Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: NzhkxuxlrpPSLtLbq0AhJaZk2eMF2BTrvYJyH2WGKGw=
Subject key identifier: B2:C8:BE:5B:09:DE:E5:C3:E0:C2:C1:6B:42:6A:B2:62:D0:7F:0F:80
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 01958BF2885D92A25F1AE3A9629DE53E2F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 0F94
Signing time: Wed 12 Mar 2025 20:01:22 +0000
Manifest this update: Wed 12 Mar 2025 20:01:22 +0000
Manifest next update: Thu 13 Mar 2025 20:01:22 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: J4nxp+CY7ReU/XWzUYxfVmIK1dVYQc56CoXQYb3SSxg=)
2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:88:5d:92:a2:5f:1a:e3:a9:62:9d:e5:3e:2f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Mar 12 20:01:22 2025 GMT
Not After : Mar 13 20:01:22 2025 GMT
Subject: CN=b2c8be5b09dee5c3e0c2c16b426ab262d07f0f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:08:a1:54:40:8b:6b:5c:6e:2e:0c:9f:b7:c1:
e7:4d:14:e5:d1:77:60:7e:e0:59:9c:cb:3d:22:35:
24:73:80:da:29:f4:56:92:ea:a5:f4:64:6e:5b:f0:
ef:98:7d:16:eb:fd:a3:75:fe:1e:33:62:b2:44:ae:
ad:ac:fd:21:91:2c:cc:5a:4c:a9:44:48:20:da:8d:
b1:41:f6:a6:ae:76:a5:33:4c:33:ca:95:57:15:04:
ff:22:75:53:3c:e5:1a:c8:99:0a:52:ae:77:ce:53:
df:3c:74:83:82:fc:fa:e3:5d:1d:e7:ef:ff:a4:d6:
75:b5:1e:1a:f3:d4:68:9f:ce:49:9e:a2:f7:49:9d:
f4:7a:0e:de:ba:71:70:41:43:b0:0c:aa:28:6e:e0:
e0:f0:81:d3:5d:34:ab:0f:f8:2a:8d:8a:72:87:64:
a2:7d:12:40:58:57:3d:c3:bc:ca:d9:7c:ff:cb:d2:
35:95:46:d1:6c:9f:02:f2:7a:48:08:32:f9:a4:85:
8e:1a:23:5c:9c:b2:45:ca:6f:ec:3a:ba:86:09:3c:
a5:7b:6f:81:b7:b2:c9:0d:a6:c1:ca:5c:02:82:ca:
88:c4:f3:9e:6d:ea:9b:5e:3e:73:8e:bf:ab:99:6a:
f1:35:c7:fe:30:b1:74:9d:fe:8f:ad:d7:f8:28:72:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C8:BE:5B:09:DE:E5:C3:E0:C2:C1:6B:42:6A:B2:62:D0:7F:0F:80
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b2:8a:f5:a3:12:4e:76:a4:cb:ab:c1:1c:98:d7:57:8c:8b:
56:16:9c:5d:67:af:1e:d5:14:fc:c2:9c:b0:74:22:cc:55:11:
c9:10:f1:25:ef:3d:a8:4a:dd:86:44:83:53:e0:1e:c3:a3:40:
09:a6:42:6f:c6:71:05:24:a4:43:43:9b:64:d9:61:39:81:be:
26:a0:36:d6:7e:84:6d:71:de:c1:5d:54:95:77:55:30:a3:a3:
df:31:63:52:60:a9:83:7d:a3:58:c6:26:05:74:8a:a8:75:39:
1a:31:2a:fe:cd:34:c4:d1:8d:42:29:f1:c6:64:fa:24:e1:ba:
cf:ec:69:4f:67:00:d2:be:08:67:c6:50:e6:51:ab:89:0a:61:
66:21:e0:13:8b:38:4e:7a:93:b6:eb:6e:e2:86:06:bc:09:d5:
66:ee:77:8b:d7:8a:82:ec:53:0f:40:50:ba:dc:08:2d:dc:b1:
1d:d6:f7:8b:e9:26:32:7b:1c:f3:f5:95:5b:a8:98:8d:86:a0:
e6:8b:13:00:12:af:5a:fe:43:8c:54:a8:ad:81:a8:41:1d:d6:
d6:3e:68:a8:b8:88:92:eb:fb:89:40:3d:1a:a2:83:95:fe:d2:
90:b2:40:90:ea:67:af:0c:0a:22:fd:62:e8:0f:ee:1e:76:d7:
90:e1:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:06 2025 by rpki-client