Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: 0aENeP2JDomf+qe1A6peivluQTv2KEERVeWvKS7huOw=
Subject key identifier: B1:8D:F2:E3:09:6E:44:3F:A6:55:8B:4A:42:E3:C7:8F:88:0E:5F:34
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 01963E78BCA9018B5AC664EB755CF1CA7385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 0475
Signing time: Wed 16 Apr 2025 12:00:22 +0000
Manifest this update: Wed 16 Apr 2025 12:00:22 +0000
Manifest next update: Thu 17 Apr 2025 12:00:22 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: lWX2pVmNpo68QrPHMra1NRpWtg8v3qz3K9EE8pI1cwM=)
2: h3E6-zfi_xyDMKZ-mjqCgktKu5o.roa (hash: jFGY2eFUS/f/RiSzQYMsT/EoV/0tdGrsjyAMY/vYpEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:bc:a9:01:8b:5a:c6:64:eb:75:5c:f1:ca:73:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Apr 16 12:00:22 2025 GMT
Not After : Apr 17 12:00:22 2025 GMT
Subject: CN=b18df2e3096e443fa6558b4a42e3c78f880e5f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:16:1f:74:af:a8:a7:34:b1:80:ca:c8:d2:
b0:3c:3f:60:1c:3c:4f:fd:57:26:4f:e7:f1:c0:5f:
53:5e:60:90:62:b0:a3:11:90:1d:57:e5:06:f9:e5:
33:c0:d5:fd:59:eb:19:62:f7:41:99:1b:55:81:98:
e8:25:ba:2d:6b:18:25:93:a9:63:ad:58:f9:2e:d2:
c5:dd:7d:07:e7:3a:fa:36:da:0d:3b:b9:8d:0c:73:
da:84:90:ef:b2:d1:03:ca:1d:17:d5:cf:71:e8:5c:
84:ee:b9:82:6f:8a:90:72:45:cc:76:2c:0a:fe:67:
47:6d:ac:f0:2f:24:16:c9:81:81:2d:4b:72:d2:02:
44:75:66:04:6d:54:a1:ee:65:96:09:00:75:f0:d3:
17:88:21:2f:74:ff:0b:93:6d:31:1b:be:a7:73:16:
45:1b:7e:b9:b1:91:69:fd:e5:d8:8c:b4:1a:62:a5:
56:cd:32:56:90:d0:28:7e:55:c2:e0:19:f3:0c:fe:
c3:88:05:23:ea:f5:1c:5c:15:9b:9a:ba:4c:54:c8:
0a:07:23:2f:ed:cb:20:4f:14:d8:23:31:c9:59:35:
3c:48:26:08:2d:79:da:2f:35:03:34:45:67:96:ce:
a8:28:38:86:76:cb:f7:4c:91:10:e9:b4:a9:18:f0:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8D:F2:E3:09:6E:44:3F:A6:55:8B:4A:42:E3:C7:8F:88:0E:5F:34
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c6:b6:1d:98:a2:4b:bd:6a:b0:35:06:23:f1:c2:cd:69:3a:
eb:64:d9:e4:c3:8e:60:03:ca:d8:bb:4b:9f:67:70:90:af:80:
f2:b8:e5:cc:8e:10:0a:a0:63:56:63:51:46:5b:e3:7e:c5:1e:
52:f8:64:0d:ef:7b:fc:c3:28:c6:3f:37:9f:39:6d:18:94:7f:
ca:92:1c:0b:db:e0:03:30:e8:c2:31:d6:95:6e:f1:19:69:b4:
f8:94:1f:8d:f3:5b:f8:d9:fc:ad:d5:54:b8:cc:40:00:06:54:
f8:a0:f5:8f:3e:a2:58:58:dd:31:db:86:1e:59:33:17:f2:b1:
a3:d5:77:c2:47:c0:94:78:c1:97:1f:bb:2e:d3:b6:88:ca:8f:
f9:d6:c1:09:36:2e:16:9d:c4:f6:17:f8:1f:00:64:f0:91:d8:
e6:f1:37:29:7d:c7:e6:c7:32:a4:cc:e8:ab:e5:73:43:11:83:
8a:3d:d7:e7:cf:d5:19:66:52:86:e2:58:76:9e:8b:3b:9d:10:
a7:76:16:be:51:ca:52:70:9f:87:af:92:b1:14:2f:22:58:04:
7f:55:f4:02:97:f0:29:96:71:7b:2b:29:d7:d7:db:cf:26:a4:
35:f1:78:62:99:c3:b7:52:56:07:e0:2c:6b:16:d1:0a:0a:27:
0d:ad:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:57:06 2025 by rpki-client