Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: +ryr9onNh28tzdVA5CwC5lR7LPHRMI7NJuebL/hMoJc=
Subject key identifier: 42:34:8D:E3:B4:70:D6:15:C7:AF:03:F1:52:A5:D0:D0:8C:73:31:15
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 01964C347E0BAC3122C27283DD1275517CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 04:00:30 +0000
Manifest this update: Sat 19 Apr 2025 04:00:30 +0000
Manifest next update: Sun 20 Apr 2025 04:00:30 +0000
Files and hashes: 1: _-ujCkb2AK4IkutlVxIW61CZKcg.roa (hash: ZnHaosgaFt/JXW9m08DluSmRz1C9FDWxKl8XbDANYsM=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: yZWCg0shJFqJa45IHWB4acXPT1eUtc01w/Z5apApS2U=)
3: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:7e:0b:ac:31:22:c2:72:83:dd:12:75:51:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Apr 19 04:00:30 2025 GMT
Not After : Apr 20 04:00:30 2025 GMT
Subject: CN=42348de3b470d615c7af03f152a5d0d08c733115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:a1:ec:52:25:2f:6a:75:22:48:15:72:fc:
78:f8:7c:52:4c:4c:d5:fb:55:d5:08:66:44:07:42:
25:87:b6:9f:bd:9a:13:31:e5:c3:7f:3d:fb:de:f1:
46:10:b7:2e:86:e5:1b:46:f3:94:df:24:e0:1f:6e:
2d:1e:ce:2b:89:92:5a:3e:7b:37:16:e9:e8:d6:22:
03:7a:7b:2b:72:80:8c:14:64:1d:b9:64:dd:43:c3:
73:a1:28:5b:c3:df:8d:2e:3a:75:cc:67:57:b0:a9:
82:b7:b7:27:80:65:8d:e9:06:2f:a9:c4:f5:e5:bc:
2b:15:fd:1e:f7:cf:05:71:65:24:7f:67:bf:4a:cb:
e2:0f:52:e7:2a:64:79:21:fb:fb:17:be:2f:f9:0e:
f9:18:db:6d:62:60:ac:09:d6:e9:59:b4:73:68:68:
c6:4e:26:89:48:86:57:eb:ed:ac:bd:d4:c5:43:79:
34:56:56:ef:ac:a6:c4:24:79:5f:d1:87:5c:a8:9c:
3a:a7:08:fb:34:38:cd:d8:c8:23:b6:3c:02:6e:1a:
b4:2d:ee:93:3d:35:52:e0:26:98:a4:f8:47:00:45:
03:3e:cb:1c:01:d0:e1:70:a8:4b:4d:fc:09:b2:44:
d3:f9:a7:bb:6f:46:90:2c:75:b1:07:74:75:db:32:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:34:8D:E3:B4:70:D6:15:C7:AF:03:F1:52:A5:D0:D0:8C:73:31:15
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:58:eb:2a:03:82:4b:12:db:c6:4f:a0:44:56:41:f1:c6:ed:
d9:be:e4:a7:6c:f2:2c:36:eb:c0:3e:53:0e:7b:47:9d:ab:7e:
e5:74:fe:64:b3:97:ef:52:4e:1b:ca:e9:88:71:79:ac:00:4d:
4c:02:08:75:bc:8d:da:1a:a2:85:96:24:a0:2b:11:cf:37:60:
e0:c9:0e:4c:a5:4c:2c:0c:37:e3:23:76:c9:60:bf:46:1d:5b:
8e:86:8b:55:4b:48:9a:7b:df:9b:5d:83:a1:f8:87:80:29:7d:
21:94:92:45:dd:64:0a:da:c7:1e:f9:71:f2:ec:d5:f1:c6:2c:
13:8f:b2:3c:4b:a7:18:c7:ba:08:82:11:73:f0:d0:03:dd:30:
7f:df:3f:f7:08:18:42:34:e7:6b:99:d6:a5:9a:e4:cc:aa:1e:
41:43:b9:78:2e:54:f6:73:b9:7d:97:3e:76:fe:eb:a2:2c:8e:
db:0d:6c:77:ff:7d:56:8c:0c:9d:74:cf:bf:e6:fd:33:fb:a6:
42:53:18:34:33:84:55:a0:0d:3c:46:51:04:87:63:85:28:f7:
e1:64:ca:03:56:70:11:ce:58:3c:3f:c1:be:63:5e:f0:b7:d8:
6a:a1:5c:a2:9f:0f:75:18:53:88:45:59:dc:44:0f:01:69:62:
ac:9c:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:21 2025 by rpki-client