Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
File: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft (raw, json)
Hash identifier: Exz4XyM0qxoTsBiaWYnT4/IJWELQn1igi69ro2wU5Ug=
Subject key identifier: 1C:22:41:26:67:8D:D6:DB:AD:D0:87:CD:0F:9A:4E:02:71:2A:D0:74
Authority key identifier: E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
Certificate issuer: /CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Certificate serial: 01965914421D384A4F3D16FA5FF616E0E588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
Manifest number: 0F1A
Signing time: Mon 21 Apr 2025 16:00:21 +0000
Manifest this update: Mon 21 Apr 2025 16:00:21 +0000
Manifest next update: Tue 22 Apr 2025 16:00:21 +0000
Files and hashes: 1: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl (hash: Ypg/dmz5buUtA9yiwJ4EU2mHHAgt4cF2d0jLxNHpTz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:42:1d:38:4a:4f:3d:16:fa:5f:f6:16:e0:e5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Validity
Not Before: Apr 21 16:00:21 2025 GMT
Not After : Apr 22 16:00:21 2025 GMT
Subject: CN=1c224126678dd6dbadd087cd0f9a4e02712ad074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:55:0b:a2:18:d3:b9:65:50:3c:8e:15:98:
05:a9:40:78:67:81:b1:88:dc:75:3b:84:cf:c1:6f:
54:35:1c:85:ab:c9:dc:86:e7:98:d1:6e:42:09:dc:
b2:f1:06:5d:e0:20:a7:b4:fb:15:f6:5b:2c:84:4f:
56:3a:f2:4c:79:a1:8c:b8:47:c7:22:52:94:1b:4b:
72:0d:7e:2d:2b:9a:25:48:e6:34:49:20:f6:55:a2:
cf:78:a6:be:f6:83:21:dc:c4:1f:76:43:e6:c5:c2:
5c:a2:f8:f1:e4:b7:8d:7b:21:5e:85:37:3d:62:6f:
47:e2:95:18:f9:0a:a0:e7:a4:fc:14:a3:66:f9:f2:
1d:63:45:ee:ed:2f:a6:36:3e:b1:07:d7:ac:ee:d3:
15:9b:de:dd:20:64:fe:32:af:d2:65:d4:fb:04:8b:
30:90:1b:b6:1e:a2:1d:2e:ff:c6:41:cc:18:4f:39:
87:71:12:a5:4f:26:5d:55:eb:c3:a8:5e:f2:51:a3:
06:83:45:cf:dd:19:6a:89:fc:79:dd:a7:59:28:f3:
ca:5d:78:bb:55:33:b1:ad:77:d9:77:5e:8b:ad:82:
bf:62:3f:be:92:0e:65:75:3a:8a:61:96:6a:1d:86:
99:56:65:f0:d4:1b:41:64:5c:de:c1:1d:ef:c8:2a:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:22:41:26:67:8D:D6:DB:AD:D0:87:CD:0F:9A:4E:02:71:2A:D0:74
X509v3 Authority Key Identifier:
keyid:E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d0:7c:54:72:39:8d:91:61:b5:00:80:eb:8b:a7:bf:80:e7:
f2:c6:55:65:80:5e:c2:61:74:87:02:2f:31:4f:b7:dd:0b:db:
ac:b2:b5:42:46:0c:18:2a:ef:98:61:91:74:70:d1:12:03:a3:
6b:16:00:85:11:58:23:5e:2c:5b:79:ff:29:21:2c:1b:db:23:
b9:6c:bf:0f:0f:1e:53:0b:18:df:5d:25:37:89:2d:16:f7:69:
27:9b:41:05:ad:5c:a5:11:46:9f:de:b8:91:7b:0b:65:b7:e2:
a1:0b:77:7b:8f:65:a3:26:79:1a:67:3b:e7:99:48:5a:96:c4:
fd:de:23:5f:6e:88:b2:c3:e3:95:2d:7d:da:06:91:f1:b1:4a:
95:3e:3e:8f:6a:c8:21:49:d3:18:f3:fb:86:29:0f:9b:42:49:
38:8e:f7:b9:3f:c2:eb:6b:34:8c:28:73:e5:96:03:df:d6:a4:
07:22:3d:2c:1e:ab:66:4b:9b:49:92:36:88:2c:ef:b8:fd:7c:
3e:47:09:75:1d:2a:9a:b7:e5:a9:cc:6a:09:e5:04:8f:2a:fc:
29:57:4f:9b:95:8b:f5:65:b8:0b:fe:ff:04:cc:69:52:a8:3f:
99:df:18:fc:8d:fb:47:01:bd:31:48:6e:a9:6c:8e:4d:0e:62:
ce:46:cf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:11 2025 by rpki-client