Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier: Otnqnn3Ti3z2hHRC7wNAfejYJEn84E1E6an8uQnhdIc=
Subject key identifier: A0:5D:0A:DC:54:DC:14:EE:45:A9:76:88:F2:E4:50:7C:4C:81:06:99
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 01965793932A112FECA91EAE969A26B76B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number: 0F79
Signing time: Mon 21 Apr 2025 09:00:11 +0000
Manifest this update: Mon 21 Apr 2025 09:00:11 +0000
Manifest next update: Tue 22 Apr 2025 09:00:11 +0000
Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: duT80czv8F32dNWSyBhGesyX+fP5vcr5xDA9kiP59So=)
2: EIPXP4SEmPbV8aQA2-5L0Ta_OhQ.roa (hash: YwImDgJjuNmka436Jqvx4IjnyNxYmhqYhI9Yd1gMUo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:93:2a:11:2f:ec:a9:1e:ae:96:9a:26:b7:6b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Apr 21 09:00:11 2025 GMT
Not After : Apr 22 09:00:11 2025 GMT
Subject: CN=a05d0adc54dc14ee45a97688f2e4507c4c810699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:14:42:d3:51:56:bf:c8:ed:95:50:ac:8c:
1a:a2:2f:94:47:fe:ea:4c:2a:89:d6:31:51:7b:80:
6d:03:62:f9:38:62:67:00:5c:4a:18:0a:b9:3d:ef:
37:da:16:99:08:98:67:01:37:5e:52:55:a4:5f:a0:
85:4f:66:ca:03:b2:49:77:64:2b:3f:92:c6:ff:dd:
94:97:ec:ea:f5:6e:23:52:2d:fd:a0:73:55:e1:3d:
4a:aa:ab:5f:33:db:27:18:19:5c:88:9b:2e:d7:31:
43:f8:3d:73:ad:e5:21:02:52:01:90:5e:40:c3:ef:
64:78:bd:3b:48:c0:1e:25:c8:01:88:7e:3c:3b:a8:
91:2e:76:f9:53:ce:99:1d:fc:ae:32:a2:7b:21:db:
8a:e9:34:9e:a8:bf:ce:7b:ed:ec:43:42:a3:84:1f:
49:49:1f:09:b5:64:8f:02:a7:e8:7d:12:87:9c:07:
57:d1:7f:dc:53:33:29:da:ef:9c:0c:17:e2:e6:fe:
98:de:62:00:c4:ea:81:53:d0:52:e4:f3:e4:25:45:
c2:71:ef:79:09:da:0a:b8:26:32:2a:6a:97:42:18:
d0:0a:94:b8:dd:b1:84:b7:ec:02:3a:60:fa:49:5f:
7e:4a:7d:6c:36:0e:cb:ad:19:cd:07:2f:39:95:29:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5D:0A:DC:54:DC:14:EE:45:A9:76:88:F2:E4:50:7C:4C:81:06:99
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:01:0b:77:81:b2:db:e2:1e:51:72:2d:71:94:45:18:65:3f:
62:00:a1:59:ea:89:b0:5a:2d:92:50:bf:08:6a:56:32:6e:17:
97:04:15:db:40:9a:c4:9f:a1:78:9a:cb:26:cb:6e:e8:c5:50:
ba:10:13:e2:3a:c5:6f:35:39:cb:d3:48:c2:ea:9b:f5:80:af:
eb:01:84:1d:4a:37:ee:44:d2:b1:a4:9b:e5:33:75:d5:23:f6:
17:5d:74:a0:67:65:3c:47:21:fc:62:d5:0e:25:77:25:b5:10:
40:6e:93:82:1f:5b:1d:f1:8d:e7:7b:ec:8e:73:ce:e1:e6:d1:
12:75:75:03:b9:ef:72:e0:5c:dd:bb:ce:cd:30:d0:2b:ee:20:
a6:6d:69:02:6e:f3:fd:0a:46:1a:e8:87:b3:75:d5:c4:5e:50:
0c:93:05:f6:10:72:6a:5c:57:60:3f:20:24:24:c8:e6:35:9d:
b5:bd:f4:2e:7d:4c:86:c8:6d:bc:c1:07:f6:61:22:86:e7:be:
40:e1:bf:a4:8f:6b:3b:62:f5:a1:e6:02:7b:fc:bb:5a:99:f3:
28:15:e5:7a:bf:f6:21:4b:9f:b9:a8:d7:e9:66:1e:d0:8a:e0:
2c:a0:b0:51:14:56:c9:d4:1e:f9:81:11:0a:49:bb:01:a9:48:
7b:a9:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:42 2025 by rpki-client