Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: kiyt7eziWogErAit9xXk4t9aTzwfuJACGM2Ma8KYZ0s=
Subject key identifier: C5:EA:92:1B:BC:41:E4:B3:26:52:8B:EE:DD:85:FE:DC:DE:57:98:02
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019632081448100937720A6E9909C181188A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 14F5
Signing time: Mon 14 Apr 2025 02:01:52 +0000
Manifest this update: Mon 14 Apr 2025 02:01:52 +0000
Manifest next update: Tue 15 Apr 2025 02:01:52 +0000
Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: ClBMdLB8nPxiF+R6LaVsxiHuVxvJaZcK8M9RzP2QS/I=)
3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=)
4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=)
5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:08:14:48:10:09:37:72:0a:6e:99:09:c1:81:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Apr 14 02:01:52 2025 GMT
Not After : Apr 15 02:01:52 2025 GMT
Subject: CN=c5ea921bbc41e4b326528beedd85fedcde579802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:97:3c:c5:67:fd:9a:a8:95:0c:dd:5e:c3:
68:be:81:3d:1f:f9:40:8c:f9:92:62:84:00:8e:2a:
e6:2e:b8:9f:74:01:74:e1:3d:5e:6b:05:44:55:e5:
1d:f1:f9:3d:75:6d:57:2f:11:47:8a:a4:b0:0a:10:
07:d9:c9:e4:c1:ce:8d:7f:19:8b:fc:09:8c:be:b9:
b7:e4:cf:02:03:77:d3:e3:1d:8e:27:f3:36:30:62:
36:2b:29:2e:dc:91:8b:60:b9:8c:6c:3d:47:83:85:
dc:5b:8f:20:8b:bf:dd:80:bf:5e:af:50:09:01:82:
64:35:3f:6b:66:40:15:72:c0:c0:a4:c5:af:53:7c:
e9:b1:ba:6d:fd:f6:fc:c9:b8:dc:be:b4:ea:86:f5:
c4:28:60:86:90:d5:1c:84:e9:ce:40:d1:7f:4c:7e:
65:59:13:1d:87:65:79:77:d0:9e:85:61:ac:3c:19:
29:6d:2f:cc:55:f9:72:3d:17:11:b0:f4:58:b4:b6:
8a:6d:70:f0:81:45:27:4b:77:b4:b7:ee:56:fe:37:
fd:24:bd:63:85:0a:16:9a:7b:5a:b5:9f:c8:2b:0f:
4a:a5:53:61:84:c1:e1:61:1c:bc:63:6c:fd:e0:0f:
fc:b8:3e:8d:e2:81:75:b8:af:96:1d:e6:7d:21:3b:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:92:1B:BC:41:E4:B3:26:52:8B:EE:DD:85:FE:DC:DE:57:98:02
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1f:e1:65:fd:40:f2:a2:83:3e:cb:7c:d0:9a:58:9f:60:9d:
33:e1:b2:ff:a8:3d:62:fd:bb:22:b1:50:f0:07:1b:be:b0:d6:
9a:16:8d:4e:73:b9:5b:fc:2f:bf:99:ac:fc:6c:d5:68:29:cf:
26:5c:0e:0d:85:34:a0:e5:5e:95:80:cb:01:09:b0:9c:85:f7:
ec:78:4d:1d:9a:e8:65:ee:60:ca:ef:40:23:ec:36:e4:da:0a:
29:a6:da:18:db:74:c7:f4:2f:e4:ee:c3:dc:c6:21:55:05:a6:
f6:c2:a3:91:6a:7c:5f:19:9b:88:49:27:8a:58:5b:ee:f4:d9:
f0:59:c0:0d:48:31:18:5e:d9:bb:78:0d:29:3d:1a:54:e0:c6:
fe:af:e6:28:96:0d:f6:8f:a1:84:1a:09:db:07:67:10:3d:a7:
45:9e:4f:50:8c:89:65:70:d4:84:5d:ab:6c:b6:18:e3:fc:55:
17:5f:f5:30:f9:76:c8:a1:cb:ce:4f:08:62:d6:a5:1c:3b:7d:
de:44:a8:b5:27:b2:2c:c9:04:91:8f:b9:7b:1d:08:22:99:85:
82:6d:ae:9e:6c:4c:63:03:ec:eb:1c:58:fd:e5:f3:3b:1b:2b:
78:39:4a:02:78:d7:87:32:38:1a:35:b2:bb:87:a0:0b:8f:65:
5b:61:7c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:27:50 2025 by rpki-client