Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
File: 4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft (raw, json)
Hash identifier: gRk6Ifhu3uRCeJg+8eh5PCdp9oIGd8ThfrwI4Sx3M1Q=
Subject key identifier: F9:05:D6:CD:69:4A:DB:A2:7D:59:D6:2A:D1:A5:E7:C6:C7:99:A8:55
Authority key identifier: E2:94:71:AE:0A:AA:CA:B8:3E:29:3F:1F:8E:A1:BD:70:70:EC:33:5B
Certificate issuer: /CN=e29471ae0aaacab83e293f1f8ea1bd7070ec335b
Certificate serial: 019510C740CA4481791C28B375F0DEFBA9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
Manifest number: 074B
Signing time: Sun 16 Feb 2025 22:00:48 +0000
Manifest this update: Sun 16 Feb 2025 22:00:48 +0000
Manifest next update: Mon 17 Feb 2025 22:00:48 +0000
Files and hashes: 1: 4pRxrgqqyrg-KT8fjqG9cHDsM1s.crl (hash: HGyiFFh2kc6Xvtphb+SzpSmIWSD2yIX/7LyxOZzu0Xc=)
2: lEVgi9I8nrIc-HhV_LhTJI8_UII.roa (hash: ee0opnDYNm6NaGhq5qqdUOHizQiOIqJZQ2o60F6FIkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:40:ca:44:81:79:1c:28:b3:75:f0:de:fb:a9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29471ae0aaacab83e293f1f8ea1bd7070ec335b
Validity
Not Before: Feb 16 22:00:48 2025 GMT
Not After : Feb 17 22:00:48 2025 GMT
Subject: CN=f905d6cd694adba27d59d62ad1a5e7c6c799a855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:3a:5d:f8:82:f1:64:1f:47:c4:d2:10:ee:
35:94:91:03:d7:14:ca:09:88:60:86:22:9c:ee:79:
4d:ec:35:ab:25:0a:ab:38:0e:1b:84:03:6a:9c:d4:
18:4c:f8:32:91:fb:80:ac:ca:ec:ee:c4:92:82:32:
48:a1:f2:74:7f:43:7c:64:d4:26:b3:05:0d:3c:4b:
03:e2:51:c8:bb:3a:79:fc:d6:36:26:57:49:12:15:
dc:ae:bd:a3:b9:dd:07:d5:c4:61:80:e9:cb:3a:9a:
c0:86:24:b1:ed:d8:7f:b3:e5:e7:9e:10:31:40:da:
65:76:9a:33:ed:e4:3b:03:34:24:12:63:3b:1b:4c:
ec:cd:09:a3:53:65:25:4f:04:56:7b:94:39:90:7d:
dd:4c:97:c8:7e:96:94:68:c6:8a:bd:e1:f6:7e:21:
42:0e:c7:aa:8b:c9:94:e3:71:ae:c5:b6:1f:51:13:
85:2f:ce:72:24:02:a4:10:89:ee:88:ab:30:61:1b:
cc:89:44:42:b5:c2:93:ca:e7:9e:73:b3:95:00:dc:
d8:44:a0:64:f1:4f:2b:a8:0d:71:4b:0a:f9:27:15:
64:01:fc:1e:7a:29:96:c9:2d:53:38:53:65:ea:09:
96:6a:89:4a:a0:51:33:d4:63:e2:f7:a3:00:23:f9:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:D6:CD:69:4A:DB:A2:7D:59:D6:2A:D1:A5:E7:C6:C7:99:A8:55
X509v3 Authority Key Identifier:
keyid:E2:94:71:AE:0A:AA:CA:B8:3E:29:3F:1F:8E:A1:BD:70:70:EC:33:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f3:6d:51:6a:99:bf:a8:7d:8a:bd:56:b4:3b:20:38:67:62:
7c:f3:e5:2d:b0:ac:5f:9e:39:4f:33:e3:e0:ed:65:5b:77:df:
2f:93:1a:66:26:13:6f:c6:f2:7f:66:b3:ab:5f:bb:64:ed:eb:
25:30:66:e1:ec:c6:94:30:31:6f:73:36:51:2c:da:2d:97:d7:
48:9b:20:21:1f:d1:08:e9:92:8a:98:09:f1:fa:7d:28:f2:cf:
81:ed:a1:d1:c6:80:2e:d8:31:a9:64:e8:a0:b8:d7:ec:4e:ef:
bd:95:fc:f3:52:ed:13:d9:29:d1:ee:ea:e0:80:90:4e:9f:77:
66:b8:8f:c4:8e:6e:ff:34:b5:bf:f9:11:a9:18:a0:17:f8:75:
78:98:4f:04:db:01:92:ac:b6:19:49:ba:fe:fb:27:a1:5f:a7:
79:0d:6c:07:2c:9c:44:b5:14:4c:36:04:da:8d:fb:74:94:b8:
e3:2d:2e:e1:be:81:56:4c:96:ee:f9:6e:f4:be:e0:37:de:07:
89:e8:d0:45:d9:80:0f:89:b2:36:7c:47:41:07:60:5d:84:36:
cd:41:80:2c:77:57:3d:b9:35:f4:b3:8a:ac:32:b3:4e:99:31:
a0:ec:47:b4:08:ed:2f:0d:0c:dd:de:5e:fa:92:47:6d:a7:17:
61:7c:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:36 2025 by rpki-client