Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: k4HYWDewLV8F10euH4ZK5Ob63GfYc9mLTxqVf1UU04Y=
Subject key identifier: 91:68:1C:01:4F:63:9D:8C:C3:A2:08:6C:D5:E5:2E:C6:39:C0:03:ED
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 0196553764689A40A31A2C63C58E9E137A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 11B2
Signing time: Sun 20 Apr 2025 22:00:15 +0000
Manifest this update: Sun 20 Apr 2025 22:00:15 +0000
Manifest next update: Mon 21 Apr 2025 22:00:15 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: AmuunmAai/khWzOb5yYpaezZkrMi6ybhEJqJuMpzBYo=)
2: Yc_s1uEQU3LAE6G4fkBk8Gok6CI.roa (hash: fdoGqzcyq0doKgpvX55kY45aKOwDTDyxb1UE8P+KUuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:64:68:9a:40:a3:1a:2c:63:c5:8e:9e:13:7a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Apr 20 22:00:15 2025 GMT
Not After : Apr 21 22:00:15 2025 GMT
Subject: CN=91681c014f639d8cc3a2086cd5e52ec639c003ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:0b:6c:7c:e5:d6:92:2d:c2:8d:de:c2:cb:
68:06:e3:7d:b3:48:c9:3d:bd:6b:bc:df:94:0e:f3:
a1:9e:79:45:48:8b:da:5d:5b:3f:2c:41:10:f8:d1:
fc:4d:78:bf:8b:6a:19:83:00:5f:f3:50:64:80:31:
4b:c5:c3:b3:c0:7f:20:8d:b3:94:43:f9:7c:00:dc:
95:9b:c5:3d:89:2d:82:0e:07:62:7f:ca:e1:fd:00:
50:5c:2e:0b:fa:41:59:41:e0:2e:36:28:0e:3b:7a:
e1:88:44:86:fb:b8:f1:40:52:78:e6:b8:8c:e6:b4:
f6:c2:9d:bb:8a:8d:9b:e5:bd:8f:79:a8:ca:f8:eb:
78:28:49:e5:3d:6e:4c:33:43:41:b0:04:0e:12:cb:
70:16:58:43:7f:15:34:38:3d:98:27:09:cc:15:9b:
40:e4:99:6e:5a:40:a4:9e:4b:71:2a:f3:60:91:b5:
07:c3:24:db:89:39:1d:4c:ae:61:52:5b:9a:dc:be:
62:d7:cc:a6:cb:e0:c7:b1:06:16:23:f0:37:26:95:
6d:d1:23:f7:41:e4:65:b0:28:2f:a8:84:d4:d3:e0:
df:3d:fb:33:54:87:c8:ba:cb:34:6a:6b:4c:cd:e5:
44:70:23:a0:5f:55:aa:97:a8:da:0a:61:77:62:b3:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:68:1C:01:4F:63:9D:8C:C3:A2:08:6C:D5:E5:2E:C6:39:C0:03:ED
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b1:a7:46:0c:1d:a7:28:b7:29:ce:4c:2a:5b:52:d0:77:41:
58:ca:d5:e3:aa:2c:77:23:a1:82:8c:3a:63:ba:cc:ad:27:4f:
21:a9:2c:d0:be:e6:e5:6d:d7:07:15:68:f4:42:c2:36:43:06:
bf:b6:90:77:a1:b7:85:86:47:90:08:f0:4e:7b:c3:f8:a2:c0:
48:15:02:5a:78:0a:39:98:70:ad:88:45:d7:e3:81:4e:72:15:
d1:68:51:f8:55:b7:9e:b1:ef:2a:e2:2a:22:aa:a1:ab:47:fa:
87:96:be:23:15:c4:4d:f9:07:db:b1:8f:88:de:8e:7c:89:79:
1c:55:71:20:71:c5:a2:be:00:b8:27:c7:72:a3:64:a4:d7:ba:
60:78:ce:b4:41:43:6b:70:8d:c2:f0:cd:6b:49:b6:53:62:1f:
2f:96:63:75:0b:2e:33:fb:5c:02:23:da:c2:19:62:ee:18:32:
b5:7e:18:1a:c6:02:63:f3:da:a2:28:8e:d5:7b:5f:76:87:3e:
8f:43:0f:c4:9e:7d:d1:70:79:0d:76:6a:76:08:26:fd:6d:f5:
25:97:42:ff:93:b8:1e:d5:40:48:c7:59:00:62:c9:e6:f7:9f:
19:e2:2b:82:e6:e8:b6:ef:4a:5e:0b:a3:07:98:fd:b0:14:a1:
d4:e4:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:07 2025 by rpki-client