Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: PZatsOc936xlFAsH7ZjXzlfWqVCBul9GrmN7DNFZhQ0=
Subject key identifier: F9:69:1F:34:C6:E6:7B:EF:43:02:01:79:66:D9:D5:15:DF:AB:E7:8D
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 01962B9816D4D2173D7C27CB30D38B700C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 14EC
Signing time: Sat 12 Apr 2025 20:01:49 +0000
Manifest this update: Sat 12 Apr 2025 20:01:49 +0000
Manifest next update: Sun 13 Apr 2025 20:01:49 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: F8Eql5p84ihMPWHVzRO6IcXvocI0ZrawzZ+AeoUBw+E=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:98:16:d4:d2:17:3d:7c:27:cb:30:d3:8b:70:0c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Apr 12 20:01:49 2025 GMT
Not After : Apr 13 20:01:49 2025 GMT
Subject: CN=f9691f34c6e67bef4302017966d9d515dfabe78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:17:f3:84:a9:91:19:40:0f:18:16:d1:ea:
3e:62:91:fc:af:10:10:ff:fb:e1:d0:2e:45:b7:71:
fa:c9:46:78:e5:d3:ee:65:41:48:1d:7e:c8:0d:5a:
32:4a:66:de:2c:16:28:b9:3e:83:6c:31:c7:d4:ff:
b8:7c:9f:aa:01:a6:d5:f6:8d:3b:41:6f:62:90:2e:
ba:63:9f:25:cc:f4:07:30:3e:d6:94:54:1b:f5:00:
62:af:8a:5c:2c:14:31:79:27:44:9f:e9:f8:66:d5:
e2:a7:16:d0:eb:6a:2c:4d:10:b1:75:1e:05:df:5a:
02:fd:ef:6b:fe:82:b5:09:f7:f7:f2:0f:98:41:4a:
31:68:3e:9f:47:4c:c9:ae:38:2f:c4:d8:9e:d7:21:
a5:0b:d9:15:64:16:fa:78:e2:64:f7:01:2b:57:f8:
8c:e9:d0:90:03:f0:27:1f:73:ac:98:89:7c:61:0f:
23:68:7b:6f:c2:75:ad:a4:41:1d:e4:34:91:6e:90:
a5:fc:b4:71:f9:59:a0:bd:35:8d:f9:a6:73:1e:10:
a3:45:b6:20:14:2a:15:a8:fa:c9:c6:7d:1c:17:68:
e9:30:b0:fd:c2:1e:08:5a:d2:4d:07:2d:2d:98:b9:
35:86:03:0f:16:71:c9:62:8f:9e:a5:3b:a5:cf:80:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:69:1F:34:C6:E6:7B:EF:43:02:01:79:66:D9:D5:15:DF:AB:E7:8D
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d0:a4:f7:86:6d:72:be:1f:95:cf:3a:de:3b:c7:5e:4b:9b:
80:d9:7b:0d:df:a6:44:c6:cd:9d:21:3d:44:43:73:61:12:0e:
23:1d:fd:e1:b8:81:ef:e8:ff:f1:25:1e:25:c3:47:fa:64:4f:
db:9f:4a:42:57:84:18:c5:97:40:71:d2:e5:5c:57:0c:d9:e1:
af:98:22:96:bc:a8:47:7b:15:18:f4:a8:c1:17:e1:3c:4c:67:
f2:dc:b7:65:78:83:e4:8e:0c:8e:6b:d5:84:ce:b0:10:61:80:
8e:41:29:32:68:16:fc:93:d6:1a:b4:15:c4:50:56:1c:5e:02:
2a:3b:fc:f1:7b:cc:02:de:e3:c0:4c:ca:45:2d:2d:f8:cb:a3:
10:f0:1d:c4:10:ee:8b:8f:f8:96:15:04:99:cd:93:a8:1b:06:
23:e8:c7:26:97:1c:6c:ce:a2:87:56:53:95:d0:35:b0:00:69:
1d:70:e2:16:6a:6f:0a:f2:c8:4c:82:bd:7d:a5:c7:45:2e:ec:
c1:da:4f:17:83:9e:98:c3:d9:4e:83:21:ec:f3:49:3b:7e:60:
6f:1c:41:ce:a8:0d:b2:de:0d:2a:10:97:be:a7:bf:8b:db:ee:
1c:b4:14:68:c9:65:5d:20:af:87:f0:5e:99:1d:55:34:ed:42:
fb:e5:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:38:19 2025 by rpki-client