Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: 6kAL3RexvNUcYDS4yTbzjLa+AQ7ZXC0D2wJMbDlTVE0=
Subject key identifier: 91:3C:62:62:B2:D8:F2:E1:27:7F:8E:10:81:53:84:50:B6:6C:D1:D1
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 019681D9527A71B253A501C724CC56727C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 04D0
Signing time: Tue 29 Apr 2025 14:00:25 +0000
Manifest this update: Tue 29 Apr 2025 14:00:25 +0000
Manifest next update: Wed 30 Apr 2025 14:00:25 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: qWJs/bZlTbYNteVmhnM9bpT8LCczHdWdE24Xmos1P08=)
2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:52:7a:71:b2:53:a5:01:c7:24:cc:56:72:7c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Apr 29 14:00:25 2025 GMT
Not After : Apr 30 14:00:25 2025 GMT
Subject: CN=913c6262b2d8f2e1277f8e1081538450b66cd1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:32:89:1f:90:a4:1e:49:4d:df:ac:3c:28:
19:14:60:c5:96:09:18:fa:c7:6d:50:8d:a4:9b:12:
9c:99:8a:fe:c8:38:b8:e9:ad:b1:6f:cf:86:f3:fc:
bb:4f:05:71:5b:0a:77:75:a6:a4:d8:61:09:58:ac:
e6:ec:23:20:38:36:f4:30:02:63:1b:b8:c3:27:b5:
b0:f7:4d:b4:88:68:66:27:ef:98:2b:a8:66:e2:b7:
ee:82:a0:b8:f7:56:ca:ba:85:04:e2:31:29:46:65:
d4:11:94:cf:a4:00:ae:ac:a2:7f:b7:83:d1:c0:54:
26:66:1b:b8:97:b3:9b:e7:9e:f7:2b:1f:8d:26:78:
d2:79:ef:ca:75:4b:d1:ce:11:fc:79:23:bb:29:4b:
a5:69:18:f6:a6:c2:30:bd:85:10:b7:88:56:ca:e8:
1b:2b:11:ab:8e:ce:89:f3:01:20:42:30:8f:a3:bf:
ad:18:50:58:f2:24:60:bb:cb:7c:5c:10:cc:20:5a:
d1:91:d7:b5:0a:ce:18:1a:89:ef:f1:90:0e:e2:6e:
4e:89:c3:83:cb:50:fa:dd:8b:49:e2:b8:cb:65:9a:
91:92:99:f4:a0:8a:a5:31:93:3f:eb:78:64:45:f8:
c9:fd:47:9b:34:42:da:90:58:0e:01:d9:b0:ff:74:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3C:62:62:B2:D8:F2:E1:27:7F:8E:10:81:53:84:50:B6:6C:D1:D1
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:7a:92:da:ae:4a:72:9f:e4:60:92:b6:ff:16:55:c0:2c:
19:28:7d:b6:5e:9d:a3:c3:30:ce:f8:38:19:73:75:4e:18:38:
63:9a:65:44:af:89:e0:5e:63:45:1e:58:8e:b3:67:6e:c2:cb:
d0:62:d6:1f:c8:fa:d6:6f:87:b2:f1:26:21:4d:60:aa:6a:9c:
0f:a0:92:98:f6:e7:c7:42:b1:0b:45:fd:19:8c:31:48:14:2f:
8c:64:56:9c:4a:33:18:5c:eb:a4:86:a6:8a:93:92:9e:ad:13:
e9:8b:ff:13:e8:c8:bb:a7:2a:fa:29:4c:8e:aa:e4:89:97:ce:
74:1a:64:4f:f4:ad:3e:de:11:84:2e:32:3b:0d:8f:13:35:fe:
58:da:b7:f0:b4:02:85:aa:e9:fe:84:8e:39:b6:90:73:34:c7:
dd:55:b6:09:ca:9c:bd:b8:7b:40:96:83:c2:4e:31:11:ee:30:
33:37:5e:eb:eb:08:04:42:57:8c:35:c4:e4:94:4c:04:17:17:
26:96:ad:ee:36:16:d1:57:97:37:c4:a1:c7:4a:9f:c0:30:1d:
a1:57:6d:aa:e1:e8:65:92:fb:eb:9a:72:ab:7e:ea:a7:83:28:
77:6c:b2:28:ae:e6:7a:52:3f:15:75:0b:1a:82:56:cc:3d:9d:
eb:74:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:47:35 2025 by rpki-client