Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
File: v4F9yFUt82EP_EVEGz-BRk5Incg.mft (raw, json)
Hash identifier: i4QU5Z+iROIsaN+Es0jwMlU7NwrysOOcSryO2kHgVlI=
Subject key identifier: 05:B0:7D:2E:89:88:0A:56:2A:A8:86:26:3E:0B:C7:59:7C:23:1C:1B
Authority key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
Certificate issuer: /CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Certificate serial: 0196403053D1E3AE9DA81E772885E4BBE478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
Manifest number: 06C3
Signing time: Wed 16 Apr 2025 20:00:31 +0000
Manifest this update: Wed 16 Apr 2025 20:00:31 +0000
Manifest next update: Thu 17 Apr 2025 20:00:31 +0000
Files and hashes: 1: 36ETTT31Rv9Wj7u6PqyJTy0CjDw.roa (hash: tx94g3vqrXkgyvU4ElzQ7jsADUb8XlCc6Q0poIVPLl8=)
2: v4F9yFUt82EP_EVEGz-BRk5Incg.crl (hash: /aI3KJJleXDhTUsLwRbI0wPsBEU3+Y9nW6l0fxgXpuc=)
3: w6CIFsXhe3gJ8pF9EHg-adXDS5c.roa (hash: G5Kk3492Lln+8yGKEbYcF38b0XZXBFYUAf9aIet6yWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:53:d1:e3:ae:9d:a8:1e:77:28:85:e4:bb:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Validity
Not Before: Apr 16 20:00:31 2025 GMT
Not After : Apr 17 20:00:31 2025 GMT
Subject: CN=05b07d2e89880a562aa886263e0bc7597c231c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:32:66:37:aa:9d:e1:15:45:70:36:bd:4e:8d:
6d:3d:cc:6a:61:88:92:46:8c:d2:4f:f0:aa:f6:04:
fa:25:73:d1:d9:49:b8:76:8e:55:1d:6c:1a:56:30:
db:0d:33:d3:14:5c:1b:4c:bd:fb:07:41:1c:76:4d:
4b:5a:2f:bb:a5:2f:6a:b1:d3:a8:46:fd:ac:5a:24:
4e:1f:36:ae:21:fb:73:f7:95:5d:4a:cd:0b:31:b6:
3a:74:d7:f2:c4:43:b8:66:fd:b3:ec:9f:b7:c0:09:
c6:b7:e4:e0:74:d8:cf:3d:18:51:c8:17:a0:cb:58:
d2:90:2c:ac:7a:27:98:1c:72:56:1c:7d:f2:94:ca:
6b:a2:1b:4c:e8:37:3b:02:f1:31:ed:75:ca:d2:5a:
14:63:d0:d0:85:95:c2:9d:43:75:3e:3d:ca:7f:3a:
d3:7c:29:47:5c:d3:2a:62:10:62:28:2a:d1:62:86:
b9:81:8a:22:25:b7:82:aa:aa:e2:6b:cd:c5:14:5c:
86:70:6d:fc:15:a0:e6:12:65:e7:1f:fc:b5:16:4d:
23:9f:6e:58:e1:84:54:84:ed:df:08:2a:69:f0:51:
53:94:5a:d8:ee:30:79:50:56:83:46:85:25:be:85:
82:94:85:61:54:a8:1f:eb:31:d6:ee:10:40:16:bb:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B0:7D:2E:89:88:0A:56:2A:A8:86:26:3E:0B:C7:59:7C:23:1C:1B
X509v3 Authority Key Identifier:
keyid:BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d0:f2:d0:8a:ef:e1:1f:2f:e4:91:f8:16:c1:73:55:ca:4d:
a1:da:87:51:f7:33:12:57:71:63:3a:ea:17:ee:9f:61:46:95:
40:6f:68:5e:1f:e9:4b:5d:72:81:99:81:65:be:37:de:19:8b:
9a:d4:e2:f8:1f:b0:f0:4e:38:2e:b8:40:d2:6c:5e:4e:53:4f:
22:5d:c0:9f:0d:8c:9b:b3:2f:b2:f1:2b:b9:fb:0d:37:6f:89:
bc:31:1e:ed:0c:9d:31:44:4e:52:18:6f:c2:a4:7b:07:df:17:
e5:11:bb:4a:0a:10:e2:2b:f7:5b:bd:6a:64:6d:e2:b5:ba:18:
68:f5:3a:e2:60:54:fe:8a:81:ec:87:ea:86:fc:f8:ee:8f:70:
0e:8b:a5:64:84:d5:24:de:af:f9:37:5d:fb:4d:3a:c2:e9:a7:
48:35:4b:52:81:68:b0:dd:bd:56:51:e8:97:cf:8f:4f:c4:81:
bd:86:bd:14:53:df:ba:3f:0f:af:24:ac:75:17:f5:7c:bc:04:
a1:f6:76:4f:40:bc:8c:d7:c9:7a:85:34:0c:5c:95:ac:64:93:
58:52:08:71:21:ae:13:f7:68:94:1c:59:15:63:eb:5f:a6:0c:
f7:70:46:4c:55:b5:fe:2d:76:d0:21:a9:bd:8b:a8:97:8a:e3:
d5:32:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:04:12 2025 by rpki-client