Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: SJZpVGk0GMEmCF3aUtPk2DthowEAodv6FeJBvReKk80=
Subject key identifier: 6B:4A:3E:52:99:7F:F1:64:3C:62:DE:DE:F0:8E:A2:15:C1:78:E3:DC
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 01965011AEEC0F435E1FA7EB8A53D0E88BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 02E6
Signing time: Sat 19 Apr 2025 22:00:58 +0000
Manifest this update: Sat 19 Apr 2025 22:00:58 +0000
Manifest next update: Sun 20 Apr 2025 22:00:58 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: 2V7Xc3v/ZWy0unDQnap1ztuv/kBRxVS8mS6CU2Iro64=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:ae:ec:0f:43:5e:1f:a7:eb:8a:53:d0:e8:8b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Apr 19 22:00:58 2025 GMT
Not After : Apr 20 22:00:58 2025 GMT
Subject: CN=6b4a3e52997ff1643c62dedef08ea215c178e3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:61:0f:e7:65:34:6f:48:d4:f9:c1:a6:91:
97:14:c8:d9:1a:d9:fb:2f:00:7f:5d:a4:12:98:72:
10:7c:4e:21:45:5a:c2:3a:aa:56:d7:9e:9d:e2:37:
d8:ae:08:b4:f8:e4:3b:3f:4d:46:ec:ef:c6:50:2d:
d1:22:d6:bd:4e:49:26:d6:01:79:87:71:86:46:0f:
32:ef:fb:6f:f7:a8:8b:93:2f:9d:67:29:91:35:fd:
7c:5e:27:2d:1c:d0:7d:73:e9:b1:ca:8d:60:f1:57:
ff:25:1c:fe:00:33:60:0c:57:07:fb:f9:df:93:ae:
73:7b:59:6e:bc:ef:75:c7:12:23:8d:89:64:eb:fe:
b2:57:9e:01:36:da:c1:5f:60:f6:05:d1:aa:b0:d5:
23:52:07:a1:07:8f:3c:b2:ea:d8:0d:ed:76:d2:03:
a5:45:e2:de:c0:14:ab:2a:6d:26:95:d0:67:0c:22:
ec:51:8f:c8:f5:28:ea:03:0b:49:0b:4c:02:ea:15:
f0:4c:c1:12:2c:96:cf:f9:a6:59:ae:07:da:6d:8a:
f4:17:02:74:c1:3d:2f:0e:2b:97:d2:f8:24:34:1e:
33:fb:6a:a9:92:ee:28:70:8c:39:cf:53:78:b2:c4:
e6:7d:35:68:ac:6a:6f:e9:98:db:24:40:c7:0c:78:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4A:3E:52:99:7F:F1:64:3C:62:DE:DE:F0:8E:A2:15:C1:78:E3:DC
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:49:33:53:0d:07:9c:95:56:03:50:4a:10:a0:f7:51:69:62:
ca:49:93:ce:8d:43:8b:e6:f6:0d:a6:57:6d:e6:7a:91:b7:71:
76:17:41:de:d2:32:0d:cb:03:fc:b3:ff:a4:35:38:bb:ef:bf:
4e:12:42:c8:f8:41:1a:3f:99:eb:ec:92:76:78:b2:64:6d:1d:
8a:2f:3d:c0:d8:2b:eb:89:6e:00:21:9c:17:f0:79:f6:f6:e4:
b5:18:58:47:90:99:99:1f:c1:54:c3:67:23:c0:b7:3e:73:7f:
00:d4:00:21:76:12:9a:52:72:f1:71:7a:b9:c4:7a:b5:d8:00:
73:13:ad:ab:68:73:3c:b6:f8:b2:73:bb:4b:0f:b1:39:23:06:
f8:91:24:8d:f7:65:cd:06:21:a4:b4:9b:a9:bd:66:d7:04:ec:
50:58:93:01:63:10:ff:03:00:a3:fc:25:56:b4:50:af:65:1f:
d2:68:ee:99:2c:6f:52:a5:92:5f:ee:3c:20:9b:b3:b2:95:6f:
1f:34:47:fe:0f:b5:60:1d:31:48:24:db:92:56:45:1e:aa:d1:
59:53:66:e6:01:19:3e:26:b2:9e:3c:f7:75:33:59:36:d0:a7:
29:b8:93:e9:50:82:7a:fe:ed:d0:c4:93:fa:dc:44:ec:f5:ad:
d7:9c:8c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:18 2025 by rpki-client