Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: eWPrYawJmajUmZ54pEbOwj+SB7SFqRNJkndOuvWkX+o=
Subject key identifier: 35:BA:ED:7F:0F:D8:AA:16:8F:26:E6:1B:6C:7A:C2:B0:E4:F0:A6:68
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 019652A4BFD8C4A33999B0A8ACA5ACE31305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 1463
Signing time: Sun 20 Apr 2025 10:00:50 +0000
Manifest this update: Sun 20 Apr 2025 10:00:50 +0000
Manifest next update: Mon 21 Apr 2025 10:00:50 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: qDZheJywwII176wKh9nW9W0EJf+0YKDci9IyYW2aGzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:bf:d8:c4:a3:39:99:b0:a8:ac:a5:ac:e3:13:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Apr 20 10:00:50 2025 GMT
Not After : Apr 21 10:00:50 2025 GMT
Subject: CN=35baed7f0fd8aa168f26e61b6c7ac2b0e4f0a668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:a8:9d:36:19:0d:e2:a9:0c:71:3c:9f:4e:
cc:9d:9c:91:61:4e:5b:98:5e:69:3d:36:f4:34:de:
2b:f6:fd:bf:37:c1:36:82:19:d2:c6:29:6c:18:f2:
7f:29:2e:c6:c8:f9:8d:4a:2a:5d:5d:ec:9e:72:89:
31:8d:0f:93:fb:41:83:44:ee:89:3d:73:5e:a9:d7:
16:4b:49:40:d0:3a:bd:6f:de:b5:9f:4c:ef:c1:a3:
72:46:9f:63:ba:16:ee:0c:82:80:66:56:27:d0:18:
07:57:34:b0:58:ae:06:92:75:2b:32:29:6a:50:5c:
6b:c1:8c:65:2c:7e:e8:64:c7:0f:99:da:81:12:d3:
b8:a8:f0:c8:8a:d9:e8:1a:74:c8:c8:bd:24:b3:06:
b3:b1:d2:8a:fb:e8:3a:93:78:31:f9:96:6d:6d:66:
42:7f:f8:ca:1c:27:9a:c1:8c:b1:cd:fd:f9:d2:a0:
94:c4:84:fb:ad:63:3c:18:08:02:8e:49:8f:c0:81:
7d:cd:fb:e7:f1:f0:b9:fe:6a:07:39:98:ab:91:ce:
01:a2:48:b6:3d:fe:92:4e:9b:07:cd:4d:82:39:25:
c5:b6:2d:b2:ca:84:7c:40:28:a4:d9:ec:6f:1e:94:
ef:81:13:59:62:71:92:7f:28:df:ac:42:7e:ac:b6:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BA:ED:7F:0F:D8:AA:16:8F:26:E6:1B:6C:7A:C2:B0:E4:F0:A6:68
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dc:99:87:ba:cf:1c:63:b5:91:70:e9:d7:52:c9:09:a9:6a:
f4:51:ff:1c:dc:aa:b9:b1:56:6b:cb:94:69:c7:e4:09:99:8c:
0f:bc:1f:69:f6:bd:37:a5:96:36:16:1a:a9:68:86:dd:27:05:
58:2f:c4:47:8a:67:f9:80:0f:cc:8a:48:4c:cc:b2:4c:e8:a0:
81:11:cb:f3:61:a4:95:2a:26:3b:ec:63:6a:76:24:85:e2:bc:
da:0b:79:08:fb:ba:5a:38:46:a7:81:fd:e8:b1:bc:34:3c:3f:
00:28:b0:53:79:45:47:5c:9c:d6:68:a9:76:75:41:b7:12:a1:
3d:cc:d1:f2:77:9a:78:68:b0:01:26:b5:5f:e0:0c:f8:34:75:
81:13:6e:3a:b4:e7:77:60:99:0f:b6:e1:38:68:71:8a:6e:1d:
02:a3:d8:ed:dd:1f:2e:44:6b:0d:f9:b9:ff:2a:ac:b3:b6:3c:
0e:e8:8a:47:9f:09:bd:7c:fd:23:9a:2f:c8:33:e0:39:54:a7:
0d:91:07:b3:9a:46:4b:0e:b6:10:b5:0b:55:23:b2:01:d7:2c:
66:1a:63:af:36:0b:8a:4d:60:79:ee:51:1d:91:96:16:1a:cb:
4f:1d:e9:32:13:4d:9f:db:00:3e:8d:15:54:3a:c6:9d:d9:7c:
49:a7:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:29:34 2025 by rpki-client