Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: R5OnZqdmiSzqWpZ69pdsGNuEF+n2IPSagF8NnWpK2f0=
Subject key identifier: F5:30:07:B2:04:5F:AE:B1:42:BA:0D:DF:CE:7E:19:47:8D:9C:48:B3
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019646326CFF872917C6867CCEACA0EE9738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 00:00:31 +0000
Manifest this update: Fri 18 Apr 2025 00:00:31 +0000
Manifest next update: Sat 19 Apr 2025 00:00:31 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: NPwrgbtqGZN2U+2bdg8ElrJ9KXgRRti5Y70h2VDRqJA=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:6c:ff:87:29:17:c6:86:7c:ce:ac:a0:ee:97:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Apr 18 00:00:31 2025 GMT
Not After : Apr 19 00:00:31 2025 GMT
Subject: CN=f53007b2045faeb142ba0ddfce7e19478d9c48b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:46:6a:5c:24:f0:7c:28:de:06:4b:15:f1:
dc:ae:0d:00:96:4e:52:57:c8:2a:d9:5c:a7:88:b7:
4e:8d:6c:85:b8:4d:fa:3f:20:d6:28:4f:30:f8:df:
23:62:c5:5e:6d:8a:2b:8c:79:f0:ae:e0:f1:cd:a0:
dc:47:ac:b0:51:3f:e0:87:10:ee:9d:50:22:2c:4e:
3b:4d:7d:07:fa:36:1f:93:36:bd:7e:50:82:94:44:
fe:7c:12:19:0e:88:fe:ea:fc:cd:76:27:b7:19:e3:
24:4d:f8:62:b2:97:80:fa:7c:21:aa:a4:8c:43:f9:
45:fa:51:92:18:1f:66:2c:c0:fe:13:4f:e4:03:58:
21:ca:c6:06:77:78:ec:e7:18:76:66:21:0e:e7:9d:
71:0d:bd:95:31:1e:1c:73:ff:83:8f:5b:6c:30:c1:
f0:84:ff:b5:1e:c9:ae:45:1d:0c:19:31:66:c8:d9:
b6:71:d1:c9:33:a7:14:37:a6:87:d6:41:05:d4:0a:
17:ca:8b:9e:d9:52:4d:2b:3b:af:dd:c7:76:72:d7:
5f:2f:94:5c:d8:e5:95:0c:bf:29:f6:a4:04:17:38:
da:60:cd:dc:ec:0b:b4:08:4c:e7:97:1d:95:ce:71:
55:89:b7:21:00:ff:86:e7:61:e5:d8:ce:b7:df:7a:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:30:07:B2:04:5F:AE:B1:42:BA:0D:DF:CE:7E:19:47:8D:9C:48:B3
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6e:f6:6d:66:eb:1a:60:4e:bc:0e:0a:8c:a9:78:cb:5c:00:
d5:fa:42:72:e7:cc:04:c8:98:61:7b:53:f6:97:c3:d1:8f:bf:
3e:d6:fe:d9:c6:ab:4b:22:d4:e1:8f:6d:b0:3a:5d:a9:25:12:
53:37:92:71:ae:1d:53:89:5d:92:33:1e:2b:8c:6e:a9:30:7b:
60:93:12:12:a3:0b:0a:3d:86:cd:04:94:bd:82:17:6f:36:39:
2f:f7:f1:40:b1:be:09:ba:75:ff:d8:1c:d0:2c:f0:99:84:b6:
cc:43:6e:96:52:5b:ee:a1:70:63:03:e8:c6:08:f0:de:0f:46:
d4:a9:f5:59:f9:16:f9:af:11:27:18:a3:70:f3:67:85:03:ce:
8c:b9:20:38:9e:bf:51:3f:12:15:23:09:b7:cf:cf:df:9b:b4:
f6:9d:84:1d:9f:42:37:f5:2a:3e:78:f1:4e:94:13:b5:e0:c6:
14:90:8f:7a:c8:e6:74:e2:37:3a:c8:0d:a8:a0:f5:d9:1c:ae:
fa:e5:27:98:36:7c:40:22:08:e6:db:51:20:8d:72:05:61:e7:
27:aa:b8:09:32:03:7c:3a:7a:df:30:8e:c7:70:1b:37:a6:10:
a0:83:34:9f:e3:93:3d:e7:8a:7c:e8:6b:b9:36:01:cb:b2:dc:
91:8c:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:07:04 2025 by rpki-client