31:1b:31:37:7d:f4:7d:
de:9f:18:68:05:90:24:ae:e5:fc:f9:8c:59:e6:f9:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:80:36:9B:AA:3B:E0:10:67:1F:FC:95:42:37:F6:AC:1A:AE:77
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e8:dc:9a:80:5d:ec:0e:bf:ae:aa:e1:bd:97:cb:80:1f:5d:
12:2e:eb:7e:6e:43:b4:81:26:7f:d5:71:8c:cd:69:7b:db:0f:
23:d5:6d:da:0d:c2:da:b6:c9:6e:8a:d1:1b:7c:45:9e:86:5b:
31:7a:f2:7b:d4:7a:ed:a7:63:34:e6:14:27:1c:9d:c0:52:33:
13:23:0c:60:0c:4e:c0:87:17:50:29:b6:13:cc:50:99:f1:94:
e8:e9:b4:fa:ec:ee:06:89:87:e0:ac:8d:6f:49:80:82:51:04:
d0:28:20:9d:be:4b:cd:7d:6f:e1:c6:f4:30:fd:41:89:88:f0:
da:10:da:d6:0a:11:d9:ce:89:47:b6:cd:21:0b:13:c3:2f:6a:
82:ff:1d:fd:f2:2f:9b:a0:22:c2:88:8c:4f:ce:e8:7e:60:bd:
80:b1:ce:15:06:ab:7d:f5:c9:12:ca:d2:88:81:68:5a:f7:dd:
03:8f:6e:0d:50:d7:87:90:e3:14:91:4c:b7:ff:b2:74:fb:e4:
63:c7:43:82:c1:e6:2e:9a:bf:75:37:a7:fd:63:49:29:5d:9a:
59:b3:28:5f:82:6d:56:73:5a:f7:ca:59:ab:c4:8b:a0:2b:f4:
24:1a:ea:98:a7:f1:95:21:d1:5e:32:a5:39:35:65:08:58:2f:
a3:76:46:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:42 2025 by rpki-client