
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: Vv3wB3ZTgBHBi5V0ZqrZusJnvEwtssVPaJVvhmMbSWM=
Subject key identifier: 21:97:80:51:1F:BD:F7:06:C1:A8:A9:A4:FF:BF:F2:C1:0A:A8:48:34
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 01964858518571CE2109E606E66688BD0ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 05F3
Signing time: Fri 18 Apr 2025 10:01:09 +0000
Manifest this update: Fri 18 Apr 2025 10:01:09 +0000
Manifest next update: Sat 19 Apr 2025 10:01:09 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: M/CDwGH6jHXhya72D0in4TMJkUfb52rSt91K3XJUSxM=)
2: c0fBmj5scO5bGyjJUPNEWoiJiz8.roa (hash: ysAxrF+4k0JvJ+yBQRYBZ/441fP/ZB0AQyNUuEBiB+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:51:85:71:ce:21:09:e6:06:e6:66:88:bd:0e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Apr 18 10:01:09 2025 GMT
Not After : Apr 19 10:01:09 2025 GMT
Subject: CN=219780511fbdf706c1a8a9a4ffbff2c10aa84834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:7b:40:e4:5a:cf:b4:bb:42:16:96:47:6f:
b2:d2:d3:4b:bc:77:9c:60:a7:8d:16:1b:4b:8b:d7:
35:c2:c1:c0:b3:3d:fb:a2:88:e4:bb:25:fe:0e:30:
28:7a:b9:f8:ca:d2:9d:f6:50:df:9b:f5:e3:f9:cc:
af:a7:90:b4:5e:df:26:e1:ce:3b:7b:1f:02:87:1d:
28:f9:24:2a:50:d6:17:ce:dd:2c:0f:f9:f9:dd:23:
31:96:c5:4e:41:8c:36:33:a2:6f:94:9c:6f:98:a9:
fa:f4:ac:ca:0b:84:ea:4a:01:5d:54:fe:a8:be:6f:
54:c8:db:e3:04:32:75:d6:27:30:a2:1c:63:3d:1b:
ee:16:a3:b5:0f:6d:51:67:e2:7d:a3:52:45:cf:5a:
a7:fc:93:fe:be:21:eb:37:80:ee:5b:e8:28:f3:3e:
71:12:d3:91:73:c0:92:e1:eb:8d:eb:05:5c:5b:f8:
16:23:26:44:b3:71:a7:0d:2d:d5:16:67:e6:8d:20:
88:d8:73:3e:90:6d:c7:a6:e4:4d:07:9c:17:84:cb:
55:0a:9f:f5:cb:a7:fe:87:82:4a:ff:33:4d:db:c9:
ae:ca:76:da:61:f2:1e:5a:88:0c:83:87:31:27:66:
fc:cd:a9:41:57:9f:cb:db:16:f3:7f:4c:a4:50:0c:
f6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:80:51:1F:BD:F7:06:C1:A8:A9:A4:FF:BF:F2:C1:0A:A8:48:34
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6d:52:37:e2:44:fd:f5:18:b6:31:5a:74:ca:88:8b:ea:fc:
36:dc:33:9f:2c:8b:e3:36:5b:9f:96:75:49:53:38:4c:7d:85:
df:36:80:57:1e:0e:0d:c4:cc:6a:52:18:d9:ac:72:6e:c9:73:
7e:72:1a:6c:85:4b:83:c2:82:9f:9d:81:00:27:b8:77:61:6b:
36:a2:72:8d:58:58:99:34:eb:3c:5d:da:e9:6c:ed:83:1e:aa:
81:d1:6d:86:a0:e3:c7:10:e5:41:dd:76:22:21:01:55:ea:38:
2a:ec:9b:98:9a:ce:db:25:51:17:8d:ab:9a:a9:1f:88:ca:26:
70:25:9e:68:e8:7a:41:82:0a:a9:14:84:c6:22:fe:42:7b:e3:
a5:74:3e:bf:48:99:f1:e1:bf:9b:b6:13:aa:39:9b:86:ac:9b:
74:49:1f:87:66:9e:99:e4:9f:1d:9b:20:94:4a:49:3a:36:93:
7d:45:90:9f:49:22:8a:90:7a:52:a1:ce:13:aa:36:a8:6a:9e:
ea:f1:40:0e:0c:a2:14:49:d1:7b:38:b1:0c:27:e5:a2:ec:bd:
f8:0e:9c:a4:40:66:5c:61:3b:8e:68:84:8c:39:37:18:75:b1:
e9:0b:36:65:41:9c:04:3e:58:fc:85:63:28:30:19:41:8c:11:
0e:c2:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:43:33 2025 by rpki-client