Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: ewonD39vcr9eIJ9/gIyGcytSJI8kX1fqRV++R9EDHOo=
Subject key identifier: 53:DF:EB:83:EC:5A:73:EA:67:BB:2D:59:D3:13:C6:9C:86:51:98:6C
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 0196361A55B2FABAD1D9F582E6C23D0D8BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 14EE
Signing time: Mon 14 Apr 2025 21:00:17 +0000
Manifest this update: Mon 14 Apr 2025 21:00:17 +0000
Manifest next update: Tue 15 Apr 2025 21:00:17 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: IvMpg9llzpN+6E4sveJ0NQBlG+CZ017RXUTtao9dYp0=)
2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=)
3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:1a:55:b2:fa:ba:d1:d9:f5:82:e6:c2:3d:0d:8b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Apr 14 21:00:17 2025 GMT
Not After : Apr 15 21:00:17 2025 GMT
Subject: CN=53dfeb83ec5a73ea67bb2d59d313c69c8651986c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:ad:ed:4e:9c:a1:8f:e1:2c:18:6c:8f:dd:
e2:9e:19:be:f9:be:ea:09:fa:7b:5b:12:ae:62:5e:
b5:c9:3c:ca:f0:f1:67:82:4b:80:0f:64:55:b9:ad:
b9:95:65:cf:ca:f2:c1:c8:83:88:76:3c:61:e3:22:
99:ff:86:23:f5:44:e7:7b:ef:5e:7a:6d:62:f3:08:
9b:66:62:14:21:f9:7d:03:7b:3d:72:ac:6e:78:2a:
8d:a7:54:a9:49:b2:4f:a6:84:18:8f:9a:00:59:a4:
03:91:b7:ed:53:71:61:19:04:0f:ed:5f:6c:28:6e:
c5:48:f0:89:53:a9:19:04:4f:95:31:97:53:f6:fb:
dc:18:f2:82:af:a0:64:19:50:61:ad:8d:b5:58:86:
3d:11:3f:6b:56:d9:ee:70:11:5f:0f:f3:e8:89:e9:
74:ae:f4:d2:60:8d:13:23:47:20:4b:a0:a4:58:0f:
3b:91:11:54:7e:2e:fb:fa:79:47:f1:f6:a4:1c:ec:
79:bd:90:46:2e:d2:5b:23:81:07:88:c0:96:7f:9f:
75:e6:b9:92:28:53:c9:fd:fa:6b:ad:29:72:2c:37:
3d:4f:d1:22:b3:9c:eb:2c:ae:90:91:e1:cc:9f:69:
e2:18:56:41:00:ec:d8:7a:f3:67:19:c5:e5:4a:65:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:EB:83:EC:5A:73:EA:67:BB:2D:59:D3:13:C6:9C:86:51:98:6C
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:00:ef:22:a5:6b:c0:2b:da:79:69:56:73:7f:92:83:14:97:
95:55:81:d0:5a:ef:1c:ab:8e:54:f1:26:0f:4c:09:58:fd:da:
23:7e:2e:33:d7:48:c5:04:0a:f3:6a:1d:82:36:40:55:2a:35:
ea:4b:b3:2c:73:91:17:8f:a0:35:9a:eb:b5:ae:34:23:dd:32:
8b:4b:0a:8d:c0:47:c2:73:b2:ab:b0:a5:a9:da:6a:69:9c:48:
10:89:1d:7f:8f:8f:cc:ba:79:a3:6d:0e:82:f1:e3:8f:ad:2b:
b5:37:ac:d4:61:6f:93:63:05:03:46:ae:31:41:a3:86:84:b0:
f5:8d:b0:24:f4:6a:ad:0a:87:72:86:03:38:0c:8b:5a:2f:c3:
26:42:59:b5:f9:7c:07:74:36:ac:97:f4:63:4f:d8:66:0c:63:
72:7f:e2:10:7c:66:e4:f1:6c:d0:40:ac:93:66:3b:f1:df:33:
9a:00:50:e6:2f:dd:b3:2b:99:a0:92:8d:0d:92:b3:d7:79:70:
e0:c0:12:ce:52:d3:8f:a8:55:1c:6c:b6:19:9a:8a:9d:67:ee:
4d:d8:59:40:d8:d7:5e:ab:77:3e:cf:24:f8:46:c4:5c:d9:ab:
aa:d6:9c:30:5a:5a:7b:77:c0:72:e0:23:77:e4:29:ee:41:f2:
fa:cc:44:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:35:50 2025 by rpki-client