Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: LD2Fy6C0JwYO0WN9IG7bAcxF9QGWZasG3M+vObJVxwc=
Subject key identifier: 5E:C1:6E:D4:4A:43:54:6F:2E:BA:41:8E:99:48:4B:2D:7B:04:B4:81
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 019611A0AA6EE09B45BF25941D059E0BC4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 14D7
Signing time: Mon 07 Apr 2025 19:01:03 +0000
Manifest this update: Mon 07 Apr 2025 19:01:03 +0000
Manifest next update: Tue 08 Apr 2025 19:01:03 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: 7vV3gpXLSVlPs3txgYJKcrDXTkVMR0+l1LCyaCHH5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:aa:6e:e0:9b:45:bf:25:94:1d:05:9e:0b:c4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Apr 7 19:01:03 2025 GMT
Not After : Apr 8 19:01:03 2025 GMT
Subject: CN=5ec16ed44a43546f2eba418e99484b2d7b04b481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:70:20:a9:c0:46:44:b9:64:0a:da:c3:58:
ea:c8:11:b4:01:85:15:bb:3c:35:5a:09:4c:dc:12:
73:95:78:07:65:18:b2:4b:d5:c9:86:11:5c:ec:8d:
40:62:97:a4:45:a0:34:93:86:dc:ec:aa:eb:32:aa:
6a:5c:58:c7:d8:7a:b2:57:ad:f5:f7:9d:67:9a:08:
ea:d2:24:46:0c:a1:66:12:88:3c:24:cf:00:39:b6:
df:5a:b3:0e:c5:e4:b7:fe:54:19:56:d0:6c:77:90:
14:d7:6a:74:ab:dc:dc:d3:dd:99:7f:93:12:d6:5e:
f3:1d:54:0f:08:10:d4:01:46:bd:ab:85:43:62:6d:
dc:ce:96:3f:59:65:d2:30:5c:3b:0e:c8:05:a5:a7:
d8:3d:d9:25:c6:2b:95:96:ab:f8:68:b1:d0:af:00:
1a:28:24:e3:3e:92:91:cb:13:2c:9e:44:35:c6:4d:
47:59:99:3e:7e:f9:d5:36:39:e1:13:ec:f4:87:37:
cf:5f:41:31:96:5e:54:d6:40:64:50:93:bd:d4:6b:
68:4b:ff:05:27:1c:23:97:80:3d:c7:c2:a1:40:84:
f4:56:a8:89:fb:23:a7:31:53:2d:68:8d:5b:0c:2f:
21:a7:de:28:68:24:b1:b0:d4:ee:e7:a3:3b:fc:e9:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C1:6E:D4:4A:43:54:6F:2E:BA:41:8E:99:48:4B:2D:7B:04:B4:81
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9e:a1:6b:1d:86:cf:9d:19:23:2d:21:dd:dc:a2:a3:9f:ee:
f1:2f:b3:cf:ed:c1:ca:05:58:24:fd:00:62:bf:41:77:59:96:
5a:4f:c7:0f:06:31:d6:2a:98:1a:a1:c8:b2:b3:86:b7:53:f7:
c1:69:fa:ad:f2:80:2a:0e:81:ea:0d:98:e5:ee:9c:fa:43:4c:
bf:39:01:4c:a2:38:93:39:0e:78:d1:e9:49:97:e4:74:87:46:
11:88:c3:a7:de:63:8c:c4:05:28:b7:dd:62:01:5c:37:00:d9:
b1:89:e7:5c:d6:39:c2:6d:eb:5b:a5:64:c8:09:4e:f9:a9:e9:
9d:43:52:28:e2:9e:bf:47:f2:dc:4b:81:d4:88:d7:74:dd:96:
ab:79:e4:72:7e:2c:0b:dd:72:1c:05:a7:86:99:a5:8f:19:d4:
62:56:e0:af:60:eb:e9:71:61:ab:4e:3a:72:f3:6e:12:84:8c:
d4:e2:4a:05:8b:17:2c:a6:bd:86:09:0b:a5:c2:75:11:02:6d:
fc:55:0d:13:74:b4:e4:83:53:fb:4e:53:17:b9:e7:a1:5b:51:
90:fd:a3:93:10:9e:69:53:0a:68:a6:83:a9:eb:b4:81:f1:d9:
6e:84:75:30:1f:d5:1f:91:05:ad:8b:71:55:e0:51:68:2c:43:
49:4c:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:08 2025 by rpki-client