Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: ZnkxVVOoCu3zUFcfqaSg8wupLmvmab6cwQKYAGdnSZo=
Subject key identifier: BE:75:38:D4:8A:EB:45:E7:D0:8B:64:B8:18:61:6C:45:D1:5C:3A:8E
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 01964AB43D42A791D80B0B9CC771B0AFF1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 11CD
Signing time: Fri 18 Apr 2025 21:00:48 +0000
Manifest this update: Fri 18 Apr 2025 21:00:48 +0000
Manifest next update: Sat 19 Apr 2025 21:00:48 +0000
Files and hashes: 1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: Gp0aKaUV2mWl6uSVEzHrh7EWOOhlyrc6oPFBiKkq240=)
2: Gwy6_uUvgZKl_FsgbK0SBR2765s.roa (hash: e+42Dv5ZMct1RmCP3DiJKtyiBUgVYfDjN9qagjZj7ck=)
3: RoGLSCET83zk1v-3GNDAGUmNCf4.roa (hash: TK8/4ls6e1537IxcrmPC8DEH8k32Or5yu+pxFNpz4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:3d:42:a7:91:d8:0b:0b:9c:c7:71:b0:af:f1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: Apr 18 21:00:48 2025 GMT
Not After : Apr 19 21:00:48 2025 GMT
Subject: CN=be7538d48aeb45e7d08b64b818616c45d15c3a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:a2:f9:08:44:40:e6:ba:1e:ad:56:75:35:
03:d3:7b:59:c8:6c:ad:86:08:a4:b2:a0:b6:db:5c:
71:a9:c9:61:cf:a5:2b:b4:0b:7a:fe:9c:56:ba:26:
c6:8c:eb:fa:99:57:a0:7b:7e:21:35:d6:d6:3f:5d:
94:16:6f:c0:1c:aa:02:b7:07:e3:82:b5:de:e1:c9:
4f:e8:bb:66:fd:10:36:0d:c7:0f:bc:f3:d1:10:55:
de:e2:9d:a3:63:40:53:59:62:02:6e:b6:a8:07:3a:
0d:03:71:1c:41:5c:a7:80:10:e2:6d:e7:33:81:5b:
1d:2e:ef:7e:d4:5b:c7:e3:b0:d2:91:f5:0c:94:a0:
11:dc:12:f0:c0:bf:5d:a5:c1:1e:f7:17:ec:d2:c0:
f3:97:34:99:b7:2d:04:f9:27:9a:67:37:96:5d:71:
b5:2a:81:d6:eb:63:b6:01:59:37:5d:b4:96:32:24:
14:c2:a1:c2:c5:a1:1f:c6:32:01:e1:41:d5:41:0e:
14:40:1d:a1:7e:38:98:c1:27:d3:cd:8c:9e:ff:61:
8a:cb:5b:d4:40:36:5e:d6:f1:68:9e:a0:2d:33:87:
50:71:89:d9:2d:ea:02:5d:e3:dc:c0:82:66:fb:b0:
d2:a0:18:c3:d1:44:a7:f7:f1:c9:f7:d1:5c:ed:21:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:75:38:D4:8A:EB:45:E7:D0:8B:64:B8:18:61:6C:45:D1:5C:3A:8E
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c6:59:0a:0e:77:d0:75:56:b1:c3:cc:3d:23:33:c5:bf:4e:
a7:eb:5d:3a:f5:05:d6:c2:93:b0:a2:b2:78:86:e8:29:04:d3:
4a:ad:ea:65:09:65:41:e1:ac:c6:af:35:3b:36:c3:37:d2:4b:
9d:80:fd:7d:06:85:95:5b:45:e1:d3:6d:56:ee:75:1f:11:0e:
6b:91:31:7d:ff:7d:5e:23:02:b8:d7:9c:60:77:71:0e:22:38:
62:b9:e3:06:95:56:2e:96:c4:8a:26:a5:a9:3a:b1:e2:fc:07:
29:cc:b8:74:4a:e2:75:5d:1e:58:bf:67:a6:b2:d2:80:50:86:
cd:af:62:9f:8b:5d:9c:9a:6f:9c:e4:18:d1:d4:e0:cc:12:d5:
fd:a7:e6:74:31:4a:60:2c:64:32:b3:7e:6d:c0:1d:fb:b4:aa:
68:2e:63:86:f3:64:2e:67:9a:de:46:48:56:00:c7:3e:51:71:
b2:85:49:fd:d1:75:6b:c5:da:34:1b:35:21:2f:eb:a2:7d:7d:
62:06:5f:30:ec:eb:19:78:43:ac:8e:77:4f:75:7e:69:4f:af:
60:2b:28:0c:b0:39:33:bf:82:dd:5e:b1:18:8b:bb:fa:e1:cb:
c3:ed:b2:db:83:18:b1:46:54:c9:f4:27:cb:7f:93:fa:e4:00:
4b:4b:3d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:11 2025 by rpki-client