Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File: 4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier: wHHfuZZKqLOPnRBP/Y0yniflD7JpvMRIQBI7u0W7weA=
Subject key identifier: B5:91:8A:F5:55:02:DE:3B:FB:BB:52:5E:81:C2:A6:FF:83:EB:24:F7
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 019654C9871E9B4EEF5EA9EE7779B40BF4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number: 0B51
Signing time: Sun 20 Apr 2025 20:00:15 +0000
Manifest this update: Sun 20 Apr 2025 20:00:15 +0000
Manifest next update: Mon 21 Apr 2025 20:00:15 +0000
Files and hashes: 1: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: imzF6YZI56x688go350zyfEeEuSao/3gdQNV+KfyBGc=)
2: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (hash: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=)
3: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (hash: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=)
4: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (hash: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:87:1e:9b:4e:ef:5e:a9:ee:77:79:b4:0b:f4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Apr 20 20:00:15 2025 GMT
Not After : Apr 21 20:00:15 2025 GMT
Subject: CN=b5918af55502de3bfbbb525e81c2a6ff83eb24f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:f5:d7:c1:a5:35:9c:1d:6c:56:52:ff:e8:
71:a9:91:25:47:e9:3c:bd:87:ea:d1:06:da:19:61:
ee:5e:31:33:aa:ae:eb:f3:4c:91:9d:fd:e9:d4:64:
66:be:ab:eb:b5:a6:c5:e5:f4:76:57:8e:d5:65:ae:
fc:e7:90:e8:e4:fd:7e:54:28:d9:7f:f1:1f:e1:03:
92:94:96:6c:b8:90:79:92:db:3a:e3:d3:56:e9:d3:
ce:bb:e1:61:1b:b6:29:f5:37:7f:a7:9b:31:52:ff:
e0:23:52:5c:1c:29:64:e7:6e:64:28:b6:10:cb:49:
7c:34:d5:eb:da:fd:a2:b3:3c:95:9d:2c:91:1c:71:
64:ad:c5:0e:bf:fe:57:78:a6:93:5e:cc:5f:59:aa:
b9:ae:bb:4e:cb:a4:de:ff:de:81:6e:5d:03:3d:f3:
f4:95:b2:87:40:38:dc:dc:f1:97:3b:97:80:9b:09:
06:82:34:f6:82:3f:21:fa:8e:c7:05:ad:0a:06:c0:
14:9c:17:3e:c2:18:b0:eb:f9:6c:b7:d6:10:10:8d:
41:b1:f5:76:6e:9d:e4:4e:71:ef:ad:34:10:3b:4f:
d5:e9:0d:86:e7:5e:a1:fe:02:27:c7:01:c1:1d:72:
90:73:85:13:a4:cf:56:ee:96:e3:f6:9b:39:ad:28:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:91:8A:F5:55:02:DE:3B:FB:BB:52:5E:81:C2:A6:FF:83:EB:24:F7
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:cc:f9:29:d4:cd:e0:0e:29:de:44:28:be:f8:6f:67:da:57:
f8:3c:98:d1:b8:f6:9f:98:87:4c:55:93:b3:0b:0d:3a:d2:31:
74:d0:9e:dc:0b:77:a4:84:7e:e9:f5:d4:3c:df:fb:2c:7a:94:
3a:2a:af:41:a4:7d:b9:21:21:14:46:98:9c:a4:82:6f:83:81:
c5:0a:05:18:dc:b6:14:b1:1f:b0:39:4f:54:c3:d6:7d:f6:61:
0d:76:d5:95:e9:3f:0c:6f:c3:eb:de:3b:6c:5c:3d:43:40:bc:
ab:2a:37:f9:a7:23:05:86:b1:4f:44:6e:29:8f:08:37:38:0a:
12:26:aa:bf:4e:c3:fb:55:63:77:4f:1d:ce:ef:32:e7:25:41:
44:20:09:68:e6:88:44:72:1a:27:cb:8b:d7:3b:05:76:9b:a8:
ba:30:14:97:07:08:56:32:d3:5d:8d:ba:17:58:bd:35:a1:31:
79:5e:37:59:29:a0:45:f9:30:72:48:9f:07:cb:57:c7:9f:03:
ed:3c:8a:0a:58:74:18:4b:52:1c:59:2c:91:7d:bd:de:ac:7a:
fd:6e:2c:53:0b:d5:3f:47:16:e5:e8:8d:f6:f6:84:d2:d4:07:
51:95:ea:fc:8a:68:1a:97:52:f5:e1:d3:a5:e2:c3:63:29:53:
e5:8e:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:41 2025 by rpki-client