Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: rPIwFrv6h3CaF+hq0SiNTSAlv08bNbjIxwCGsXH544U=
Subject key identifier: A6:D5:98:C2:9C:C9:43:26:4A:81:10:19:4A:99:D1:2F:01:E4:03:3F
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019652003B8254D53FAB02C53A3E6BD773C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0872
Signing time: Sun 20 Apr 2025 07:01:08 +0000
Manifest this update: Sun 20 Apr 2025 07:01:08 +0000
Manifest next update: Mon 21 Apr 2025 07:01:08 +0000
Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: vSQkcF3IhhyOoeukUjsIQhn24vk2ThCABH5sL/XTLsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:3b:82:54:d5:3f:ab:02:c5:3a:3e:6b:d7:73:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Apr 20 07:01:08 2025 GMT
Not After : Apr 21 07:01:08 2025 GMT
Subject: CN=a6d598c29cc943264a8110194a99d12f01e4033f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:6f:15:73:05:3d:af:ae:91:92:8a:91:ec:
af:f0:c1:68:bd:64:7f:18:3a:43:15:e6:4e:e1:c1:
a1:4f:90:24:fb:a0:a9:6e:47:48:75:7e:96:d2:e7:
c0:55:f2:73:4e:c4:d5:78:4b:84:31:88:e8:6f:74:
bc:3a:84:e3:64:a2:12:98:5b:cd:e3:8b:7a:e0:ef:
fe:7d:d6:d5:14:81:ad:d3:c1:0f:b3:99:4b:fd:36:
90:a2:bf:08:84:d3:b6:c8:1a:41:0a:57:3a:2f:b1:
9b:89:ea:88:f2:2e:9e:51:43:c3:5c:87:9e:fc:10:
18:6c:f9:cd:9b:33:c8:df:2d:a4:b7:88:2e:e4:22:
27:e3:3d:72:80:73:49:30:ac:48:d5:e7:4b:60:2e:
ba:fd:52:76:ba:cb:e5:72:98:46:9b:53:8f:85:01:
59:1f:b6:40:7c:ec:c3:be:07:59:17:be:c0:ae:2e:
0f:74:04:78:0c:1d:b8:3b:d7:bd:bd:c5:f4:ba:56:
ea:ef:a4:e7:13:08:a6:94:eb:fb:47:e7:2b:b1:43:
b8:e1:32:d1:76:55:03:38:83:1d:8e:61:0d:78:85:
e2:cd:cf:ad:2e:e3:02:fb:82:4d:d5:24:10:92:69:
3d:de:8e:c2:af:f3:1f:66:e7:0e:d8:df:a4:f4:34:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D5:98:C2:9C:C9:43:26:4A:81:10:19:4A:99:D1:2F:01:E4:03:3F
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e0:5c:9e:2f:a5:e2:5e:17:78:c1:e2:6a:41:2b:9c:e7:d3:
1c:e6:15:ac:0b:e8:96:d8:7c:a9:23:c9:b8:4d:3c:83:e4:e3:
77:1f:de:46:c3:c2:a2:17:98:b2:e7:01:9b:73:54:d6:30:ca:
3e:5b:e8:c4:7d:8b:c3:b6:b4:c1:9b:56:a1:4c:30:a8:35:0b:
2b:65:52:ed:dd:b9:8f:93:e4:9e:0a:47:ef:7a:3a:5f:09:7e:
04:31:f6:6c:c5:b4:93:33:36:82:9f:28:f8:9a:9f:8c:6d:20:
12:d1:0c:d3:fa:c8:58:1f:c4:26:99:d6:b7:f2:27:dd:09:e1:
a3:7a:83:41:fe:95:ca:ec:3a:4d:79:57:0f:87:b5:9c:27:2d:
38:c7:f1:07:69:27:b5:43:eb:92:3e:3f:09:28:a9:74:3d:09:
58:d7:11:bd:3e:57:57:7d:52:49:13:68:c4:a9:09:c9:9e:e8:
f8:a6:d1:c0:2c:e2:9c:f0:9b:2c:27:8d:b4:cb:6b:85:09:65:
0b:63:4a:c5:d6:c5:82:de:7e:fc:fb:d3:6a:bc:8d:f2:df:e7:
79:98:67:ec:04:83:14:36:ef:97:5f:d3:cd:92:7f:2b:79:d1:
05:74:c9:41:67:e4:78:0f:6f:52:ef:08:42:fe:b8:2a:12:e9:
85:e0:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:46 2025 by rpki-client