Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier: /ePeu7LRxm9C5+6RLsly9qiIkq9X/48pH6bafuvx2CY=
Subject key identifier: 07:62:68:14:1A:CC:AD:FF:C6:3C:01:8A:61:A1:78:32:A5:96:3C:11
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial: 01958F612A2658BB855675E95ABD19CF725B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 12:01:04 +0000
Manifest this update: Thu 13 Mar 2025 12:01:04 +0000
Manifest next update: Fri 14 Mar 2025 12:01:04 +0000
Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: xMlk/Nh4gUynBE+7BYeMtzqqNhSAHWQqy3Cn9fLzfTk=)
2: BfpSqqWPnz2zm8axpIU080CSsRs.roa (hash: i9cs+yG6O1Ft1obwZZ0jOFlWDCTv2KU1uV2QUmB00UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:2a:26:58:bb:85:56:75:e9:5a:bd:19:cf:72:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Validity
Not Before: Mar 13 12:01:04 2025 GMT
Not After : Mar 14 12:01:04 2025 GMT
Subject: CN=076268141accadffc63c018a61a17832a5963c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:43:be:d8:ed:ea:3d:9b:08:df:f5:5e:0c:
26:d0:a0:72:90:71:14:c3:ee:63:73:89:82:b2:a5:
89:79:aa:a5:6f:89:71:76:f2:40:51:4a:ba:d9:7a:
99:80:c8:3d:9d:ec:14:01:14:16:18:50:f4:cc:53:
72:5f:30:5d:4b:3a:aa:ee:a5:ef:30:20:3f:88:ec:
9c:53:53:54:65:df:a2:f2:93:e3:37:6f:b4:dc:d9:
35:57:78:5b:d1:66:9b:a8:08:fd:6f:ee:fc:03:12:
02:1e:f4:f9:e7:36:ff:30:26:f0:26:dd:b7:be:b0:
aa:9a:59:cf:f3:b4:aa:f3:10:67:69:a0:59:96:53:
59:3d:ba:7c:6d:73:a5:a2:a5:c4:17:4b:2a:4b:b8:
34:a0:a3:c1:12:ca:10:4c:b9:1b:02:e0:3e:fb:14:
eb:d2:f4:09:af:51:c2:da:07:25:c6:85:e0:fe:4f:
0d:c3:4e:a3:c2:d7:d4:81:3a:67:b9:1a:6c:49:64:
06:18:89:23:8f:fb:b9:11:f7:e2:a4:12:38:82:0c:
44:97:ef:23:05:23:b0:8a:ca:03:2d:44:de:f0:d8:
64:0f:d8:1e:08:6c:b5:a4:14:78:88:de:8a:9c:a6:
4a:80:58:85:6e:c0:51:90:d3:bf:9b:31:98:7b:ab:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:68:14:1A:CC:AD:FF:C6:3C:01:8A:61:A1:78:32:A5:96:3C:11
X509v3 Authority Key Identifier:
keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a1:1b:a4:06:da:9a:dd:19:55:6c:a5:72:e3:a8:69:19:5b:
25:d5:e3:bc:b7:7d:32:51:12:aa:bd:0b:de:6a:21:de:e9:c4:
82:eb:ce:d9:79:c7:bd:49:50:b4:99:2f:04:0e:b4:40:c3:99:
98:83:ea:8f:6a:83:19:5c:9c:c8:cf:db:a1:c7:bb:44:8d:fe:
d2:ab:16:7a:f4:c2:c0:c2:f4:3c:40:61:71:29:2b:d9:91:b1:
df:00:5a:fc:b1:de:f8:f2:9a:c3:03:0d:ea:8c:05:8c:98:55:
59:88:4f:c7:41:39:56:d6:e7:b4:19:a9:36:40:5e:39:5c:fe:
de:1a:9c:69:18:45:f7:f0:63:db:c7:95:ed:2b:f1:46:92:7e:
22:e5:63:16:1e:e2:4d:a3:ed:ab:46:a9:98:55:a8:3a:18:77:
97:bb:9c:b8:27:1d:a7:b6:6c:19:88:eb:77:0c:ca:ea:48:78:
19:cb:a2:fe:c4:a3:65:c4:74:88:a0:97:c1:22:91:1d:d0:53:
dd:d9:6b:10:95:3c:76:1a:bd:5e:26:bc:ee:8c:49:c6:a1:72:
54:37:b1:3a:b1:51:15:c4:f2:72:12:31:e6:49:d9:2f:93:29:
9c:a1:27:c0:d2:98:c7:e0:89:16:33:fb:b7:eb:ef:e9:3a:0b:
bd:e9:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:53 2025 by rpki-client