Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: 7PGTsxvSzSsvoMPXa8arMu5BVt0mh3p2KAdkfntIKnQ=
Subject key identifier: CA:7E:D0:AA:A8:BC:24:00:4F:CE:45:41:D1:64:CA:56:8A:71:B1:17
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 019653B7C7C22572BF366037A7A57E6E7756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 15:01:15 +0000
Manifest this update: Sun 20 Apr 2025 15:01:15 +0000
Manifest next update: Mon 21 Apr 2025 15:01:15 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: fa8hqManERkKZOxEI/wS3beWjP1h1IFvyH/MmFM1d3Q=)
2: PjnPc92Q2V1HGAF2zMcKnf8EY3s.roa (hash: oJHQplo1wgSYzbHd7U3NabjFZf8l2Xl3wzFPd6jcOa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:c7:c2:25:72:bf:36:60:37:a7:a5:7e:6e:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Apr 20 15:01:15 2025 GMT
Not After : Apr 21 15:01:15 2025 GMT
Subject: CN=ca7ed0aaa8bc24004fce4541d164ca568a71b117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:a3:d2:81:7f:8b:9d:4b:d1:1c:a7:6c:2f:
f9:df:87:a6:fb:91:f3:d5:80:e0:98:e8:0b:8c:73:
cf:64:ec:2f:59:15:7f:ce:85:61:13:3c:f9:e6:25:
76:39:4c:a1:a8:ed:f0:47:fd:eb:ba:47:5f:c3:91:
90:44:fe:8b:65:a6:73:37:ed:62:aa:7a:e2:b3:08:
ed:73:8c:88:33:a3:35:c2:44:cf:ab:95:e9:fc:86:
e7:b8:d2:49:df:a9:1f:b2:27:31:59:de:42:45:0e:
3f:e4:12:c6:f6:92:97:e5:44:d5:52:49:1e:0d:7e:
17:2d:0e:db:ad:bf:02:5f:bf:b2:8b:7d:54:24:54:
60:8d:96:3e:d4:a3:bd:fa:bc:5b:e9:ae:17:d3:12:
14:ca:1e:8e:2e:b9:36:ae:0c:01:ea:97:a8:8a:17:
2b:f4:52:aa:9b:4f:e4:93:37:f5:f0:22:77:44:a2:
8c:ee:8b:ba:12:ca:53:dc:bb:1e:92:1a:12:d5:94:
8f:f1:c5:3d:80:15:1c:72:86:81:af:36:24:20:9a:
7c:b4:1c:98:25:e8:50:1b:ef:42:ec:3f:0e:8f:2c:
63:13:3b:45:95:87:b7:f8:93:4d:42:9a:35:f3:ad:
27:0f:32:06:b6:ad:a6:fb:fc:5c:be:98:a3:7a:7a:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:D0:AA:A8:BC:24:00:4F:CE:45:41:D1:64:CA:56:8A:71:B1:17
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a4:a6:03:37:dd:25:d0:34:d7:98:89:55:a5:0a:15:80:97:
4e:3a:b4:84:91:04:66:39:3b:e6:3f:c2:36:2b:b8:fd:09:3e:
a0:30:74:1a:77:22:fc:e9:11:8c:4e:26:ae:44:50:c6:4c:23:
e7:35:75:b5:29:44:db:2d:cf:60:f3:ce:23:6d:91:87:df:6a:
4a:30:db:38:e3:8a:9c:7c:09:25:6f:b3:88:1a:8c:3d:76:ff:
cb:a3:03:94:13:b8:c4:ec:4d:a5:16:af:71:a2:57:b7:2c:4c:
ae:b8:69:ec:b8:53:20:05:9c:a6:02:0c:12:e7:7f:bf:c6:0e:
bb:7e:6e:cc:da:3d:80:41:7c:70:74:fe:69:ec:d4:b5:53:9c:
0b:90:b1:1c:ca:47:fc:4f:3d:ef:48:7f:ec:25:09:8c:17:f1:
f0:f8:ff:26:0a:d7:9e:d5:c8:47:da:02:09:94:93:18:5c:4d:
26:b1:45:16:9e:a4:11:c1:a6:80:d8:5a:75:e7:32:87:ee:ee:
f8:7b:30:c0:a1:92:49:84:26:1e:ff:8b:3d:52:c1:fb:c6:71:
61:9b:25:cd:f3:46:0d:09:56:c8:82:bb:bf:eb:f5:a5:d2:c8:
c7:f5:e2:37:b2:a2:b8:eb:9d:ed:ad:20:d0:3f:dc:8b:26:2c:
cb:b8:63:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:34 2025 by rpki-client