Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: I9firqToaoRozs/6XER4VCwahvoq6R+LWZ7XZkAI0Ew=
Subject key identifier: 0D:F5:F2:96:1D:70:94:41:66:57:05:60:BC:BF:D8:08:6E:BE:34:36
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 01958C29054FADAC14C4AC9CD08626CAF092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 21:00:53 +0000
Manifest this update: Wed 12 Mar 2025 21:00:53 +0000
Manifest next update: Thu 13 Mar 2025 21:00:53 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: jxyvt2IOLeKMsdguIlL/rviYDyX6l3oetPrf4WNVYOE=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:05:4f:ad:ac:14:c4:ac:9c:d0:86:26:ca:f0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Mar 12 21:00:53 2025 GMT
Not After : Mar 13 21:00:53 2025 GMT
Subject: CN=0df5f2961d70944166570560bcbfd8086ebe3436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:df:e1:84:fd:d3:fc:20:ea:65:e3:ed:0b:
ed:df:9c:1d:86:8e:e1:e3:29:4f:40:53:3d:26:0b:
c7:93:97:45:a1:57:ea:dd:5a:e2:fe:56:37:3c:65:
24:2e:01:e5:ad:6b:f6:10:5d:2b:d4:99:5b:b8:8c:
6f:e8:01:a7:df:b9:8c:67:7f:94:7f:0a:da:ec:ba:
ea:c5:69:7a:e9:e4:c2:c7:11:89:32:34:d7:e6:73:
cc:b8:43:a4:70:d0:5b:1f:96:04:b0:7c:ba:0a:01:
87:f7:0d:ab:1f:e3:c7:f5:46:51:c3:4a:51:86:45:
da:40:79:21:dc:45:af:a3:ef:0e:30:60:91:c3:a3:
2c:04:3c:c0:4f:d1:b2:2b:84:65:7c:2f:55:d9:36:
69:88:8a:4f:3b:17:0a:01:b8:b3:86:d2:47:1d:bf:
a1:21:97:43:d2:1b:b7:e6:26:0a:48:3b:4d:ac:a4:
60:a7:d7:c4:88:e7:e6:da:89:4d:4d:0e:dc:88:fb:
03:59:e1:2b:1f:32:c3:52:72:e2:6d:5e:12:9f:b0:
fc:3e:92:aa:0f:08:8f:0c:2d:77:c3:1b:86:26:0c:
77:cc:24:6b:47:a6:71:92:b0:a6:87:c1:e1:72:76:
7e:26:db:0a:87:24:49:52:f8:5c:11:31:33:27:c3:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F5:F2:96:1D:70:94:41:66:57:05:60:BC:BF:D8:08:6E:BE:34:36
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f7:7e:2f:5a:76:27:6a:2f:06:02:74:39:73:1b:cc:3e:50:
f4:4f:a0:a7:7a:5a:6d:e4:10:e4:e2:bf:68:29:0e:8e:ae:b3:
2e:19:5e:8e:9a:b7:b2:58:28:bb:54:07:df:65:c4:c8:11:00:
e2:16:20:db:8b:a0:21:33:2d:f6:b4:0a:57:a2:fa:63:67:d7:
ca:55:4d:45:43:22:31:3b:8c:c9:42:c0:e9:f7:0c:b0:ab:e8:
63:3f:9f:7d:81:df:08:5e:a3:a4:9f:e5:ff:23:0c:99:38:bc:
1f:43:0b:8e:c3:74:08:3a:77:6e:f9:59:93:20:59:f8:59:36:
73:5f:db:71:fc:16:2c:05:0d:f8:5c:a9:78:b4:8a:36:90:44:
e9:a1:55:21:fd:a3:8d:34:ae:6f:46:bb:3e:6c:9e:b1:f5:53:
b5:75:af:ee:15:10:9e:88:06:6a:0d:92:81:1f:c1:02:cb:87:
89:2a:70:f7:96:19:6d:5c:22:22:74:c4:25:6c:fb:a3:84:13:
07:76:01:b4:da:55:c3:ab:41:ad:54:33:fb:0f:0b:43:65:6a:
b1:21:e6:63:bf:f1:a4:96:f4:ca:d0:e8:a4:20:0d:23:0d:3a:
f3:02:2e:5d:ba:8e:bb:9a:41:c2:52:d8:d1:9b:af:c1:a4:e5:
5d:17:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:09 2025 by rpki-client