Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: i9/IHReoRJ5JDCLiTAjUAvUVLVEjUXP8db1jLXS/onE=
Subject key identifier: 8B:AC:13:74:7C:13:EB:1C:B9:B5:BF:A4:FC:3B:93:1A:85:C8:37:F3
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 019649D874653CED06E54F2DA23007B7FC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 17:00:44 +0000
Manifest this update: Fri 18 Apr 2025 17:00:44 +0000
Manifest next update: Sat 19 Apr 2025 17:00:44 +0000
Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: /a0cU1hMSOnbdh0kTjBgoateiY6+Zr6873E65oVLLnM=)
2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=)
3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:74:65:3c:ed:06:e5:4f:2d:a2:30:07:b7:fc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Apr 18 17:00:44 2025 GMT
Not After : Apr 19 17:00:44 2025 GMT
Subject: CN=8bac13747c13eb1cb9b5bfa4fc3b931a85c837f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:d1:d5:a7:ad:c4:ed:56:76:80:ca:20:ab:
ef:c0:e3:d7:b2:a8:65:cd:26:b3:f6:f5:36:26:cb:
a6:4d:22:51:81:7b:28:09:e1:49:c7:6a:cb:22:82:
f5:ba:f0:75:84:e6:57:23:8d:73:b7:80:e3:df:0d:
ed:78:e3:90:d6:6d:15:3e:c9:24:aa:86:d8:20:f4:
ec:17:1c:0f:20:39:fa:23:f7:a4:c7:41:9b:26:3b:
f8:c2:b6:dc:cb:f2:de:27:78:9e:b6:b7:9a:d5:c7:
47:36:db:3a:fb:f7:60:36:44:7c:02:91:87:20:33:
14:91:75:f7:a1:8d:ca:38:e3:46:be:8d:84:40:57:
ed:4c:1b:a7:ff:4b:f8:21:c4:35:af:31:5b:2f:cb:
28:46:96:5e:bf:9d:98:5b:48:8d:18:d2:9c:ee:d4:
cd:54:87:56:21:63:9e:14:b0:d2:e7:54:af:1d:ae:
b3:df:34:31:d5:30:9c:18:33:fc:02:b5:65:a1:f3:
2f:40:c1:44:43:c5:e7:38:6a:d3:24:19:7b:c5:0d:
78:c8:3d:0a:b1:45:8b:b0:b0:b2:93:b0:1d:da:e8:
11:fe:60:9d:bf:0f:11:f2:6c:d7:b6:69:cc:8c:5a:
c6:56:b6:0b:2b:da:56:14:a2:f9:6d:c9:61:70:ed:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AC:13:74:7C:13:EB:1C:B9:B5:BF:A4:FC:3B:93:1A:85:C8:37:F3
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0d:c6:d5:04:42:6a:04:01:a8:c1:58:32:27:d5:ed:2a:66:
de:66:e3:6b:c6:e3:18:dc:29:5c:01:a9:04:19:99:1a:30:cf:
60:8e:1c:4b:b9:af:18:27:4f:f0:af:a6:d4:90:0f:b4:f4:11:
9b:8d:a6:59:56:01:2e:4a:3d:7f:e6:bc:b9:a8:4b:26:62:eb:
97:e6:a9:bf:08:f2:6e:8c:67:85:38:84:00:62:9a:38:ce:c5:
10:17:c9:7f:9d:b3:6f:b5:6d:03:3f:65:7e:46:ce:79:23:53:
c3:1c:f3:02:03:ab:da:98:d1:a0:57:7b:71:01:8e:7c:01:83:
bf:3f:ac:38:b0:d6:70:ab:c2:be:26:25:a0:0b:19:4b:73:ae:
f7:66:28:4c:be:da:71:16:09:51:9a:9f:9c:93:e4:a9:b0:f1:
75:28:25:63:eb:4b:e5:6f:af:07:fc:d2:e6:cd:06:21:84:ab:
d5:3a:2f:e2:ea:40:cb:a5:17:b9:f9:25:80:25:52:3e:d4:6f:
18:d5:8e:0d:fb:3d:d1:9f:a1:00:73:ab:65:f2:16:c9:13:0e:
5b:68:d7:df:3f:41:d7:b4:d1:18:c7:ea:05:e4:8f:4d:3a:6c:
85:db:f9:9a:79:b0:ba:54:51:ae:c5:0c:7e:d7:5b:ee:3c:d1:
36:f7:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:34 2025 by rpki-client