Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: p60pRCClpCZuGLbObT0/V08NgeQr6DCv0fmtV5iNZPc=
Subject key identifier: 46:7C:A3:DF:58:F1:EA:B7:11:72:51:DE:C1:22:8E:CE:0B:BA:C4:EF
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 019510FDCA30154CFEBC50AFEB65D09A2CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 23:00:22 +0000
Manifest this update: Sun 16 Feb 2025 23:00:22 +0000
Manifest next update: Mon 17 Feb 2025 23:00:22 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: V0tHlcvzW8LL6A3hqWBD9o65cz54nrxur7+IvRXenVs=)
2: DRmZJybrlbdXMMtCv-LzVRORQZk.roa (hash: 5OPrd1Swg2Ws5p7BB56DIY7Qpw55Ar+XvquToD8doCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ca:30:15:4c:fe:bc:50:af:eb:65:d0:9a:2c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Feb 16 23:00:22 2025 GMT
Not After : Feb 17 23:00:22 2025 GMT
Subject: CN=467ca3df58f1eab7117251dec1228ece0bbac4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:01:01:f6:d3:a6:41:98:1a:fd:1d:10:cf:
6f:14:64:4b:00:56:13:04:ab:ea:0e:c2:29:fd:71:
ea:81:c0:66:bb:6a:50:ea:fd:c8:18:46:00:b8:6d:
39:44:fe:2d:52:2e:8a:d9:a0:7f:90:38:03:ed:bf:
d2:fd:25:5c:e6:ef:41:8c:f8:f7:da:0e:7d:2c:aa:
34:c6:ab:15:6d:96:61:b5:ae:75:bc:42:2c:f5:03:
95:25:3e:3b:7d:e6:a8:27:08:e9:f6:a3:38:76:7a:
6c:c2:78:1e:e7:ad:39:a6:3f:7d:b8:db:2b:62:49:
87:04:70:cc:de:e5:a3:d7:04:47:3a:45:2d:e5:be:
a4:ed:42:80:17:7a:ce:ba:9b:52:d2:95:10:31:50:
36:53:a1:ba:d7:ad:cd:04:0b:fb:71:22:5c:dd:7f:
9e:11:82:fe:80:52:4b:9d:d4:11:e4:e8:9e:39:b4:
5d:a8:4d:74:78:87:82:8e:74:08:51:a2:58:de:eb:
79:ed:7c:67:a5:b8:73:be:f2:66:6a:92:c8:a4:49:
ce:64:26:1d:e3:e8:7c:c9:78:5f:2e:f2:ab:cf:eb:
04:1c:59:3d:96:f2:9f:c2:b7:b2:ca:8e:bb:7e:ef:
fa:29:0c:5c:63:61:f3:34:6b:b6:49:c3:60:78:54:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:A3:DF:58:F1:EA:B7:11:72:51:DE:C1:22:8E:CE:0B:BA:C4:EF
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b9:6c:07:97:e9:d2:a3:5b:16:17:6d:7c:ab:1c:b6:87:23:
01:fd:57:70:1c:9e:23:61:34:aa:59:9b:04:c4:b5:a0:a7:58:
ec:4d:92:e4:b1:49:cf:0c:c3:59:4f:08:24:d4:5e:16:31:b0:
30:ca:01:7a:3e:d2:60:2d:7e:e3:92:54:1d:e9:ac:72:98:4e:
97:41:a8:7e:2d:50:68:d2:1f:cb:47:7e:3e:c9:21:9e:6d:90:
59:4a:af:49:7e:28:6e:51:be:bd:58:71:ef:08:c5:d1:ad:90:
ff:ab:18:4b:21:16:e5:3e:2c:b3:df:d6:52:ae:27:68:2b:c7:
50:52:27:f2:22:08:dc:b9:c5:5b:ed:7f:d5:b2:61:de:5c:f5:
6a:b0:d1:05:46:84:8a:e3:b2:91:59:59:88:cb:06:7c:57:eb:
b2:c4:8a:8d:73:a4:33:de:87:b4:47:6f:6d:b8:dd:db:ec:26:
cf:e7:f6:ac:96:b8:89:a3:dd:d1:47:a4:f7:dd:37:70:b7:f8:
41:fa:e6:6e:d8:ef:63:cc:f4:93:ba:67:90:b5:2e:b7:07:a6:
96:ed:9d:30:7a:71:24:a5:91:4a:72:e7:44:6d:5e:40:e3:3f:
d8:03:c4:73:8d:4b:fd:fd:96:c6:0e:60:9b:75:e8:43:3b:e1:
d9:6b:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:04 2025 by rpki-client