Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: ZMymSkneUw+e/EU9Xb+wS20okrj2679uOSHfeovZ8eo=
Subject key identifier: CA:38:8C:9B:23:17:82:B2:19:68:0B:0D:F9:B3:D7:A5:A3:94:D5:FE
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 0196586FBE264FA89CBEBC4B924E10FD04DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 13:00:40 +0000
Manifest this update: Mon 21 Apr 2025 13:00:40 +0000
Manifest next update: Tue 22 Apr 2025 13:00:40 +0000
Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=)
2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: AD25UuPWI2OK4YWaS4qunQNhiQ/siEUl+iOf4dL+HbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:be:26:4f:a8:9c:be:bc:4b:92:4e:10:fd:04:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Apr 21 13:00:40 2025 GMT
Not After : Apr 22 13:00:40 2025 GMT
Subject: CN=ca388c9b231782b219680b0df9b3d7a5a394d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:06:3e:fe:69:ec:af:10:fb:0f:e5:3e:5d:
b2:e6:03:1a:48:61:69:53:d2:97:4f:d1:ec:f4:be:
47:1c:00:06:f4:b0:41:51:d3:82:ff:48:7f:b3:c8:
fe:0f:3f:2d:df:8d:e6:59:ed:0d:c2:3c:e7:90:63:
e4:fc:87:c4:e3:80:c2:7f:9c:68:44:28:d2:27:17:
33:a8:fb:00:12:43:c8:41:c1:48:37:19:9b:d6:71:
b2:8b:96:e6:5f:c9:b1:76:68:c3:d3:39:10:0f:0c:
50:78:4e:48:cc:d1:4f:a3:ef:95:02:2a:de:dc:fa:
39:ce:11:21:96:a9:04:4b:0f:98:20:30:11:75:01:
04:96:a7:8c:f3:63:29:9f:2e:bc:1f:24:b0:ed:bf:
fb:55:53:9f:72:c5:e4:fb:ef:e0:33:12:09:75:58:
90:9f:19:b8:4b:d0:a3:7e:cb:04:03:ac:be:ad:ed:
20:3f:2d:37:f1:90:82:5e:8a:a8:5e:59:de:0b:a2:
e9:de:37:54:a8:5e:11:b4:07:b6:2e:81:3c:0b:ec:
6d:1e:ba:61:2a:6d:d0:b1:af:ab:af:d3:78:a8:75:
ed:b6:e4:fb:7b:70:b4:2d:f8:22:97:2d:42:f9:fe:
9b:90:04:17:40:e2:54:3e:d8:49:e8:ea:da:b6:3b:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:38:8C:9B:23:17:82:B2:19:68:0B:0D:F9:B3:D7:A5:A3:94:D5:FE
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cb:85:8b:5c:8e:32:6d:d6:79:2c:4b:a2:7d:f8:be:14:33:
59:62:7e:8b:f2:a8:5c:3c:21:5f:ec:d1:91:56:9b:6b:15:13:
6c:dd:a3:b4:40:fe:38:d5:d0:49:a2:69:60:78:90:c7:b6:f8:
34:b1:6d:34:b3:73:34:ff:88:d4:c9:6d:df:72:97:ec:9d:32:
a6:a0:29:4b:a4:41:f5:51:2d:06:b4:43:19:ce:9a:ff:6e:a1:
46:3d:35:f9:1c:ab:d7:6c:ab:bf:03:45:cd:fd:98:f8:c3:56:
77:85:5c:fb:75:4f:10:8a:1b:d1:c6:15:e6:51:35:c0:3e:67:
36:fb:f4:cf:e2:7a:85:1d:e1:d7:00:f4:76:bb:1b:ce:5f:d9:
c0:fc:13:59:6a:ec:97:27:f9:c7:9c:75:6d:0a:5f:7b:48:68:
9b:71:bd:0b:4f:62:32:5b:6d:11:f2:b8:03:7c:50:a2:41:90:
96:6c:7a:b6:16:bb:0c:10:f2:e2:95:ad:b8:17:a0:68:c7:ab:
43:8e:d9:c9:c8:cc:95:ea:e5:a7:f0:ca:12:6a:49:70:c7:d4:
aa:e2:4b:7f:63:a1:1e:57:1f:82:90:a9:04:c0:b5:44:e5:86:
fe:e2:14:50:12:98:a3:8f:95:d9:ef:b8:ea:04:97:10:9e:7c:
e4:42:73:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:42 2025 by rpki-client