Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: NqKIacgz7p5j1e8anVRXdsqZ46WzI1cp8tJrIXwFWAs=
Subject key identifier: 60:99:DA:0D:02:33:A0:05:C8:EC:00:23:C3:BA:62:34:AC:FA:1F:3A
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 01967D580255713A4C17ED889E4BA6E8DD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 17:00:41 +0000
Manifest this update: Mon 28 Apr 2025 17:00:41 +0000
Manifest next update: Tue 29 Apr 2025 17:00:41 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: 1mo8VsC6MFnBBBZlOo28QDYtQntjjWNPAIgIGrJj7a0=)
2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:58:02:55:71:3a:4c:17:ed:88:9e:4b:a6:e8:dd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Apr 28 17:00:41 2025 GMT
Not After : Apr 29 17:00:41 2025 GMT
Subject: CN=6099da0d0233a005c8ec0023c3ba6234acfa1f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:11:a9:82:c1:a9:48:77:8a:95:01:37:17:
fe:68:f5:2d:35:21:17:a6:e0:ef:be:2c:a6:c8:4c:
0a:25:ed:17:a6:ab:58:99:a6:e3:5b:0a:56:78:e9:
c7:c6:51:05:6b:98:d7:33:e9:a6:70:3c:73:a3:d9:
ec:88:6b:1d:5c:48:67:85:17:56:a3:6b:d3:83:80:
a6:a1:b5:ec:74:d3:be:99:83:c0:77:3b:21:25:31:
4a:e8:a3:e0:db:67:90:d2:81:82:85:f4:ea:83:a9:
67:6e:e8:ad:c0:1f:af:2a:f7:68:e1:46:13:f8:35:
77:9d:b6:7c:88:15:bf:68:1c:52:3b:a9:a4:fa:41:
21:ec:b9:29:1d:aa:64:f1:e5:b3:64:00:fe:c8:01:
b8:6e:1b:51:06:09:08:24:80:37:82:cf:f1:55:04:
cb:42:f8:a2:63:ad:44:87:b7:d4:02:ae:13:1a:c1:
9c:09:d0:8c:b5:da:90:8a:3f:10:f8:af:5f:21:65:
86:fc:01:48:39:1f:4d:63:2c:1c:4a:41:69:93:d4:
f4:54:d7:6d:87:25:68:7b:c3:2e:dd:66:d7:16:09:
cf:76:55:1a:5b:d1:25:d2:0c:fd:52:34:92:30:55:
62:dd:48:6e:0f:86:66:0d:66:f9:7c:9c:b5:bd:46:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:99:DA:0D:02:33:A0:05:C8:EC:00:23:C3:BA:62:34:AC:FA:1F:3A
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1c:9b:ca:ea:66:06:02:66:8d:ec:0d:5f:32:d3:37:e6:7d:
da:a2:11:4a:42:cc:68:bb:90:b1:a9:15:09:88:d1:ca:37:01:
b4:cf:1c:b1:d3:a9:aa:09:20:13:07:5f:08:0c:9a:0e:84:c9:
84:3f:8c:14:ad:06:53:b1:5e:87:bf:5e:bb:03:1e:6d:e5:a7:
47:b6:07:c3:72:8f:1f:89:07:bf:d3:1f:20:a4:8f:b7:0f:d0:
5c:19:24:fc:da:8b:75:ac:f0:75:91:f3:b5:5f:84:6a:40:c2:
27:bf:f7:a6:b5:39:5f:7f:83:6a:61:75:00:af:58:c1:08:82:
ae:10:b7:3f:85:d3:45:06:39:0e:09:1f:7d:ea:8c:57:ce:47:
b6:b2:06:cd:68:2f:50:21:25:6d:10:fa:35:f6:38:d9:c3:f8:
9e:65:be:a4:46:5d:4b:84:f1:f1:cb:a6:97:09:36:43:6e:2a:
1e:52:50:12:3e:eb:2e:b2:6a:dc:4a:6a:fa:03:22:75:79:7e:
2a:e1:e4:68:7a:51:ec:f5:dc:ba:6a:ae:b4:59:52:4f:0e:ba:
4c:9b:3e:3a:ab:0c:2d:25:51:18:a4:61:1e:43:ed:e6:23:aa:
7c:17:81:e0:36:61:89:60:e0:2f:74:cd:d1:cb:10:63:15:87:
a4:56:94:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:16 2025 by rpki-client