Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: FAN5wnyKwXYm3kuA/KFuuXecGAeZmgwQbFyWyFAeYn4=
Subject key identifier: 97:17:DD:0B:7D:4E:F7:FF:3A:C9:25:2B:63:F7:1D:95:08:5C:18:91
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 01962ABC333E115B3B3A4B34C81219CD7964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 1010
Signing time: Sat 12 Apr 2025 16:01:39 +0000
Manifest this update: Sat 12 Apr 2025 16:01:39 +0000
Manifest next update: Sun 13 Apr 2025 16:01:39 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: cF85ThElJ+XVhza4Fg1xG0BCY24p7BvdpAWb9I9UUf4=)
2: NPk_GHNqq8k7MUydVHIUCQUBAQo.roa (hash: 8i7mapEQ11nmMTFwNuWUxWdEwqzqNv3Aacz7I3tfzMk=)
3: TY3bJpTGwSql-13Pjck1BzHDr8I.roa (hash: B/70euLBU/mf/YMvD1qZRHP7TxQr60sKZhW4C66SeVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:33:3e:11:5b:3b:3a:4b:34:c8:12:19:cd:79:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Apr 12 16:01:39 2025 GMT
Not After : Apr 13 16:01:39 2025 GMT
Subject: CN=9717dd0b7d4ef7ff3ac9252b63f71d95085c1891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:9b:18:30:0c:10:56:50:3d:73:9a:d1:6f:
1f:4c:41:cd:30:53:c3:68:c4:d0:22:62:df:4c:42:
d8:dc:c3:fa:7c:a8:6a:72:75:92:79:2d:6e:2f:b1:
c3:63:89:a5:8e:77:f5:e4:b9:8c:0f:88:66:03:88:
9f:1a:1d:e5:ed:0b:a4:4e:c0:bd:df:98:38:09:79:
03:c5:f9:61:d2:2e:1f:5a:46:9a:b2:c2:17:35:ce:
5a:c5:5f:3e:8b:f3:14:eb:45:23:8f:6e:73:26:83:
2d:97:2c:6f:dd:de:16:83:be:dc:99:10:b5:b8:9e:
7e:3b:28:38:ad:c0:0b:60:da:a5:54:24:3c:bb:8f:
dd:c5:32:68:54:41:2c:24:85:f1:a7:7a:a2:c5:c3:
57:af:20:12:be:c2:01:2c:bb:c3:19:31:39:85:97:
ac:f1:9f:81:91:22:64:89:0c:90:51:17:e4:0e:ad:
2f:0c:fd:c0:3a:fe:54:6b:9d:c4:2a:63:ac:ba:d1:
13:f7:19:67:71:5d:ee:c0:66:93:50:a7:07:e6:94:
8e:6d:28:89:72:a5:8b:56:f9:58:76:fc:36:ec:1e:
0e:eb:f4:d3:f9:05:e5:1e:06:bc:db:d4:74:3b:3a:
02:b3:34:e4:02:db:8f:79:fc:53:cb:af:cd:05:75:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:DD:0B:7D:4E:F7:FF:3A:C9:25:2B:63:F7:1D:95:08:5C:18:91
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:63:b7:a8:08:af:f5:91:0b:f2:78:70:fb:b9:fc:58:61:c1:
37:b6:37:ac:96:9d:c1:af:36:42:00:b8:81:37:48:da:55:bc:
84:84:2c:7d:cb:91:19:fb:19:8e:fe:19:58:52:40:b6:af:1e:
37:50:e4:9e:67:01:46:a2:6e:00:0c:9e:97:0e:04:37:6d:3a:
b5:8d:95:d1:20:40:ea:be:14:b2:8b:34:a7:f6:43:96:c3:a2:
69:ae:5f:ec:56:c7:45:3a:fb:01:77:54:82:70:82:4c:64:6a:
6e:62:15:32:0d:fa:d8:ad:ca:10:65:bf:63:84:ef:53:f5:3f:
03:6c:6b:43:d5:59:3c:a9:53:59:73:da:33:a6:c7:a3:63:0c:
62:9f:3f:7a:a4:5c:84:03:4b:57:90:54:0c:f3:b0:5f:77:ea:
a2:47:c0:7e:6a:ad:77:53:68:49:dd:1a:5c:d7:60:f4:49:71:
6e:5a:be:b5:f4:88:02:60:14:16:b5:45:34:a4:58:a3:3e:bd:
1a:60:b8:41:0b:d1:8f:7d:57:09:cc:b2:f7:30:60:bc:bb:23:
b6:df:c0:ae:6c:df:83:dc:e5:08:27:fd:29:3a:b0:e8:a9:08:
1c:b4:cc:9f:4a:e5:7b:bd:c2:8b:97:61:eb:af:44:24:cf:6c:
c3:40:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:19:34 2025 by rpki-client