Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: 6jjTJ+Ot8pfwm5PMEzm/hAKd4RflxQUPZDhPCC5Uvms=
Subject key identifier: 86:8E:A6:3B:EE:9F:27:12:32:F4:38:08:6C:B6:BF:57:B8:00:82:75
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 01963E78932E2536EE6AB726F7D749132DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 14F7
Signing time: Wed 16 Apr 2025 12:00:11 +0000
Manifest this update: Wed 16 Apr 2025 12:00:11 +0000
Manifest next update: Thu 17 Apr 2025 12:00:11 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: 9bYpRZvLnD6ENPYe+xbSMnS7+sJKDHckieoP9V1Obqo=)
2: 883carP1hhWb3_MmiKGn80hphf0.roa (hash: cPZWjDagkqb5tEO5wfwI807e/U08AzhpwxGlaqpcxgI=)
3: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:93:2e:25:36:ee:6a:b7:26:f7:d7:49:13:2d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Apr 16 12:00:11 2025 GMT
Not After : Apr 17 12:00:11 2025 GMT
Subject: CN=868ea63bee9f271232f438086cb6bf57b8008275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:c8:11:73:e3:ac:82:88:74:f7:7e:aa:57:
ce:e3:f4:3b:85:8d:69:70:4a:70:f9:7c:f2:4c:9f:
a3:ee:35:1a:24:32:83:b9:78:2c:f4:ad:6c:47:b5:
a8:0f:9e:8a:19:84:52:16:27:01:1b:75:96:78:de:
a6:d4:4a:83:e7:bf:f2:8d:74:23:11:9b:ec:94:4e:
6a:69:94:05:54:37:bf:f8:a4:ca:fd:48:94:c5:8d:
33:d5:d7:fe:86:da:cb:e1:19:6a:48:b5:1a:6a:7d:
3b:7e:56:29:c7:88:2f:54:5c:3e:49:02:0e:e1:e9:
18:37:54:52:ca:62:d1:6c:88:18:bb:5a:39:ad:2f:
a2:f9:75:63:9c:23:59:8e:f6:47:e6:db:60:04:11:
db:24:3b:79:c9:9a:60:f8:2b:67:01:2f:61:a1:71:
17:36:f1:c6:16:e0:41:b1:ec:fb:84:8e:f8:30:e4:
47:80:16:a2:f0:c4:b1:a1:b2:c9:99:47:af:7e:9c:
89:3a:db:4a:f1:96:5e:5d:86:e8:2c:6b:cd:9f:9a:
47:33:06:2c:e8:cb:6b:65:5c:2c:12:1d:04:08:fd:
4e:d9:83:b2:05:43:2b:2d:bf:55:bf:59:e7:75:07:
11:b8:87:b8:d7:0b:65:f3:a4:0c:a1:24:d7:28:76:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8E:A6:3B:EE:9F:27:12:32:F4:38:08:6C:B6:BF:57:B8:00:82:75
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:16:79:0e:dd:7f:ff:26:8d:b0:35:55:40:71:da:7c:93:c5:
a3:ae:0c:09:77:8a:fd:b0:15:43:cc:d3:80:04:96:8d:1f:72:
8a:8d:f4:51:bf:7f:0b:54:46:2f:bc:66:e7:7f:ce:fa:31:c5:
84:f6:3f:86:bb:ee:9b:39:77:d3:01:4a:53:22:2a:eb:3e:23:
5f:6a:60:03:e6:15:d3:67:c0:2f:ca:24:8f:01:4f:c1:6f:dd:
d3:88:17:76:43:56:fc:6e:da:e8:1f:7c:23:e9:aa:ea:80:8c:
26:bd:c3:a7:8d:23:4a:c1:11:78:50:b2:51:35:1e:ab:b7:6e:
06:27:60:4e:ce:c3:25:8b:40:9d:55:1f:8e:0c:18:2e:90:7c:
9a:df:37:80:bd:90:0e:2b:62:57:a8:be:14:ae:29:ad:60:c9:
8d:62:df:66:25:db:bf:57:d2:3d:39:ef:f4:f8:7e:c4:09:1a:
b5:97:4e:2f:a6:11:72:dc:d3:a9:d6:e2:b1:1d:5e:38:a0:1b:
e5:9d:99:f3:ce:1c:c5:52:f5:86:65:a4:5e:dd:b7:ff:42:4c:
5f:cd:5d:ef:61:3b:3c:bf:eb:7f:73:6e:d6:42:08:e8:91:31:
11:d0:0c:eb:d6:6b:83:48:9c:14:f1:ca:c0:a3:7f:e5:46:b1:
87:1b:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:28:53 2025 by rpki-client