Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: javfb9sV+DrWf9ouv7G12mQ0lz6TYkFnU95IAIJjUnA=
Subject key identifier: BA:99:41:23:F8:02:1C:99:DE:5F:46:69:4D:E3:DD:CD:5D:6D:06:F3
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 0195903E1532B5F4C170038F5D3BE82A896C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 06A7
Signing time: Thu 13 Mar 2025 16:02:22 +0000
Manifest this update: Thu 13 Mar 2025 16:02:22 +0000
Manifest next update: Fri 14 Mar 2025 16:02:22 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: hovFh+sbw0xcDDsLe0TR0Hpep/TMlZqnngXns5VWmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3e:15:32:b5:f4:c1:70:03:8f:5d:3b:e8:2a:89:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Mar 13 16:02:22 2025 GMT
Not After : Mar 14 16:02:22 2025 GMT
Subject: CN=ba994123f8021c99de5f46694de3ddcd5d6d06f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:21:50:d5:41:3f:e4:db:5c:c3:12:08:bc:
42:b3:02:2e:bb:1f:df:7b:bc:51:22:76:5e:bc:1e:
dd:13:d6:d4:2f:a3:c5:35:d9:8d:ed:7f:f6:2e:41:
27:e6:86:03:3a:79:75:02:a5:bf:56:d5:4d:86:f7:
c6:98:7c:c3:a2:ca:24:b4:9c:97:00:fb:73:b9:11:
60:ef:d3:e7:ed:1a:87:f1:96:6f:94:de:d7:0f:65:
0d:ae:48:91:b8:ce:88:e2:85:84:86:59:d6:7b:da:
7f:d2:be:32:ca:de:6f:a2:a2:b4:18:d5:37:35:72:
97:71:fd:fb:a4:8f:e7:90:57:a0:13:61:7e:06:d4:
61:38:2b:ac:3b:91:65:a7:74:15:8d:d2:4b:db:22:
1e:af:70:45:3a:63:9d:7b:0c:ce:1a:c5:96:c9:cb:
d1:54:3a:ba:5a:3b:97:e5:1c:6a:08:12:3f:9f:b0:
e5:ef:e5:3f:86:74:3a:01:32:85:83:72:44:05:c9:
be:f4:2b:cf:41:ba:f3:43:da:04:a2:8b:19:9e:81:
8d:ff:16:3a:45:0e:b6:61:59:a8:b9:2d:c3:01:73:
f1:85:cd:07:f9:7f:0f:ca:01:ea:fd:6f:57:ac:e6:
bf:6d:71:fc:c0:3c:d5:14:e5:89:ec:7f:8c:f3:89:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:41:23:F8:02:1C:99:DE:5F:46:69:4D:E3:DD:CD:5D:6D:06:F3
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:12:9e:c7:5f:54:cb:4a:9d:f7:67:76:a6:5f:2b:5a:10:63:
1a:11:68:a2:aa:f6:b4:aa:b4:5d:d3:44:60:05:ae:cf:af:7d:
cd:c1:b9:dc:a6:1b:8d:6a:30:b0:8e:1a:80:c3:ec:73:21:f4:
7c:b4:2b:14:93:f8:13:9c:3d:24:82:e6:71:50:97:18:75:25:
18:65:79:2e:be:49:6b:f2:8a:1a:62:19:cd:0e:61:ca:f2:b0:
63:9f:be:38:d9:0f:0f:9e:1c:4b:21:e6:9b:b2:e2:78:56:23:
5a:e3:9e:2b:6b:ba:74:ed:f3:f5:8f:3b:ad:12:ea:30:6a:36:
62:bf:1b:1c:d1:96:22:14:94:2a:ad:d5:02:7e:8a:53:6b:6f:
e1:0b:8b:4c:b9:1e:9b:a2:9e:e8:06:91:6c:32:db:e1:f6:38:
b0:61:a7:f7:39:59:cf:63:d3:42:d7:1d:d5:06:3f:6e:e0:a9:
70:5b:d4:8c:ac:77:40:e1:db:09:77:22:96:97:e6:2f:41:8d:
bb:8d:e7:56:d4:98:95:b1:53:45:41:d5:7b:39:40:ea:63:f5:
eb:7f:f4:21:d9:e0:c7:52:93:f4:61:7c:aa:d1:02:78:a6:46:
0b:f7:a3:c4:0a:fe:3c:55:f5:a9:87:e8:3c:5e:8f:4b:14:bb:
61:c1:d8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:01 2025 by rpki-client