Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: +t+Pij6mCdRGBTbGrzeEDm8yUljThkrpDQdtV8egmmw=
Subject key identifier: A5:C4:A2:76:69:8D:02:03:36:36:73:5D:2A:BE:34:02:87:A1:B1:03
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019510FDFC022130EC21BD87035E8F944EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 11A6
Signing time: Sun 16 Feb 2025 23:00:35 +0000
Manifest this update: Sun 16 Feb 2025 23:00:35 +0000
Manifest next update: Mon 17 Feb 2025 23:00:35 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: 6nRplPDwZpnI5OtzWXQvAGigx3yf9ue3V5qsxfLEZIk=)
2: BaBCeNg1tHPhyNt-NGKdmW_5tj4.roa (hash: 0DB+VS24EPxDdyG43/iiFi3jJXUjJ/EkB02bBWczNN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:fc:02:21:30:ec:21:bd:87:03:5e:8f:94:4e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Feb 16 23:00:35 2025 GMT
Not After : Feb 17 23:00:35 2025 GMT
Subject: CN=a5c4a276698d02033636735d2abe340287a1b103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:23:99:76:de:93:6d:6e:18:3b:dd:40:03:
c7:6c:ea:b8:75:9d:8a:34:a2:f3:92:0d:9f:d6:d3:
06:1f:3e:9e:11:7f:83:52:36:93:5e:b7:16:94:9e:
e9:dc:37:6a:d6:45:0c:bf:95:46:58:61:c6:43:c3:
0c:10:d2:f2:16:7c:48:7e:58:65:79:89:44:65:e5:
01:f4:fd:71:9f:c8:44:f1:6d:23:2d:7d:02:1b:77:
13:92:89:74:24:a2:8b:2f:47:87:97:a8:39:f5:18:
98:bf:83:48:34:a6:f3:f3:94:0b:fe:84:46:60:34:
a2:ae:74:08:9d:e3:ad:dc:ef:1f:a4:0b:cc:b4:12:
fd:cc:ea:a4:82:05:f6:0e:0d:98:d9:c7:b5:c2:b8:
3c:e0:28:f7:cd:11:14:51:b4:09:1e:f5:02:3f:1b:
01:b0:33:40:88:a6:64:23:12:f1:eb:9e:50:43:f8:
e0:d9:7c:65:a1:76:84:91:15:70:01:a3:67:80:b3:
2b:55:3f:b3:0f:f4:d8:76:34:d9:f9:c9:66:6c:36:
46:e8:a7:bd:a9:dc:4a:07:e6:94:d9:de:ac:5b:43:
bb:57:23:e5:af:c7:52:6b:a5:5f:15:45:6e:83:30:
3b:ab:4b:fb:a9:9a:c3:07:d1:02:62:60:7e:18:9a:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C4:A2:76:69:8D:02:03:36:36:73:5D:2A:BE:34:02:87:A1:B1:03
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:49:1c:2d:88:91:12:96:bc:21:7c:14:e3:f2:17:2a:a6:f5:
79:0b:15:97:e4:b3:4c:d7:3d:74:12:57:9e:02:40:03:3a:0c:
5e:df:a5:ef:73:87:24:c2:5b:55:05:31:83:34:d0:42:04:c4:
f2:ba:d6:c6:5d:a7:40:43:ac:17:85:b0:da:90:13:84:3e:83:
9f:0e:1d:3e:77:36:13:91:d9:5f:85:f2:0b:51:f4:9e:d3:ce:
0f:5e:55:5a:ff:e3:c4:1b:0b:7e:de:3a:18:aa:16:ca:04:f5:
b1:4b:4b:07:fa:df:b7:ef:86:f6:c4:72:4c:e1:30:48:f8:4f:
ac:61:fd:e7:90:87:5f:06:dd:8b:fb:8a:41:b2:05:c8:f3:4e:
43:fd:c7:27:fb:b3:c3:b0:6d:7f:b9:98:de:98:b1:89:ec:f4:
1e:02:f3:72:57:d2:39:50:58:f5:8a:bb:2d:d1:53:1d:1d:0a:
49:0a:5c:e6:e4:bb:fe:b7:af:b7:15:e4:bb:37:66:af:29:cd:
12:b7:40:84:cd:1c:ae:c2:ad:f1:a8:a6:e9:c4:7f:d4:d3:fc:
a7:36:de:80:3d:2a:b5:8a:f4:31:bf:27:2b:68:18:58:62:69:
86:dd:80:cd:30:11:88:f9:1b:eb:e9:71:71:27:bb:52:07:21:
8d:cb:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:59 2025 by rpki-client