Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: eiq38lK61IvhqCIwZlDwKBadUlEC5rKDCKNWuHY9yBs=
Subject key identifier: 02:B7:87:6B:E1:57:9C:13:A0:EA:C2:4D:DC:B6:8F:0D:38:B9:F9:B4
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 019653499862D70344AEC8929C2F743BEDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 08E9
Signing time: Sun 20 Apr 2025 13:00:54 +0000
Manifest this update: Sun 20 Apr 2025 13:00:54 +0000
Manifest next update: Mon 21 Apr 2025 13:00:54 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: Qv4XKiKs3CerYmDloe16IiHRJfduMMI6M5pxdJ3K5kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:98:62:d7:03:44:ae:c8:92:9c:2f:74:3b:ed:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Apr 20 13:00:54 2025 GMT
Not After : Apr 21 13:00:54 2025 GMT
Subject: CN=02b7876be1579c13a0eac24ddcb68f0d38b9f9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:83:42:c1:68:ad:71:ca:0a:d0:ca:e3:39:
00:d6:04:40:79:1e:f2:36:08:e5:bd:4f:8a:ac:73:
56:7f:ba:3c:35:c5:f3:6d:57:64:f8:34:3e:7c:c6:
63:45:59:66:31:2b:4d:22:0a:0d:ba:f7:c8:e8:3f:
e2:25:41:0b:3b:5d:8b:7f:d4:98:9c:11:49:3d:39:
b5:b7:64:a7:ff:97:58:72:c2:06:dc:5c:ef:c5:03:
e8:68:a1:e3:fc:1c:d9:84:4c:0b:e3:b4:36:d3:dc:
1e:86:f7:4c:c1:ea:1d:52:37:5f:60:a5:79:bb:77:
48:07:7a:70:92:40:e5:bf:b3:51:e4:1f:fd:31:db:
e8:ce:ae:2e:6e:ec:92:3e:58:fe:40:f7:54:48:17:
9a:e7:3d:88:8d:c7:48:bd:8e:a5:20:a4:f0:fa:f0:
b6:15:8d:65:80:cf:e4:75:1e:65:85:86:8b:34:97:
85:90:1c:5b:6f:73:25:03:41:6f:2f:3b:cf:42:38:
84:fd:ef:b7:6d:f7:27:a7:fa:f0:05:5c:3f:94:3a:
83:e3:ac:30:23:25:7f:80:d2:94:6e:ca:94:fa:af:
74:16:30:4f:85:49:87:89:01:4f:4d:2f:be:6d:01:
6f:00:bf:37:f0:ff:8e:3d:33:53:bf:a3:6b:ad:bd:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:87:6B:E1:57:9C:13:A0:EA:C2:4D:DC:B6:8F:0D:38:B9:F9:B4
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9e:eb:78:27:86:f9:86:64:d3:28:6a:f6:b5:16:a7:31:eb:
70:2a:a7:67:87:3e:82:9f:a7:94:ee:a1:32:2b:1d:30:6c:70:
d3:3a:67:18:11:47:b1:1c:fc:fe:17:29:e4:5b:dd:14:2c:07:
71:ee:35:79:7a:d5:2b:f4:23:83:87:d0:6c:cf:78:fd:a3:98:
65:fd:12:50:a4:f2:78:d1:d5:e0:41:8c:f1:9c:91:7a:a4:28:
25:da:55:f2:22:97:1e:fb:1a:3e:64:cf:41:be:cd:e1:e9:69:
f2:54:2c:f4:2e:77:43:89:27:d8:56:83:57:f4:33:f1:7f:1a:
cc:2f:6f:51:c6:cf:4b:75:8e:0c:7b:63:e9:dd:52:d8:17:a4:
eb:d6:f3:fe:6d:0d:6a:b0:d7:d9:d8:88:a2:dd:ed:2a:f9:21:
f2:6c:c6:ce:e7:9a:5f:fd:21:49:3a:7b:02:ca:5a:fe:77:66:
5f:50:a7:1e:38:bc:c8:b7:b7:b9:28:94:2f:52:b7:07:b6:31:
54:d7:27:bc:1d:f2:87:10:95:a2:ed:98:6d:3c:5f:96:8f:3e:
d3:e7:7a:1a:df:4b:1b:17:c9:2e:a9:1a:51:28:5c:d8:b3:d5:
0b:2f:3c:61:e9:c8:8e:db:6c:0d:f4:c3:ab:a4:ca:07:f9:a9:
c0:f9:40:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:59 2025 by rpki-client