Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
File: e4mF-uoIWYwFzDC4LigjBq95MxY.mft (raw, json)
Hash identifier: wNaOGlsbKdAS5+trziyFFD2gFz2C1tOIaMpzcXo5V8s=
Subject key identifier: 02:11:8D:01:EE:ED:6F:D3:1C:9E:D1:AD:FC:FD:C1:CA:F6:DA:C2:6A
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 01964C34D3873E9C9AC640CFF0AC75BD605C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
Manifest number: 0D94
Signing time: Sat 19 Apr 2025 04:00:52 +0000
Manifest this update: Sat 19 Apr 2025 04:00:52 +0000
Manifest next update: Sun 20 Apr 2025 04:00:52 +0000
Files and hashes: 1: e4mF-uoIWYwFzDC4LigjBq95MxY.crl (hash: ObLBOtIdJ6E501iWCctkNMYJUpLTxpf97yxX146stWM=)
2: wezzDoLmoG44JNaFHHcOefdwrnE.roa (hash: feMtqmKbJF8l19fJuaMh5zzlgwe36jwzuX192DfrtQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:d3:87:3e:9c:9a:c6:40:cf:f0:ac:75:bd:60:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Apr 19 04:00:52 2025 GMT
Not After : Apr 20 04:00:52 2025 GMT
Subject: CN=02118d01eeed6fd31c9ed1adfcfdc1caf6dac26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:4f:10:ec:d0:97:c9:5e:b2:a2:92:e9:bb:
7b:12:20:c4:65:98:e1:0a:48:77:64:b5:cb:d8:ec:
ed:fd:74:72:ce:21:d9:27:d3:35:be:20:a6:7e:b3:
54:02:01:26:45:39:fc:33:5b:eb:6a:3b:5c:c1:a2:
ab:45:86:a8:ab:73:77:ee:0f:94:89:79:40:94:78:
40:88:1b:bc:bc:44:5d:f1:c6:96:b8:3c:33:38:b5:
4c:c6:a2:b0:9f:2e:b4:bf:0a:37:dd:53:5a:28:22:
a6:12:21:d7:28:3e:a5:1d:71:f1:cf:f8:b2:c3:1d:
13:89:db:0b:f8:7a:78:ed:0b:00:a7:f4:fb:49:ac:
04:84:c2:19:d7:b8:46:f2:5c:90:11:2a:5d:bc:78:
53:f3:de:c2:e3:23:b5:1d:e7:b0:f8:b9:7e:cb:14:
3e:64:a2:a6:1b:39:53:2b:18:6e:5d:a0:7e:dc:5b:
bc:33:5b:fe:5d:0a:0f:cd:3f:e3:52:bc:63:56:d1:
3b:10:dc:1e:6f:17:d6:ec:40:c1:6e:03:17:73:93:
66:ba:21:ae:e0:b1:ce:88:b9:36:1a:94:b0:ca:97:
de:4d:8a:53:45:b5:95:0c:a4:76:14:3c:8d:12:db:
45:17:bc:8a:74:6e:47:2f:fc:50:10:ff:a1:5b:1e:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:11:8D:01:EE:ED:6F:D3:1C:9E:D1:AD:FC:FD:C1:CA:F6:DA:C2:6A
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:85:53:2e:99:dd:d7:28:e5:5f:8d:db:c0:dd:9b:0c:ac:
17:fc:e6:09:7c:94:06:31:e2:14:fa:cd:76:c0:a4:1e:2d:e7:
bf:d8:9b:cf:ac:6c:0a:c9:a8:ad:3a:d6:83:25:eb:42:94:6b:
34:a3:f4:05:63:3a:2a:70:42:d1:87:61:d3:56:52:97:f9:d4:
ee:86:0d:d4:c9:ab:d1:e4:bd:52:e1:da:61:14:94:92:28:f6:
11:de:5b:2c:55:73:30:9b:2d:10:f9:88:d0:fe:43:40:b7:91:
51:0f:cb:e2:c1:9d:07:1d:25:ae:5f:84:24:26:fa:5e:f9:4a:
e1:25:a4:89:6d:e0:c2:00:bc:ac:33:8f:36:8f:b0:29:73:24:
ee:16:39:dd:71:44:2d:ea:7d:90:fc:d4:69:95:4b:ab:83:c2:
68:70:11:c7:7e:e1:5f:b7:27:67:c9:67:ac:bc:d3:c4:a2:41:
3c:90:51:0e:dd:ec:ff:38:3e:38:5f:07:5a:9b:b8:a7:9d:2e:
7f:f7:10:0e:9e:c0:6a:31:0a:e7:d8:81:c5:aa:ba:b9:5d:4c:
83:b6:4d:1c:ca:19:c6:61:13:b6:57:52:50:3f:c8:54:05:14:
60:5c:22:1b:16:3e:8e:84:b5:06:b6:77:1b:40:15:57:a7:e2:
a0:c7:68:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:33 2025 by rpki-client