Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: +bvuk5il7FXwF3oQxHGJQj3v14ZOMXDvTWXO+0nXAi8=
Subject key identifier: BF:B8:18:D4:88:D5:59:83:02:B0:48:A0:97:F7:9B:6C:58:C1:1D:52
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 0196138FEA53820AEE5718DA7EF852BE083B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 14DD
Signing time: Tue 08 Apr 2025 04:02:00 +0000
Manifest this update: Tue 08 Apr 2025 04:02:00 +0000
Manifest next update: Wed 09 Apr 2025 04:02:00 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: lbyNCDJfqNibtBNvsXg7CZkAn4ITSrK31N/rpXp83GE=)
2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:ea:53:82:0a:ee:57:18:da:7e:f8:52:be:08:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Apr 8 04:02:00 2025 GMT
Not After : Apr 9 04:02:00 2025 GMT
Subject: CN=bfb818d488d5598302b048a097f79b6c58c11d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:5f:40:df:78:cb:1c:c8:d7:6b:f5:e3:b8:
72:2a:bf:0f:7e:dd:f1:63:51:ab:07:d0:32:b7:d2:
31:7e:6b:b0:57:b2:3b:16:79:b9:11:28:c2:8d:79:
3d:fe:51:97:53:32:84:4c:f7:41:de:41:19:3a:0d:
a8:25:8e:73:c0:ae:d2:4c:cb:7c:ca:7b:09:03:28:
e4:9d:37:d2:01:b0:94:69:9e:dc:4a:ac:4e:62:f1:
6f:45:c4:8c:b3:b0:f4:cb:d7:60:a4:ea:1a:b7:53:
a7:24:3d:6f:12:5c:a2:01:67:e1:09:31:f1:9e:ee:
bd:44:43:cb:be:22:19:ad:34:1a:2b:fe:fd:bd:b7:
d9:a8:2e:89:24:24:c0:9e:fa:78:75:96:1c:d5:7e:
13:be:d9:f5:7f:3f:de:94:bb:50:a4:2a:b2:52:94:
05:41:ea:48:50:49:e9:80:50:4a:6b:31:3a:fc:c3:
e5:21:de:13:b9:36:db:db:f3:1d:9a:b9:ab:7f:d7:
4e:e6:12:a2:82:81:c8:b6:ea:f4:68:d7:b4:08:21:
2e:12:ec:b8:39:61:bc:6f:cd:f2:83:09:2e:ec:4d:
de:1e:10:c6:fd:5b:52:a1:15:3e:63:47:83:5a:36:
13:54:43:25:9e:14:db:07:25:b2:33:aa:f9:93:36:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:18:D4:88:D5:59:83:02:B0:48:A0:97:F7:9B:6C:58:C1:1D:52
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bb:ce:7b:17:a6:33:81:31:0f:32:08:87:54:cb:0a:72:87:
63:de:2f:79:95:18:55:2b:cb:f6:a6:28:99:e2:d9:cc:4b:97:
2a:c0:25:fc:5e:e7:de:9a:00:ed:81:0d:1d:c7:53:70:39:e2:
c2:10:3f:76:ab:52:e0:97:8a:24:2f:21:24:38:b8:40:02:9f:
66:2c:d0:73:19:4a:76:1a:68:f9:fa:3f:82:69:79:bb:69:92:
7e:4e:df:95:ca:8e:ea:42:ab:1d:da:d7:2c:51:6c:3d:c0:3a:
32:d9:f9:8a:37:19:55:18:6d:d2:9e:4a:75:2d:3d:13:98:f4:
6e:b4:c9:85:82:47:e0:07:0e:dd:18:e2:0f:bc:03:2d:1c:80:
ff:4b:48:c0:97:bf:07:6d:a0:88:69:83:9d:b2:19:6d:d8:13:
ca:36:b5:a5:ca:81:55:dc:23:97:bc:01:41:61:a2:c6:16:db:
81:0b:a6:5d:41:e5:19:4e:4a:a8:a2:42:6b:1a:67:84:9d:ae:
2e:34:01:07:8d:0c:a6:4e:92:ca:a4:10:3a:30:6c:68:b5:41:
d5:d0:d3:b2:be:c2:42:82:ec:2d:9a:83:25:76:75:f2:32:16:
4c:4d:8f:8f:ae:55:86:f3:1d:83:14:f1:b7:c8:de:62:81:86:
2e:ac:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:30:49 2025 by rpki-client