Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: XOWLM2fTOFAiVHi0rjmHpQ9XnrKUjjtkeSfNdIjraGk=
Subject key identifier: 0A:B8:E0:F3:B3:68:D9:53:02:E1:B0:72:1F:C2:E5:25:BE:56:36:BE
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 019658DD57116720CC56AA2D117DCD7DBBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 1097
Signing time: Mon 21 Apr 2025 15:00:22 +0000
Manifest this update: Mon 21 Apr 2025 15:00:22 +0000
Manifest next update: Tue 22 Apr 2025 15:00:22 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: /gbMRUv29tK3FuPlafjmjkWrZLP6Pwe755R3IEDvsKE=)
2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:57:11:67:20:cc:56:aa:2d:11:7d:cd:7d:bb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Apr 21 15:00:22 2025 GMT
Not After : Apr 22 15:00:22 2025 GMT
Subject: CN=0ab8e0f3b368d95302e1b0721fc2e525be5636be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:80:c6:6d:19:0c:d3:ee:35:b1:81:a1:21:
37:39:39:93:c6:f2:1c:89:8c:4a:14:bd:43:87:bb:
bf:df:73:e6:9c:f4:94:4b:c5:d2:06:33:1a:df:cf:
f9:b3:f1:fd:3c:94:dc:4e:4f:e1:31:0f:e5:17:4a:
39:b4:7d:da:8b:f4:07:d8:23:20:5b:a1:03:2b:56:
e0:6f:fc:aa:7a:d3:ef:bc:71:56:d6:ba:d6:eb:ca:
d9:87:1c:11:ba:c2:c9:ca:96:7f:85:ed:58:25:9e:
0a:09:2b:dc:f9:ad:8d:3c:8b:7c:85:ac:0a:b0:c6:
98:cc:9a:2a:a1:96:5c:65:42:25:a8:7f:80:ce:63:
da:7a:c8:ee:37:27:a8:12:f3:9b:d2:8e:51:ca:25:
0a:3d:b8:14:10:ce:b5:07:d1:46:dd:6c:43:28:f4:
cd:95:3d:a2:fb:b1:59:df:34:bb:1e:0b:ae:e1:e3:
74:40:c8:70:c9:3b:31:31:5a:68:4d:4e:e6:ec:c1:
ad:c8:b5:3e:3b:cd:0d:a3:8a:c4:e6:db:55:9a:53:
dd:c5:d3:01:c1:c5:1f:c9:ee:26:fd:73:60:2d:a3:
c8:bf:ab:b7:00:a0:72:86:a6:e2:8f:78:33:68:9b:
10:7b:cd:02:6a:e0:3a:4f:20:6a:eb:56:08:84:87:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B8:E0:F3:B3:68:D9:53:02:E1:B0:72:1F:C2:E5:25:BE:56:36:BE
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1f:db:a2:23:3c:94:46:4b:c3:61:9c:e6:f0:39:f9:35:d8:
18:af:d6:c2:a6:b4:cd:d1:68:e3:e9:2a:5e:f7:8d:30:94:85:
63:be:29:07:18:ea:e1:a7:ea:f6:6b:9a:06:d2:e8:39:16:f1:
f3:b6:74:85:5f:cb:a3:17:ca:07:e9:71:56:23:eb:b0:11:b0:
4f:79:4b:a6:c1:27:5c:7e:be:02:2b:65:7b:37:23:f2:6c:82:
d1:26:20:17:c6:22:9e:b8:f1:2b:8f:ce:c2:95:fb:9d:a5:fb:
b6:34:24:a4:b8:4b:de:97:17:1f:bf:d1:25:9c:10:6b:41:ab:
d6:aa:92:aa:34:23:1b:90:78:a7:34:62:50:07:dc:c2:96:9f:
b8:e8:ae:fe:a3:b0:4f:a8:fa:cd:80:c2:79:46:0a:88:01:16:
d7:bf:d7:84:a7:8c:43:40:22:e4:5e:e1:39:e6:80:c9:7c:46:
51:5c:18:e6:39:0c:ba:d8:98:ee:bc:d1:ba:25:74:39:89:c3:
2c:27:5a:ee:78:df:ed:6d:21:4b:c3:de:1f:32:64:30:82:ab:
18:25:ad:62:bc:ac:03:59:c0:dc:b3:89:d8:54:a5:9f:ec:45:
41:1b:3d:4a:13:1e:3e:3f:8e:b9:7b:8b:3e:23:85:c5:b7:b6:
11:ee:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:15 2025 by rpki-client