Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: Gz40ZePPWkydLcNH2AIXNMC3OqVUUJ5VJB46INtmtjI=
Subject key identifier: 2D:09:A8:BD:CA:DA:34:BB:B8:28:DF:9E:E3:BB:7B:EA:8A:32:11:4E
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 01962B60EAF819141F8CC7BDAF5FF1A2DA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0BA0
Signing time: Sat 12 Apr 2025 19:01:33 +0000
Manifest this update: Sat 12 Apr 2025 19:01:33 +0000
Manifest next update: Sun 13 Apr 2025 19:01:33 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: s1y1Cqu7fQTLfgCXbidGTpebkwrb8gP9GjvBwAMezKw=)
2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:60:ea:f8:19:14:1f:8c:c7:bd:af:5f:f1:a2:da:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Apr 12 19:01:33 2025 GMT
Not After : Apr 13 19:01:33 2025 GMT
Subject: CN=2d09a8bdcada34bbb828df9ee3bb7bea8a32114e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:47:3d:fb:02:71:08:ee:b6:32:0c:8c:d5:
5e:7a:63:81:aa:24:b2:61:bb:4c:b6:64:41:a7:28:
99:80:73:ba:47:91:e2:21:f3:50:d9:65:05:eb:8a:
0b:5f:2b:6e:71:d9:80:a4:39:06:8d:15:4b:f7:4f:
a8:6e:15:85:b2:c0:2a:92:ef:09:b8:32:50:78:4b:
8c:77:4a:5a:9e:2f:16:52:4e:ce:37:b6:23:ea:34:
d6:2e:10:ea:46:61:9e:56:71:f9:48:b4:01:24:37:
53:c0:91:07:2f:50:17:a3:16:bd:41:46:c7:ce:7d:
5e:33:d3:32:22:43:28:fe:ef:9d:48:d3:70:db:59:
37:4d:fa:0a:f5:b2:4f:e5:47:ce:c1:23:ff:5c:fc:
d3:73:a3:77:19:fa:f6:4a:d9:85:94:05:a2:e1:3c:
4e:fe:fc:86:bd:c6:ac:9d:1d:9c:32:6f:45:3c:22:
a4:9a:5b:f1:2a:78:61:6c:a5:7e:9a:0e:b7:af:28:
c0:6c:51:16:d8:93:d8:a3:5a:b2:58:1f:a5:f6:55:
2f:6a:16:e0:c4:46:f0:03:cd:57:2e:f8:4c:df:ce:
39:24:8f:c8:51:fa:9e:c7:00:7a:02:00:5d:5d:25:
74:f5:95:44:a1:32:29:16:9b:df:40:ae:27:03:e9:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:09:A8:BD:CA:DA:34:BB:B8:28:DF:9E:E3:BB:7B:EA:8A:32:11:4E
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fe:89:de:0f:19:c4:1a:ee:a7:f1:d2:c2:5a:a9:a7:40:bc:
b0:d8:b3:b7:5a:f5:10:2c:54:09:9b:f5:0b:4e:91:09:7d:19:
4d:28:09:fa:68:47:62:fc:6b:21:04:ca:1c:82:2a:b1:f9:04:
20:68:cd:27:01:d7:78:4e:fb:38:4f:10:34:bf:92:1f:00:cd:
47:45:3d:be:bb:00:b6:ac:04:17:c9:54:29:68:45:c6:0d:6e:
aa:d7:74:76:35:2b:98:3b:49:cc:1c:9b:48:96:81:cf:a6:8c:
27:37:f4:b4:b1:19:de:c9:af:da:35:35:4e:26:eb:b5:12:22:
2f:48:cf:f1:ac:fe:c1:ac:e8:71:80:12:4e:1a:c5:8f:58:10:
ce:df:c0:ae:63:58:dd:87:3b:e1:33:6d:69:5c:21:1f:13:33:
a0:22:3e:c0:42:27:3e:f3:fa:14:6b:e5:d3:57:7b:dc:a5:92:
3e:1a:b5:3f:39:9d:f9:4c:db:09:c6:0a:94:e2:e8:48:be:68:
a1:e5:4d:72:ae:af:85:f0:cc:8c:f9:73:9b:4b:c0:51:df:38:
0c:3c:35:62:dd:1b:3d:2e:86:ed:29:bc:55:10:54:bc:9f:e9:
07:3c:bf:43:4a:c5:b8:5f:eb:d7:54:45:01:77:d7:6e:4f:05:
65:fa:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:16:42 2025 by rpki-client