Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
File: 4SV-qrv2BNRXAFXCzYrCSbspwQY.mft (raw, json)
Hash identifier: hmYI3/YzYo7vOl6YTSjnv77D3jlbOULgwCiierss5HM=
Subject key identifier: F6:74:53:30:99:4D:78:DA:E3:34:27:35:DA:C0:1E:D5:20:8A:1E:1E
Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
Certificate issuer: /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Certificate serial: 0196162200DD38C64C3D4797485CD58ABAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
Manifest number: 035F
Signing time: Tue 08 Apr 2025 16:00:49 +0000
Manifest this update: Tue 08 Apr 2025 16:00:49 +0000
Manifest next update: Wed 09 Apr 2025 16:00:49 +0000
Files and hashes: 1: 4SV-qrv2BNRXAFXCzYrCSbspwQY.crl (hash: X4lThhtlNqUoLReRIzW6I/PAOAQJ6G7JBc376wqQWT0=)
2: RtPlHCvdOTduVIrqGHc113txKjY.roa (hash: dA+hHKIy5OrMWm53ajforCyuSadPM2Iwp18qqHwliUc=)
3: x3IHGK1LHuOlcRhBY1DkJyUPPNE.roa (hash: 3HWLZe2T3pntWqcoKlGGtGIvMY4jmETllZDIMuRWnAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:22:00:dd:38:c6:4c:3d:47:97:48:5c:d5:8a:ba:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Validity
Not Before: Apr 8 16:00:49 2025 GMT
Not After : Apr 9 16:00:49 2025 GMT
Subject: CN=f6745330994d78dae3342735dac01ed5208a1e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:bc:ca:8c:81:c3:5a:3f:63:79:c1:90:e8:
98:6a:f8:33:06:a9:01:c0:2e:34:c7:65:16:01:05:
8a:fb:12:77:3a:ea:66:11:60:41:18:03:84:a3:62:
7c:a4:5b:b7:9b:d9:88:02:5e:28:2e:c9:6c:b2:03:
da:ce:6a:b4:fa:e6:50:d2:e5:b4:66:76:36:88:ab:
6f:0a:ae:bd:65:e2:f8:fa:a8:6f:5c:48:f9:c8:fd:
14:4c:cf:c1:ad:8d:96:42:5c:cd:8d:29:c7:12:38:
6b:11:c2:e6:3a:1f:a1:f4:c1:c8:56:71:d2:a4:fe:
31:76:3f:89:45:c4:f0:9a:9d:b4:60:86:25:2c:10:
9e:2a:15:65:5b:9b:2a:45:a1:4e:cf:cf:dd:9b:22:
7c:b2:ff:d7:a7:0d:0b:66:d2:a5:bc:a4:4c:18:58:
7d:0f:f6:15:50:4b:b1:53:9c:fc:02:8e:b8:c1:b5:
d7:28:51:f3:02:88:d5:c9:6d:41:05:40:13:33:6a:
8b:a7:bc:ff:5d:df:47:f5:6e:17:2d:03:a5:38:50:
ec:09:b9:d7:c0:88:92:e2:20:d0:57:84:da:a3:1e:
0a:49:76:33:62:45:3b:0c:e2:87:a1:ce:a5:ef:e5:
25:63:da:b0:ab:bd:1a:f0:f3:90:dc:16:ff:3c:21:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:53:30:99:4D:78:DA:E3:34:27:35:DA:C0:1E:D5:20:8A:1E:1E
X509v3 Authority Key Identifier:
keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c0:51:51:fc:f2:10:f0:bc:2e:dd:8d:84:33:e2:fe:c7:fb:
e6:7a:6a:cd:cd:a3:64:04:a1:2a:b0:f7:3c:e5:f5:fa:63:08:
46:65:82:83:4d:a7:f9:01:ec:29:d3:03:6b:d4:2e:bd:ef:e5:
7c:b8:f9:b9:58:03:b4:64:ca:a0:db:a4:a3:a3:ea:09:5a:41:
f5:8a:f8:ff:93:5b:52:bf:c1:df:d3:5b:4e:75:b7:2f:8c:bd:
cf:16:0a:d9:58:da:c6:10:36:19:14:a7:ed:35:9d:5f:a9:5a:
78:dc:e3:00:62:03:25:39:ff:56:a4:4a:b5:ce:7a:78:53:51:
36:31:eb:9a:82:bb:b4:c2:e1:47:cc:55:d6:95:e2:e9:91:2d:
f9:75:e8:fe:b8:25:e9:e7:e3:0e:af:4d:27:47:27:e7:13:b2:
17:95:61:41:66:0e:07:3f:3e:09:4a:bd:9a:4c:cd:c8:0d:cd:
4c:49:d2:b0:0d:89:2d:bf:98:50:6e:7e:f8:25:e2:2e:8f:09:
2b:89:fd:a6:d9:1d:3d:94:5e:be:26:81:f6:da:d5:18:2c:50:
0f:cb:cd:39:7c:f4:da:dd:53:60:da:8c:58:36:0b:f4:8b:3b:
a3:78:64:ca:c4:e3:91:3e:b4:7d:e1:ff:64:27:d9:bc:99:f4:
bb:63:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:26 2025 by rpki-client