Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: XJyI3LgyeiSHLBiM8d7noUkaFI6rfDnDWxgHCuHqZTo=
Subject key identifier: 30:A6:16:D3:A8:6B:0E:C2:B1:BA:83:84:B3:10:AC:44:02:CE:4B:4A
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 01958B168473D715F20D099D14501AD03E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 09A8
Signing time: Wed 12 Mar 2025 16:01:03 +0000
Manifest this update: Wed 12 Mar 2025 16:01:03 +0000
Manifest next update: Thu 13 Mar 2025 16:01:03 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: 0WxXh6rta3UFTZbJ9a7zs7f4B1t3yo5ezKRUcSvDZOY=)
2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:84:73:d7:15:f2:0d:09:9d:14:50:1a:d0:3e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Mar 12 16:01:03 2025 GMT
Not After : Mar 13 16:01:03 2025 GMT
Subject: CN=30a616d3a86b0ec2b1ba8384b310ac4402ce4b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:ab:73:8a:ad:9e:57:48:ad:26:55:0c:3d:
16:fd:1d:e4:cd:5c:a4:fe:82:23:af:c3:f4:21:e4:
05:f4:55:fa:4f:6a:d7:a6:f0:e8:6c:47:e5:4a:21:
7a:8f:cd:31:79:fa:59:60:48:57:8c:22:d0:3c:09:
eb:ca:d3:fb:92:3a:f8:60:c1:db:e5:b1:f3:70:c5:
f0:08:91:85:3a:2d:7f:14:d1:bb:df:44:c1:d0:96:
00:ad:e0:57:03:99:9e:02:0f:8f:b7:90:5f:18:65:
30:27:c1:80:29:58:9f:ca:52:84:2f:56:0c:f9:b3:
51:f4:08:ce:81:3b:ca:06:b4:b5:fe:18:aa:39:ec:
4f:ce:70:7e:95:b7:c6:a3:3d:91:7b:8b:96:1e:36:
e9:65:67:fe:23:aa:d5:c3:19:9b:ff:f5:a2:a4:69:
da:52:6f:84:9a:51:ff:70:87:42:a0:d9:13:28:5a:
ed:e9:74:95:2d:8c:04:aa:3f:10:12:3e:8f:06:42:
f0:5d:b3:aa:4d:76:f1:fb:e2:bf:5d:9f:f8:55:a1:
24:38:e4:b4:6f:0d:5f:f3:9f:c0:e8:30:5e:29:91:
15:7f:d3:68:8e:eb:dc:57:5b:6b:1c:20:2f:86:77:
d1:dc:e5:09:df:ea:11:68:a4:ba:78:fc:8a:11:91:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A6:16:D3:A8:6B:0E:C2:B1:BA:83:84:B3:10:AC:44:02:CE:4B:4A
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:80:67:0e:ad:b5:c4:6f:81:bd:32:12:70:d6:36:b9:8d:73:
21:22:12:63:46:66:c7:51:c9:2c:ec:16:15:02:33:99:70:4f:
24:59:06:05:c0:e9:09:95:74:5b:7f:bf:c8:6e:39:6c:c2:ee:
6b:3d:c9:74:d5:71:bd:86:44:21:10:b0:da:c3:60:d9:1c:6b:
78:f9:ef:02:67:02:00:3d:ce:dd:7e:ca:b6:03:49:d3:af:e9:
68:42:4a:37:2b:f7:a4:92:ba:5f:c6:a3:7d:72:48:26:5d:ab:
1a:d3:69:99:e1:40:d8:8e:8c:8f:7e:b3:16:43:5e:01:aa:d1:
27:64:23:87:da:bb:e9:f7:db:62:08:93:39:f4:b8:83:97:70:
0b:1e:7a:55:a2:4c:03:98:7c:1a:68:a5:41:4d:60:ad:36:2f:
4a:5e:9a:45:82:c6:29:cd:e7:4e:0a:8e:de:f8:5a:89:3d:e0:
39:9f:4f:8d:ce:91:95:17:2d:da:3d:51:2b:de:92:c9:24:b5:
a7:8e:ad:d3:b8:71:dc:a6:b6:0e:52:16:ea:32:26:6a:5a:fe:
96:0e:39:2c:98:db:69:4d:1f:7b:e3:01:d6:41:c9:14:3b:56:
c5:2d:80:37:c2:ce:29:89:52:73:c2:92:b6:3f:66:9e:a7:28:
16:45:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:19 2025 by rpki-client