Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: jBEcKXo+KmYMHxipr2O4j80s2XWHctYLazxC9xSre3s=
Subject key identifier: 8B:A2:BF:9C:E2:73:9C:5B:58:78:45:54:42:B9:44:14:1B:3A:7C:F7
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 01964D7E82A89253D8B671225E77F23A9E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0C0C
Signing time: Sat 19 Apr 2025 10:00:58 +0000
Manifest this update: Sat 19 Apr 2025 10:00:58 +0000
Manifest next update: Sun 20 Apr 2025 10:00:58 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: jBmu1DgPH4vNNadio1f6k352ywHSUxAWNNFCwHSC/sk=)
2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:82:a8:92:53:d8:b6:71:22:5e:77:f2:3a:9e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Apr 19 10:00:58 2025 GMT
Not After : Apr 20 10:00:58 2025 GMT
Subject: CN=8ba2bf9ce2739c5b5878455442b944141b3a7cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:c6:66:f4:4f:e4:79:30:4a:3b:ec:5c:00:
c9:7e:8c:eb:e0:7d:52:a9:7c:17:f9:2e:ad:aa:84:
35:6e:ee:8f:16:1d:a1:41:f8:b9:ba:59:69:eb:ba:
9d:96:76:58:25:db:31:67:ce:1e:33:2b:04:88:64:
6f:0e:f2:0e:de:38:3e:af:0e:6f:a6:4f:3d:2c:3b:
a9:c2:48:71:af:fe:7c:cc:c4:6d:69:fe:91:6f:ab:
34:fb:72:41:fa:45:5a:46:f1:12:bb:06:ad:10:57:
6f:a9:3e:43:24:07:5c:4e:eb:94:40:0a:b3:0f:26:
3f:52:52:70:63:f8:45:68:e5:bd:98:5d:62:08:01:
35:52:f8:e3:db:b0:b3:80:64:e9:66:2f:16:2f:05:
6f:67:e7:9a:32:cb:e6:21:98:16:24:e0:1a:47:e6:
d9:dd:41:76:da:b0:29:37:2e:f2:17:70:c4:3d:ec:
22:dc:e4:5d:09:8d:cb:9b:75:42:79:28:75:cf:d4:
76:4d:1d:1f:05:c6:94:ca:f4:f1:67:fe:8c:9b:04:
cc:a2:e9:11:5b:27:e3:11:bb:79:24:1b:69:04:af:
a9:4f:99:bd:8f:8e:3a:6c:ce:2d:54:a0:c8:34:5b:
af:6b:db:f3:77:d9:7e:b6:15:70:26:af:e1:e6:fa:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:BF:9C:E2:73:9C:5B:58:78:45:54:42:B9:44:14:1B:3A:7C:F7
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3b:ce:bf:c6:a5:10:83:c6:75:3c:ff:01:27:9b:22:df:1b:
9e:a2:8b:c4:ba:8e:0f:1d:f5:e1:48:ec:a5:70:2a:d1:81:a1:
b7:8f:57:97:ea:7e:36:ca:e4:64:13:a4:80:d7:08:e7:b0:0d:
be:b4:51:45:f5:0c:91:bc:1c:72:59:5e:5f:bd:f9:a5:a9:69:
b2:64:9c:99:24:64:03:01:cb:88:4a:d5:d5:68:c8:19:eb:53:
a4:19:fb:2e:1d:2a:ba:b5:50:66:9a:93:05:4c:e0:21:fb:16:
3b:94:78:70:e8:03:63:11:c8:84:75:0b:4c:73:16:c0:58:45:
64:01:69:dd:33:c1:9a:f4:a1:db:0f:18:b3:4a:38:44:2b:63:
e6:ae:40:cf:5d:fc:18:41:78:50:dc:14:9f:5c:61:d1:48:ef:
4d:c2:d9:8b:da:36:d1:0c:5b:1a:32:90:63:25:e4:fc:ad:62:
d1:70:b3:f3:59:f2:f2:aa:06:51:f6:1e:6a:73:7b:d1:e9:6c:
4f:95:bd:3b:17:82:96:23:2d:02:aa:5c:a0:cb:13:10:b0:25:
b5:01:eb:e9:f7:61:88:a5:d5:4f:ea:6c:3d:b9:3d:0b:08:74:
d1:2b:14:a3:82:44:2d:3e:d9:a5:62:1f:0e:f7:bf:44:b2:d0:
94:3b:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:34:57 2025 by rpki-client