Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: ptjomEAHhqLtL5Fn+nfa8hVH01kWT+XdgiMgmBjvVps=
Subject key identifier: C3:75:6E:1E:14:55:D0:8E:55:11:39:51:82:4E:FF:D0:EC:E3:A8:74
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 0196440CDF6088266A0162D05335A9A13148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 14:00:16 +0000
Manifest this update: Thu 17 Apr 2025 14:00:16 +0000
Manifest next update: Fri 18 Apr 2025 14:00:16 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: bnEvkaWI4+0rang4NSje9dp3svqr88gB17kWX5VU0Y0=)
2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0c:df:60:88:26:6a:01:62:d0:53:35:a9:a1:31:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Apr 17 14:00:16 2025 GMT
Not After : Apr 18 14:00:16 2025 GMT
Subject: CN=c3756e1e1455d08e55113951824effd0ece3a874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:4b:6c:5b:db:88:64:8c:81:f2:b0:7f:15:
d8:18:f3:98:fa:ad:de:9e:fc:55:67:05:99:95:70:
16:b2:ec:23:b3:4d:e0:7b:ce:81:3c:0e:4a:c8:87:
44:82:6f:3f:6c:92:00:69:31:94:24:78:1a:d4:b1:
c3:7e:0b:a6:9e:9e:07:ea:a9:4a:7e:e1:9e:7f:37:
7a:7b:ff:f3:c8:c9:1f:6e:c5:6e:46:18:68:f8:7c:
0e:0f:69:90:42:42:af:15:94:7d:73:83:fd:7b:a5:
31:c7:88:33:79:69:42:14:48:6b:62:9a:e0:6e:4d:
25:05:a7:39:31:e8:ab:12:7a:a0:b0:48:78:bc:5b:
ee:5d:3c:7a:9f:60:31:9e:f8:d9:53:15:ce:a2:f5:
a0:c2:07:2d:c3:92:e6:aa:d7:27:e6:9a:55:92:8e:
8c:49:59:7a:c3:77:a8:4a:54:dc:c0:a0:ae:8b:7e:
08:17:5c:1a:c0:79:cc:62:15:ee:64:ac:e2:9e:cb:
4e:b3:ec:dc:da:0e:ac:91:22:ef:4c:26:2b:dc:e8:
8a:68:fa:f5:5d:f1:e8:20:e8:ac:2e:14:ba:74:ad:
e1:02:99:9f:55:3f:cd:f6:52:99:11:2f:df:20:83:
9c:16:c8:c7:71:ca:ba:06:d0:80:ec:59:17:cb:c8:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:75:6E:1E:14:55:D0:8E:55:11:39:51:82:4E:FF:D0:EC:E3:A8:74
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bb:35:70:4e:2b:ed:8f:23:67:8e:38:ff:75:de:7f:17:10:
9d:d4:a4:cb:d2:00:b8:64:db:3d:ec:0b:33:52:e3:97:ad:3c:
8f:d7:71:8a:0a:9e:6b:42:0c:1b:8a:1a:f4:98:cb:b0:f0:ad:
57:8e:46:66:26:38:de:d7:eb:da:85:eb:5a:90:b4:a8:69:78:
a7:88:c3:c2:5c:f6:51:2a:3f:21:23:a7:ec:64:8a:bb:c6:60:
d0:da:fd:b0:da:6b:33:d4:75:e3:5e:96:1b:e8:d8:25:1b:28:
5f:0f:c4:19:fc:c2:89:a4:15:f7:3d:5c:ba:18:71:4b:b3:59:
7b:7b:ce:29:a0:3b:19:6c:8e:c6:ca:01:04:86:a4:7e:f2:a2:
d3:51:85:5f:39:cc:ab:90:b6:e0:43:a5:93:ab:83:e9:de:04:
be:e8:af:41:df:08:fa:c8:c0:28:60:3b:0a:b1:15:5e:99:8c:
d2:98:7f:16:05:9a:05:f6:43:c2:31:8b:0b:1f:ae:1a:7f:e1:
91:b2:b2:a0:fa:53:f3:0f:c3:c2:10:46:97:98:4d:e4:b0:fd:
9c:fa:aa:e3:df:51:0f:e1:3d:bd:1d:e9:74:41:45:d9:35:60:
62:85:71:0d:02:62:67:63:e5:37:14:89:b3:6a:0b:a7:fd:4f:
9c:57:db:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:17 2025 by rpki-client