Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: WKPMq6v7LCL0OKKRbkQ0vVHjU3/Z5b8k6IBI3FUlkdI=
Subject key identifier: A8:A8:5B:7D:45:DA:FF:C0:8F:19:B8:A8:1C:6B:60:2B:D0:30:BD:2F
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 01967A5739C04EE2CACA6AF72016D68EBA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 0F9B
Signing time: Mon 28 Apr 2025 03:00:58 +0000
Manifest this update: Mon 28 Apr 2025 03:00:58 +0000
Manifest next update: Tue 29 Apr 2025 03:00:58 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: graH9uYSCangQ5Q7NJdGY1C9j8BkwbzScwiKFPiJApw=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:39:c0:4e:e2:ca:ca:6a:f7:20:16:d6:8e:ba:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Apr 28 03:00:58 2025 GMT
Not After : Apr 29 03:00:58 2025 GMT
Subject: CN=a8a85b7d45daffc08f19b8a81c6b602bd030bd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:d0:f0:6d:09:94:91:8f:80:49:68:d9:56:
bd:73:8a:f7:d1:66:f6:79:20:cc:b6:85:6e:42:ae:
07:83:20:35:0e:39:60:2d:9e:71:d2:a9:f6:f8:8d:
79:ab:2c:36:50:2e:5b:56:ee:aa:a4:b5:ac:93:98:
c4:ac:89:96:3b:9b:42:57:3b:c7:c6:13:4f:b8:19:
07:4c:9d:87:76:bd:83:08:6f:b1:b9:c5:3e:04:6e:
c1:34:c2:8b:6b:46:87:e8:39:0a:b3:e1:02:cc:88:
3d:43:7e:e8:76:c3:f5:ec:67:65:13:79:e7:67:25:
cc:34:a1:10:47:b2:ea:1e:f1:a1:aa:e2:fc:ab:64:
97:b9:4f:e2:67:0f:c7:16:6d:a9:03:5e:36:f6:9d:
05:9d:03:07:45:30:f5:16:ad:67:39:8a:8a:b9:b9:
99:d7:4d:7a:d5:af:0c:dd:42:94:9e:00:01:8a:0a:
f9:af:4f:e7:6a:c1:43:80:37:2e:62:db:15:b3:99:
68:e8:18:d6:80:38:fe:71:4e:62:66:e9:3e:c6:70:
d2:cf:5c:f0:38:87:e7:6f:af:92:2a:4e:96:02:35:
b2:7a:7e:27:14:2e:ee:59:b1:e4:ad:3d:40:47:3c:
de:1f:3d:be:56:be:80:dd:05:fa:22:66:fe:a7:4e:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A8:5B:7D:45:DA:FF:C0:8F:19:B8:A8:1C:6B:60:2B:D0:30:BD:2F
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:48:08:e3:f4:75:8a:8d:b1:69:a1:b9:89:21:c8:b6:68:c5:
46:9b:82:15:be:fd:7b:47:a5:c4:1f:ec:32:22:37:62:d4:1f:
ab:93:de:1f:4f:ed:2f:fd:7f:62:fd:f0:7f:ab:bb:50:80:78:
0e:42:6d:27:95:e9:5e:47:07:e3:7e:4b:b9:92:48:38:66:22:
8a:43:48:1b:ea:d8:f1:51:2f:1f:20:68:11:3a:01:1a:15:a5:
07:22:1a:44:a5:8d:d5:1f:b1:65:0c:b5:b8:cd:8e:f2:68:09:
13:55:81:3a:c5:88:a0:41:74:67:21:c9:d0:ee:bb:2a:a5:2b:
ef:47:af:c6:0b:81:94:fe:75:02:d2:4b:77:34:4e:87:e1:6c:
b6:97:d4:61:bb:92:fe:07:54:e9:b1:b0:7a:28:26:74:7c:89:
7f:7b:ee:22:6a:b1:9b:fd:64:6a:fe:aa:12:05:21:39:0e:59:
57:75:4e:76:05:92:f8:f1:56:59:5a:c5:33:4d:46:8b:63:33:
3a:9d:3a:3c:3b:c0:e0:97:c1:27:de:69:ab:99:60:89:dd:d6:
1c:38:88:ec:3c:08:ac:7f:46:29:a2:25:87:d8:74:15:e7:98:
28:9d:7d:38:10:2d:26:e8:2a:fd:60:a2:e6:5f:35:a2:44:28:
e0:f5:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:34 2025 by rpki-client