Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: yabiiRP9JRKCEDzDMpZvxLQ8OU8Zt7zYl5r3IIeub0U=
Subject key identifier: 4D:E1:07:D6:15:C1:37:56:F0:72:70:07:75:F9:FE:EE:10:EF:B3:A0
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 01965A5DD17872EA43EDE484A3AB9FFFE565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 1251
Signing time: Mon 21 Apr 2025 22:00:20 +0000
Manifest this update: Mon 21 Apr 2025 22:00:20 +0000
Manifest next update: Tue 22 Apr 2025 22:00:20 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: 9twUwp34R8GwA4h6Wt7PD2eAHjTwkrG5wDmrU7G0KT0=)
2: wo2zdFr365giMD5GmJjbyQ_qVBY.roa (hash: Sf7Mc4QUihOBo0PCO1f1MqbHphMDfRs2qmYoA4b7koM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:d1:78:72:ea:43:ed:e4:84:a3:ab:9f:ff:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Apr 21 22:00:20 2025 GMT
Not After : Apr 22 22:00:20 2025 GMT
Subject: CN=4de107d615c13756f072700775f9feee10efb3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:6f:71:c4:43:a2:6b:f9:ad:ab:e0:bd:d3:
2a:6c:f1:1d:3b:40:dd:45:57:e0:a6:08:95:e8:28:
d4:8a:45:d8:70:a3:ee:25:a8:c0:d0:9d:37:db:51:
a3:a2:03:6b:42:ec:08:e0:c3:66:15:9e:8b:a0:ff:
8b:4c:20:df:3a:6f:40:2a:6e:56:05:50:be:1f:50:
cc:6b:4e:04:fa:36:b2:88:66:dd:d4:df:a6:da:df:
9c:b9:08:ec:73:75:ee:64:5c:ec:11:6d:4f:9e:a6:
74:77:a1:c2:5d:63:4c:e1:5e:b3:b1:7e:d4:69:37:
09:c3:99:a1:43:ab:e9:cd:2b:5b:2b:a0:68:3d:e4:
a2:48:29:65:e8:b6:aa:af:ea:90:91:23:a8:4d:ef:
c8:f7:29:30:c7:ec:bd:90:f6:1e:3c:15:ec:81:6f:
85:75:94:e2:eb:85:3a:c0:4f:a9:4a:37:f3:f4:ec:
96:f5:72:99:29:03:ff:b1:e5:c5:38:8a:72:e4:f9:
6c:6a:fc:61:1f:f1:cd:bd:a4:df:f1:bd:92:8b:e2:
8a:1c:2e:61:32:12:17:c5:91:ff:a1:61:a3:7b:38:
7b:24:57:da:fb:02:f5:ac:f0:6e:b9:29:ef:c9:ed:
0c:6f:37:fc:df:40:49:d8:1b:34:9e:47:97:e8:68:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:07:D6:15:C1:37:56:F0:72:70:07:75:F9:FE:EE:10:EF:B3:A0
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9a:26:06:df:98:08:b2:93:26:52:c8:af:a1:20:d5:08:d7:
90:df:85:97:42:15:ce:2d:2a:fa:c1:3c:4d:a1:30:7e:a4:57:
d8:57:3d:a4:9f:99:8e:15:ee:c3:37:d8:96:4a:82:a4:b4:02:
85:fb:09:b5:4b:05:29:e0:43:be:ff:9a:17:83:40:41:a1:82:
76:bf:32:37:1b:68:a1:f1:70:04:0e:ce:65:33:dc:f6:f4:ab:
47:fd:96:3f:6a:18:d8:75:d6:82:ed:b3:a1:30:27:d0:b3:24:
c0:d1:d8:73:9f:dd:5b:d8:e9:1f:6d:b3:44:2f:a2:6c:b2:69:
85:10:40:1c:a3:af:95:42:5b:9d:46:06:c3:c1:b6:1b:d7:cf:
72:7b:32:32:8e:97:c6:ba:57:50:50:03:7c:ad:31:da:28:6a:
fa:d7:32:00:8f:9c:83:ff:f0:b4:d6:27:c7:3b:98:f0:de:4f:
77:ad:97:c8:7f:dc:75:62:be:89:55:73:e1:cb:eb:50:c1:f8:
66:d4:1d:08:d1:05:97:6a:e6:a9:a1:8e:27:eb:93:af:53:d8:
b5:0e:01:99:e5:07:95:52:cc:23:a1:a4:d0:35:0b:7d:3e:41:
71:59:ef:0a:81:5f:9f:71:71:71:53:97:7f:71:8b:41:ad:1f:
64:83:21:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:30:06 2025 by rpki-client