Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier: vz+mn+Zr9QAaJr3padnRlbqLpm5WbeGK+pm/pEv/pUY=
Subject key identifier: 51:2C:9B:FF:D7:F3:B7:47:E7:9C:E1:22:36:09:65:AB:9D:D0:2C:8C
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 019656B7E4FC060D7C78AD673DD258CB5FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 05:00:14 +0000
Manifest this update: Mon 21 Apr 2025 05:00:14 +0000
Manifest next update: Tue 22 Apr 2025 05:00:14 +0000
Files and hashes: 1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: T56HtC9YQrkV/neNlCDeB6h8E9WSL54fOJaHyLZGS0g=)
2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b7:e4:fc:06:0d:7c:78:ad:67:3d:d2:58:cb:5f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Apr 21 05:00:14 2025 GMT
Not After : Apr 22 05:00:14 2025 GMT
Subject: CN=512c9bffd7f3b747e79ce122360965ab9dd02c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:e3:31:4e:a3:52:25:40:17:8d:33:7c:5b:
df:24:2b:f1:77:5b:a3:95:02:36:31:d0:14:e3:14:
6b:7e:8f:17:24:d5:62:0b:2d:18:4c:51:3a:a3:ae:
d0:f0:55:11:9b:fd:d0:f2:74:4a:cb:73:a6:11:24:
6b:22:c2:b3:63:7f:0b:0b:b2:23:af:34:95:85:f2:
8c:89:af:78:fb:7e:fc:ea:fe:19:f2:10:64:61:4a:
ec:46:87:c9:b2:05:36:02:be:70:ef:cb:b8:10:31:
b3:47:9e:57:5e:97:66:8a:99:6e:bd:8f:19:64:c1:
99:21:c0:f7:d2:65:be:24:76:28:b7:1e:c3:14:1c:
ee:a6:9e:50:3f:d3:9a:e8:a3:ee:87:c4:3f:62:26:
bb:1b:b5:4b:a3:ea:33:90:c6:09:e2:df:1a:0b:d3:
01:cb:6a:7e:3c:ad:c3:48:d6:f4:67:66:9c:b6:a2:
7b:a1:1c:d1:ed:2a:96:df:6c:29:9c:56:2e:cf:f1:
df:73:45:dc:60:12:56:07:32:58:1b:9a:84:b1:a6:
1a:32:53:ce:58:e1:08:35:d0:04:7a:bc:d0:00:6c:
fd:e7:f1:12:f5:95:9b:21:51:a7:c7:3e:f3:00:44:
40:4e:2e:2d:b6:f6:2d:8f:cb:f3:36:2d:cf:17:76:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2C:9B:FF:D7:F3:B7:47:E7:9C:E1:22:36:09:65:AB:9D:D0:2C:8C
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fd:19:66:cc:6b:87:a5:e2:f0:fa:4e:2e:12:c2:78:8c:79:
35:63:ef:66:b0:26:0f:77:f6:02:b9:db:b3:38:63:2b:f1:f7:
72:36:24:e9:7b:e3:08:9c:ac:42:fc:36:fd:c7:cd:f6:67:97:
22:3f:bd:83:06:78:a2:72:99:02:60:12:f2:85:49:e7:7e:e3:
ae:14:ab:f3:44:45:6a:77:78:a3:39:42:c4:8d:0c:f9:c7:f8:
ee:34:aa:35:1e:ac:e3:19:98:b9:de:96:65:35:fb:df:43:9c:
92:70:d4:9d:30:99:b7:f6:eb:c9:ba:41:ae:29:83:06:a4:83:
69:81:de:e0:e8:42:1c:44:00:d7:f8:43:c1:8c:ac:4f:21:7d:
c8:5a:0c:f9:88:76:0f:43:28:6c:24:b6:a6:c4:fb:03:5c:a0:
58:f1:d4:66:37:a4:59:31:41:c1:cb:86:26:f4:a9:72:53:1e:
71:f1:0f:96:ab:a3:81:0f:f9:69:f9:9a:a7:3a:8b:f6:88:50:
c8:54:04:70:de:7b:8b:fb:f2:3e:a3:cb:3c:a3:e5:83:83:45:
32:d9:0e:0c:3d:62:b9:b9:5d:0b:d8:99:ca:e7:32:99:45:4a:
f7:7b:0c:fe:44:d0:9e:c8:fe:94:9d:4c:0e:62:12:74:b9:bc:
f9:80:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:22 2025 by rpki-client