Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: WpuuXxLU50xZ/42tBDYalHmBWMJy9e0jn2yhREncal8=
Subject key identifier: 6E:66:8A:26:79:13:D2:19:83:8A:5F:E2:96:3C:62:70:2A:30:C0:FB
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 01964143444EDFF75175753D6AC183B10FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 13C5
Signing time: Thu 17 Apr 2025 01:00:49 +0000
Manifest this update: Thu 17 Apr 2025 01:00:49 +0000
Manifest next update: Fri 18 Apr 2025 01:00:49 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: MTUI9tNhMSXVxqGBGHsaXnn+aYH1dFUiCyOu5rx0GNg=)
2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:44:4e:df:f7:51:75:75:3d:6a:c1:83:b1:0f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Apr 17 01:00:49 2025 GMT
Not After : Apr 18 01:00:49 2025 GMT
Subject: CN=6e668a267913d219838a5fe2963c62702a30c0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:46:22:fb:0a:b4:71:d9:51:34:a8:fd:51:
72:be:1a:ae:26:4b:f2:45:35:c3:dd:f5:00:96:8a:
5d:3d:90:26:e0:9b:1c:9d:e1:2b:d3:64:6c:37:a8:
aa:20:9e:ea:98:f1:27:72:88:a1:c8:60:39:4d:a9:
d0:65:0b:f8:67:05:12:e0:6c:69:77:98:c6:e2:8e:
37:1a:87:e0:8e:b5:14:9f:a8:4a:72:fe:03:71:c8:
a5:b6:4b:4b:7e:a4:33:ed:a9:65:77:79:c1:49:4a:
80:1b:a5:e6:d3:98:ca:16:ce:43:10:ef:cf:8b:de:
ac:9b:24:c3:75:67:e2:b0:5c:a4:d8:04:01:51:a7:
0a:d1:e4:04:ea:f3:12:b8:ed:a3:f6:06:55:f2:b9:
70:e6:dd:56:fd:19:a7:21:5f:7c:ec:75:cd:7e:70:
d7:2f:2c:33:fa:fe:f7:45:27:d4:e5:b2:e4:63:f2:
b9:41:50:16:ba:80:db:70:79:a6:0e:47:3f:30:34:
64:f0:c9:20:e3:4e:94:fe:c0:74:0a:8b:3c:87:70:
cd:97:37:11:c0:d1:2b:aa:bd:6e:f1:1f:d3:1f:26:
b2:0b:95:75:13:29:6b:23:90:26:2f:51:3f:35:eb:
d1:2a:2c:02:80:50:05:bf:c2:69:db:57:10:ab:c1:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:8A:26:79:13:D2:19:83:8A:5F:E2:96:3C:62:70:2A:30:C0:FB
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fb:7a:3e:2f:aa:f9:52:7d:ef:e5:23:a5:f9:c3:2c:ca:d5:
4f:90:de:94:4b:26:08:34:a3:1a:15:b3:d6:43:62:2d:14:52:
0d:78:7a:be:52:34:b4:53:a6:f3:52:5c:41:f4:df:5e:fa:fe:
14:15:b6:c8:3b:6f:c4:b7:2e:90:03:f2:f8:2f:03:96:52:13:
80:4f:09:1f:de:86:1e:9c:ff:90:42:77:97:ad:02:ec:79:aa:
21:bd:12:00:8e:65:4b:bd:21:0c:97:3d:a7:de:fb:19:ac:63:
cf:94:72:8f:f2:44:f2:ee:56:ee:a6:ba:2f:de:d0:b8:0c:18:
81:45:a5:a1:76:6b:d5:03:37:e6:4f:e1:03:35:ca:1b:cf:eb:
90:b0:e0:ab:51:da:b7:1b:a8:95:6e:58:89:ac:e8:02:e7:2c:
42:e5:4e:3e:25:73:cf:ec:b8:8c:f1:8b:49:cd:4f:09:d0:83:
48:5d:7c:4e:0f:bd:40:92:9c:39:e7:5c:1f:ab:cf:d5:61:d4:
bb:14:24:d4:5a:01:6f:91:49:04:63:9d:bb:71:4b:76:60:42:
38:71:38:23:86:09:2f:65:91:43:c7:d1:09:7b:f4:b6:f6:96:
95:59:fd:5c:ae:ff:3f:c3:0e:5f:87:2f:65:62:48:82:1a:1f:
19:9d:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:30 2025 by rpki-client