Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: rV+wdldtJBc/8jxKta1W+cT5v/6qEJO1NU+bH7lT1ZU=
Subject key identifier: 63:48:BC:81:BD:0E:2D:9E:BD:2E:3D:F4:60:EF:0E:44:DC:A2:2E:DB
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 0196538072642082A4387188467337C0FC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 1318
Signing time: Sun 20 Apr 2025 14:00:48 +0000
Manifest this update: Sun 20 Apr 2025 14:00:48 +0000
Manifest next update: Mon 21 Apr 2025 14:00:48 +0000
Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: H2LGgEmsIlaPtNh6+RUAnM0U28imC+QMwKjAPaV2Q0Y=)
2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:72:64:20:82:a4:38:71:88:46:73:37:c0:fc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Apr 20 14:00:48 2025 GMT
Not After : Apr 21 14:00:48 2025 GMT
Subject: CN=6348bc81bd0e2d9ebd2e3df460ef0e44dca22edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:3c:b8:75:80:ca:1f:5a:ea:e9:a1:bc:07:
8c:6c:63:10:cc:d6:5f:78:30:c2:b3:59:d7:ec:41:
57:6a:7a:f2:f9:c4:42:f5:de:bc:36:66:96:13:f5:
7f:a2:6c:d9:7b:76:81:85:5e:23:40:78:39:07:3f:
ab:d6:96:a1:ad:bf:6b:b4:d6:bb:50:7a:65:d7:fd:
41:e9:6d:c8:f8:96:24:ee:f9:7f:bb:d6:ca:50:ae:
c9:dc:2d:d0:c3:ba:e5:02:e7:31:34:e3:34:c5:19:
84:85:f4:c3:98:41:88:13:ed:69:15:cb:f9:4b:06:
7c:cc:7f:03:2c:72:37:cc:b7:f4:92:f9:0b:16:b2:
12:c1:97:6f:7f:c2:d6:61:34:3d:30:a6:2e:60:eb:
3c:df:c5:fd:63:e2:af:0c:86:45:5c:91:80:b6:f9:
4f:df:9c:80:6a:a8:df:d4:90:2d:7f:73:97:cb:4a:
b9:f7:a9:bf:0a:e6:17:29:dc:3d:83:f4:36:c1:a9:
f0:c8:53:01:ca:7a:9b:2a:67:27:28:98:70:47:af:
4f:dd:5c:9b:2b:fe:fc:cf:fd:54:b0:52:6b:35:ad:
68:16:10:c5:2d:f4:a3:f0:76:52:64:7d:47:a1:d1:
28:ae:b9:b8:5c:e2:f3:b6:bd:c3:b0:77:d5:f2:ca:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:BC:81:BD:0E:2D:9E:BD:2E:3D:F4:60:EF:0E:44:DC:A2:2E:DB
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:09:93:8e:e5:50:7a:6b:53:28:b4:db:b8:c5:7a:41:80:76:
ca:88:f1:8f:8f:5a:0c:ab:c1:cf:0c:99:09:80:48:85:32:a9:
7b:ff:3b:68:b6:52:9b:0f:c2:cf:71:d7:0d:34:ec:ca:a2:00:
38:76:08:bb:27:ba:36:8e:57:7a:88:a3:74:8f:61:d7:65:d2:
84:92:73:fb:e7:cd:b2:6f:32:4e:ad:0f:70:3c:4c:48:2b:ee:
27:14:02:2f:e2:80:fb:0d:cc:42:e3:b4:d5:28:9c:50:11:75:
46:67:87:a7:be:f9:59:06:e5:b3:2b:b4:d0:db:27:f5:81:8f:
a3:8d:27:69:3b:ae:97:28:1e:96:5b:2d:a7:9e:b6:7e:f2:a1:
1f:04:0f:b0:9a:d2:ca:e5:ec:90:2d:44:cc:d1:a4:2f:3c:0c:
ac:58:17:6e:6f:d3:bc:1c:c8:a7:da:76:ed:da:a5:d1:82:3d:
39:89:a8:71:fa:71:4e:82:1e:30:a2:9c:7e:ae:db:da:00:73:
62:9d:7e:46:71:45:d8:db:97:fd:b1:c2:40:11:c8:fe:de:62:
bd:29:6f:c4:95:a5:6d:bf:96:98:5b:b4:b1:4e:45:e2:79:7c:
94:21:4c:83:8d:24:24:68:25:95:17:1b:5d:76:6d:17:23:4e:
cd:fe:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:32:17 2025 by rpki-client