Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: 3FyF1Y/osPrp8gXFxStvAB1V4GhVQOKeXwPco3A+ZJk=
Subject key identifier: 91:A7:D2:80:10:9C:0F:87:A0:B4:AF:0E:C2:FA:DC:B8:32:79:9C:9C
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 01963EAFAB687A473A4518D09FB84AD7F312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 1488
Signing time: Wed 16 Apr 2025 13:00:22 +0000
Manifest this update: Wed 16 Apr 2025 13:00:22 +0000
Manifest next update: Thu 17 Apr 2025 13:00:22 +0000
Files and hashes: 1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=)
2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: NtorOSkHdv0Rp1sudexQk8Z66NMr5j+oH4pCwcGqwws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:ab:68:7a:47:3a:45:18:d0:9f:b8:4a:d7:f3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Apr 16 13:00:22 2025 GMT
Not After : Apr 17 13:00:22 2025 GMT
Subject: CN=91a7d280109c0f87a0b4af0ec2fadcb832799c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:c9:f1:98:a1:29:31:40:df:a0:73:0d:a7:
80:66:c8:38:5f:5f:3e:d6:97:c4:6c:3f:9e:99:1a:
f4:c1:d6:2f:f8:88:61:8a:ee:2e:ce:2e:ea:69:89:
78:fa:f9:23:50:7f:ff:ea:e4:83:4f:d6:72:33:47:
fa:2a:59:60:fb:e0:36:f1:4d:8a:88:6d:48:73:0c:
7f:bc:c5:23:62:79:eb:1b:af:ba:b4:74:ef:cb:d2:
27:3c:fb:61:b7:37:6b:70:0d:47:22:0b:44:76:ce:
8f:34:bf:c8:c4:bb:64:63:bb:89:c7:a1:6c:18:12:
d2:48:19:5b:28:f0:f5:bc:5d:90:9d:64:c2:b4:b4:
ef:f4:6b:28:fe:26:1c:41:45:20:76:ed:9d:ae:73:
27:c5:d6:5c:59:37:3c:46:76:c4:15:70:54:65:42:
62:29:0e:ff:17:e9:45:35:cc:3b:e6:4d:cb:bb:97:
44:df:95:c9:62:80:f6:b9:50:7e:90:ec:a0:ea:cb:
51:46:5b:2e:94:fd:6e:bc:54:eb:24:ed:95:14:c0:
b6:6b:13:bd:3a:c4:d6:20:6f:98:6f:bd:0d:01:b5:
15:54:d4:b1:c3:32:32:24:36:58:f4:47:cb:23:10:
ab:c3:ad:cc:95:50:e4:dd:d6:ba:68:7a:23:f8:8f:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:D2:80:10:9C:0F:87:A0:B4:AF:0E:C2:FA:DC:B8:32:79:9C:9C
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:79:7f:a7:7e:20:22:e9:94:da:8b:1f:14:b1:38:0e:77:e6:
5b:12:46:ee:b2:09:28:9a:f6:12:5e:38:8a:1c:31:e0:c6:d3:
22:d2:a2:49:1e:d5:ad:4f:5b:b4:6b:7b:43:0d:a1:0f:31:1d:
74:f4:24:3e:da:90:05:ba:e9:03:55:8a:3e:3d:bd:5c:a8:42:
bd:e1:c2:40:e5:dd:2f:c2:c7:f5:41:a8:0f:1e:0c:fa:9e:43:
aa:6d:b0:f5:fd:a3:ca:28:47:a6:f9:d7:84:aa:c8:68:7e:cd:
17:48:56:e5:7a:49:bb:d3:65:77:dc:b0:b3:61:0c:51:e2:96:
70:64:37:be:50:0a:75:35:4e:f8:33:6f:0c:5f:50:48:34:ea:
80:01:68:ce:bc:10:62:a0:f2:99:2e:6a:de:44:cb:03:a0:d2:
0e:da:45:82:38:fa:2b:57:7e:24:9e:67:2f:ff:12:90:ad:ce:
a2:87:42:d4:80:cf:64:05:f6:29:1d:58:b2:f8:7e:4c:27:ed:
41:e0:85:5c:2a:ab:02:ad:71:6d:b4:ca:21:28:b4:5a:d2:24:
fd:7b:d9:3b:46:ef:1b:e3:dc:7b:cd:61:b9:0c:84:cc:15:3e:
fb:ca:97:f5:ee:11:6e:54:af:ae:ab:62:85:3b:24:e0:65:d0:
b3:48:62:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:44:47 2025 by rpki-client