Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: RkKVas8DNdEeTuDFUepa8PGzlBfZgcliUU0cUm11OBY=
Subject key identifier: 2F:B3:1F:CA:3F:A4:D7:C9:A3:42:B8:4A:3F:DD:AE:DB:13:36:1D:15
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 01958BBB950BD46B156855647BBAE20DECAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 11E6
Signing time: Wed 12 Mar 2025 19:01:21 +0000
Manifest this update: Wed 12 Mar 2025 19:01:21 +0000
Manifest next update: Thu 13 Mar 2025 19:01:21 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: cOPzKNOzTxoIt4fM2evw2JefX+DJMaz1jMDLbn6LjIs=)
2: wo2zdFr365giMD5GmJjbyQ_qVBY.roa (hash: Sf7Mc4QUihOBo0PCO1f1MqbHphMDfRs2qmYoA4b7koM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:95:0b:d4:6b:15:68:55:64:7b:ba:e2:0d:ec:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Mar 12 19:01:21 2025 GMT
Not After : Mar 13 19:01:21 2025 GMT
Subject: CN=2fb31fca3fa4d7c9a342b84a3fddaedb13361d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:a2:9d:63:90:76:cd:35:ae:13:7e:43:41:
bf:dd:51:56:e1:4e:36:2a:a2:13:33:4e:32:c9:47:
35:f3:c7:84:72:fe:b2:5f:15:31:a0:6e:5d:62:0a:
91:fc:c1:56:c1:ba:40:83:06:ac:be:61:cb:0b:2f:
63:3a:82:28:6f:3f:be:71:83:26:17:94:16:c3:a7:
1d:18:7c:b6:c0:f0:c6:58:6d:11:82:db:aa:53:ce:
c7:32:1f:cd:9c:07:2c:22:33:d2:76:43:1a:af:6a:
c8:16:9f:62:41:9e:c5:dc:d6:47:a8:80:a3:71:7c:
3a:52:80:fd:41:f3:15:6c:cd:fb:7f:a5:4b:46:59:
be:ff:4f:29:7b:2c:1a:dd:08:8f:81:50:f5:09:2d:
6b:62:47:90:ba:aa:a0:b1:0c:7e:a7:d1:f5:96:07:
74:24:84:36:9c:64:36:3c:06:25:61:6b:b5:8c:c6:
c6:f5:9e:f3:e3:a4:1a:43:90:d4:49:6f:87:f5:d6:
c6:88:3b:46:be:a6:ea:43:90:12:65:07:f9:fd:e8:
08:02:17:7d:67:ab:01:21:bb:a0:ea:6b:3b:b3:dd:
96:b8:95:ea:2c:3b:01:f3:5a:9c:ba:55:00:d6:6e:
1e:63:28:87:5d:94:08:82:ec:a8:77:ad:55:49:99:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:1F:CA:3F:A4:D7:C9:A3:42:B8:4A:3F:DD:AE:DB:13:36:1D:15
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:51:f0:65:5e:73:44:89:b3:42:04:b6:0d:c4:db:51:08:80:
f0:1d:90:82:28:24:c8:59:e8:6c:81:22:d6:b6:bd:c3:2b:e6:
62:7f:2b:f5:e4:92:bd:1d:a1:d9:29:f1:78:62:33:7c:e1:90:
10:ca:37:74:35:04:57:a3:7c:0d:56:58:60:6d:37:a1:ea:93:
50:8d:0b:46:f8:b6:55:36:e8:72:b2:84:80:0e:f1:85:40:dd:
6b:11:87:4a:94:e1:64:45:16:b8:64:2a:eb:20:b1:61:f8:06:
b2:ce:ed:b5:34:51:4b:52:c8:0c:98:a3:a1:b9:ab:c4:51:49:
c4:3e:60:da:a5:e6:b0:72:ff:9b:8b:79:17:05:b6:2d:c7:84:
3e:9a:2d:de:54:5b:de:9f:2f:10:6c:f4:e2:bc:30:cf:5f:ec:
10:aa:5d:da:d8:1c:98:c1:2b:2b:51:af:1c:9f:ce:52:ca:94:
65:1b:48:65:d0:08:d9:29:14:9e:da:32:f3:1a:4b:ad:af:3b:
4f:3c:12:63:f8:d7:a2:90:f3:45:c4:e4:a9:3a:56:6a:01:70:
97:a7:3c:91:83:0e:48:6f:a8:ef:b8:1a:2f:26:23:1f:17:b5:
f1:d7:84:00:1c:81:8b:d2:11:64:a1:5a:a6:c3:20:69:9f:08:
b5:39:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:00 2025 by rpki-client