Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
File: 4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft (raw, json)
Hash identifier: ujNb9tOZZZwDegcWSztON1sZP/FTxwKsH5jW/7L9Krc=
Subject key identifier: 0E:CC:5D:6F:B3:15:BB:96:0F:9C:23:7D:55:95:0D:1D:D1:67:D6:C6
Authority key identifier: E0:31:74:A0:12:87:30:FA:AC:0D:78:C7:A3:D9:08:AA:51:05:4B:E7
Certificate issuer: /CN=e03174a0128730faac0d78c7a3d908aa51054be7
Certificate serial: 01964F6D69F9154490B0D50158A964990B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DF0oBKHMPqsDXjHo9kIqlEFS-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 19:01:32 +0000
Manifest this update: Sat 19 Apr 2025 19:01:32 +0000
Manifest next update: Sun 20 Apr 2025 19:01:32 +0000
Files and hashes: 1: 4DF0oBKHMPqsDXjHo9kIqlEFS-c.crl (hash: C38skbld7uwUr0qc6rCQBFicS/ggG5pe4zAlbUTIROU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DF0oBKHMPqsDXjHo9kIqlEFS-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:69:f9:15:44:90:b0:d5:01:58:a9:64:99:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03174a0128730faac0d78c7a3d908aa51054be7
Validity
Not Before: Apr 19 19:01:32 2025 GMT
Not After : Apr 20 19:01:32 2025 GMT
Subject: CN=0ecc5d6fb315bb960f9c237d55950d1dd167d6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:10:d6:f8:bf:d3:2a:a4:cb:1d:cf:80:1e:
5b:9f:c1:fd:d3:d7:ed:94:df:f7:15:b9:a2:34:d5:
0e:6b:ae:db:28:59:37:25:4d:1b:16:78:1e:e8:7a:
e1:da:7b:80:dd:b7:02:29:2d:6e:26:dc:4a:51:9e:
d9:b2:59:1a:c3:2a:fc:9e:09:46:71:c7:70:f1:2e:
21:d0:0a:97:ff:5b:1f:c2:6e:ce:e4:81:bc:5c:74:
7a:df:70:86:58:e9:93:d7:ca:0c:92:76:08:6c:e2:
75:97:45:d6:30:e8:07:23:e8:b9:eb:6b:30:64:2a:
d1:3e:2b:75:58:57:82:80:b4:ae:ae:42:0e:11:9a:
29:d0:d3:73:76:72:0b:5d:d0:02:8f:aa:63:63:ea:
c1:f7:2a:89:98:43:9c:6d:33:92:5a:b9:39:17:41:
ca:4f:32:21:4e:7a:83:70:52:e4:66:ed:b7:5b:0e:
9b:9e:2f:1b:16:c1:2c:04:88:37:99:0f:22:be:89:
93:2a:a8:e8:43:85:26:dd:fc:aa:29:b7:88:03:34:
a6:c2:47:58:15:c6:50:6d:10:d1:f5:40:cd:89:8c:
00:51:77:45:5d:8c:8a:54:5b:eb:a6:46:a3:63:a5:
90:29:cb:22:a8:90:ee:b1:f6:f7:8d:c5:43:54:b4:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CC:5D:6F:B3:15:BB:96:0F:9C:23:7D:55:95:0D:1D:D1:67:D6:C6
X509v3 Authority Key Identifier:
keyid:E0:31:74:A0:12:87:30:FA:AC:0D:78:C7:A3:D9:08:AA:51:05:4B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DF0oBKHMPqsDXjHo9kIqlEFS-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dc:41:3e:7d:1f:a8:e3:62:af:47:46:ba:3e:ed:c2:05:1c:
52:9e:67:99:c3:df:8a:99:a8:e8:8e:2b:19:a9:93:8f:6d:83:
bb:8d:07:56:70:47:38:9a:0d:9e:80:6d:75:ff:3e:4b:f0:e3:
21:17:07:37:ba:61:45:31:04:36:fb:ed:08:96:18:0c:7d:1f:
f9:d2:d3:0b:08:16:02:b7:39:a8:32:7f:92:b2:19:30:47:13:
97:4e:74:66:cd:91:41:0b:5f:7e:7a:88:ed:ee:61:f8:9e:1b:
ab:fc:4d:52:91:6f:80:b5:bb:9e:0e:c3:b6:16:ce:b2:cb:9c:
6f:66:3a:9e:47:4e:fc:4c:2c:bf:29:93:9d:5c:f6:33:fa:ab:
31:8f:66:5f:44:f8:31:98:8e:32:06:f9:e9:86:bb:96:6f:d9:
e0:7c:72:61:94:c6:9f:bc:1d:87:9b:1b:63:a3:ae:8a:75:22:
cb:cf:56:93:d0:eb:36:06:16:4e:dd:34:df:ea:ad:ec:88:b9:
05:a9:b7:17:e4:92:6e:cd:46:a9:a9:11:89:9a:11:69:79:c7:
a4:70:6a:a7:87:e4:eb:1d:d8:a7:98:99:e6:f3:0c:1e:79:6e:
cb:a2:5b:24:53:90:31:8d:c4:f8:ca:f1:7a:fc:ee:72:ac:de:
4b:fa:ac:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:58:28 2025 by rpki-client