Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
File: 4u1kMJX_plfeBc7spdILJlwbf1I.mft (raw, json)
Hash identifier: e7q0CgdRTx3mdzM+1/0uh0Tt3k4dZ46wbK4Qezz41sU=
Subject key identifier: 85:58:33:82:2E:CC:6E:8A:54:CE:AB:6B:B6:AA:A1:96:E0:D0:19:E7
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial: 01964FA35CD68996FB485FE6E91A013D1BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
Manifest number: 0D79
Signing time: Sat 19 Apr 2025 20:00:28 +0000
Manifest this update: Sat 19 Apr 2025 20:00:28 +0000
Manifest next update: Sun 20 Apr 2025 20:00:28 +0000
Files and hashes: 1: 4u1kMJX_plfeBc7spdILJlwbf1I.crl (hash: lQO2ccsau9JmKXKdyNo9y/SnFWNSQdhjzyHft+VKNDk=)
2: m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa (hash: AiilIUPxxw08sr3kqUjUq/R6OJzvAGqmXWhwnhpEZ7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:5c:d6:89:96:fb:48:5f:e6:e9:1a:01:3d:1b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Validity
Not Before: Apr 19 20:00:28 2025 GMT
Not After : Apr 20 20:00:28 2025 GMT
Subject: CN=855833822ecc6e8a54ceab6bb6aaa196e0d019e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:99:26:58:76:94:94:45:5c:b6:e9:1a:f7:
32:31:7e:7f:45:47:e3:bc:89:e3:23:c9:3d:72:65:
b6:5c:08:b4:5a:ee:2b:b3:ea:4a:69:c5:e3:0c:1b:
b5:ef:69:3c:10:4c:0c:24:b8:5b:62:15:e6:e2:29:
85:25:4a:db:4b:c9:98:ae:3a:5b:dc:85:c6:11:e6:
cc:99:35:c0:6d:df:19:ca:8b:6c:bc:0a:42:58:69:
5c:dc:54:0a:7e:a5:3f:ec:ce:76:7a:b7:09:22:5c:
fa:e7:b9:e6:fc:4f:06:5f:6b:09:63:71:e1:dc:db:
fc:58:0e:34:ab:07:45:52:d2:12:7e:b3:6d:c4:85:
52:be:a5:85:60:d7:50:85:d7:8e:98:22:ae:28:dc:
a4:6b:b8:84:4a:e9:09:56:f4:49:56:27:5a:39:ba:
d0:5e:40:45:7a:b0:ba:99:77:97:c0:91:b7:fe:62:
0b:20:28:2c:56:a1:57:ce:2f:15:39:8d:25:7c:61:
c7:7c:33:5b:c8:6b:6e:de:26:bb:06:c1:d1:5d:10:
55:47:04:56:33:f8:07:04:aa:5b:b5:f3:34:98:ac:
cd:75:aa:78:00:44:d1:f2:32:8d:7e:f4:81:bf:5b:
24:b5:d4:03:09:37:65:6c:f7:29:d0:ef:08:9d:e6:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:58:33:82:2E:CC:6E:8A:54:CE:AB:6B:B6:AA:A1:96:E0:D0:19:E7
X509v3 Authority Key Identifier:
keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3c:db:21:4d:3e:9a:76:ff:20:dd:4b:35:31:66:05:dc:bd:
4d:77:91:b7:fe:c6:a8:ad:30:cb:95:35:34:bc:6e:5f:88:b6:
05:f1:46:54:38:b4:63:54:58:e5:6e:98:25:53:35:35:9f:51:
7a:bb:7e:3c:f2:e4:0f:f0:42:87:c9:95:24:ab:2e:8c:4d:cd:
49:1e:70:9d:94:3b:4e:3c:e3:45:dd:38:86:06:0e:d8:5f:14:
7a:c5:ce:35:b5:35:52:98:e1:a6:7c:98:2f:ac:fe:c0:68:3e:
8b:f4:23:68:6b:2e:f9:ee:21:e6:de:c5:e0:ce:40:96:f4:0b:
bf:c1:be:90:df:af:ad:14:9c:62:15:eb:b5:84:d9:05:91:40:
43:73:01:d2:67:d8:e5:45:5a:e5:4f:63:8d:08:cb:03:5d:3c:
d2:51:de:83:3a:63:e2:b7:45:20:1a:d9:73:d0:4a:81:3d:05:
79:d6:23:01:1e:ea:a2:2b:ff:f6:c6:72:0d:a6:36:91:ce:96:
c5:d5:63:37:11:f7:2a:70:54:f5:a4:58:e2:38:9f:8b:2e:6b:
e9:39:8c:c3:0d:a9:0b:aa:13:f5:70:61:53:6a:2a:b6:5c:59:
48:c3:cf:b6:f2:d1:a3:89:a3:03:6d:c2:31:56:d1:82:a7:8e:
c7:ed:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:45 2025 by rpki-client