Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: RcickBTKTx20sOQnI96XKqL6q5Coz4HyeD/iWJR3W6U=
Subject key identifier: BE:77:0C:A8:EF:7C:C5:BF:7D:7B:77:C2:77:51:E6:3B:6C:2F:FD:AF
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 01967F0F269AEB00C31C26AD0491E92DF9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 04D7
Signing time: Tue 29 Apr 2025 01:00:21 +0000
Manifest this update: Tue 29 Apr 2025 01:00:21 +0000
Manifest next update: Wed 30 Apr 2025 01:00:21 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: T+7i4Fj/GF2n/SbTAJ7XQiFQ0rM1Kg1qPQG0Ug3cXOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:26:9a:eb:00:c3:1c:26:ad:04:91:e9:2d:f9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: Apr 29 01:00:21 2025 GMT
Not After : Apr 30 01:00:21 2025 GMT
Subject: CN=be770ca8ef7cc5bf7d7b77c27751e63b6c2ffdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1c:ab:28:a8:16:41:e9:05:7f:bf:87:ec:a0:
70:73:04:a7:ba:98:7a:cd:e5:33:e2:6f:8c:4c:77:
d7:f5:e9:b1:d9:c1:bb:67:40:20:61:99:28:ae:d3:
3c:f2:08:d2:9c:e0:19:35:52:3c:8a:ee:7f:cf:95:
11:0d:bc:b6:ec:35:98:6a:26:36:f9:1c:b6:da:02:
ca:2a:4a:ce:55:be:64:b7:c8:13:93:72:54:55:52:
2e:34:5a:36:8f:9b:e7:3d:ff:4e:f8:84:af:db:59:
4c:a2:83:a0:8a:98:a5:48:03:bb:54:e1:fa:80:56:
83:f9:d2:79:ec:b5:c0:ea:b7:fc:48:7f:d5:82:c3:
4e:17:19:1b:a8:a8:a6:c3:ae:21:e2:48:67:d0:58:
dd:70:c3:73:a7:e9:55:8f:64:4e:d8:96:41:80:cc:
37:45:23:16:69:94:18:63:5c:91:55:ba:87:7f:89:
b3:45:e8:b2:fc:b5:45:f4:cb:c0:9b:1f:f3:8f:da:
43:77:10:aa:3a:4c:6c:45:ba:f7:9e:02:fb:70:56:
13:5a:bb:8b:e6:da:84:44:71:6e:ff:8c:e3:40:1f:
9c:6b:44:b5:f9:04:61:09:b7:a8:a3:37:e7:3e:44:
88:c2:43:2c:8a:67:6b:42:dc:01:04:b6:ca:8e:ba:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:0C:A8:EF:7C:C5:BF:7D:7B:77:C2:77:51:E6:3B:6C:2F:FD:AF
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6a:0c:fe:59:e8:be:df:33:a5:4f:68:dc:0b:ce:08:57:00:
d6:43:8e:9b:2f:d3:94:68:de:ef:d8:23:fa:19:76:07:b9:89:
68:88:c9:14:41:97:b7:43:e5:b4:7d:9d:2b:f9:b8:8e:99:e4:
a3:50:7d:29:39:6f:bc:b5:0a:d4:46:af:88:00:7e:9d:02:09:
f1:d8:98:68:09:43:05:f3:ba:e2:c0:30:6f:9b:5c:30:06:9d:
7f:ac:65:37:a0:73:89:8c:a5:4e:da:5f:ad:3b:d8:47:b8:fd:
29:85:88:17:56:45:f3:06:25:72:66:e6:23:a1:f2:f0:ba:70:
99:ad:61:59:47:7f:7f:39:9e:30:ee:89:9c:4a:51:0a:77:57:
07:e8:2a:dc:29:d4:dc:ad:9a:2b:43:e4:7b:e8:a7:47:08:fc:
68:ae:25:e9:94:fd:52:9b:4b:20:71:18:88:d4:18:a4:fa:14:
cb:76:a9:d2:c1:95:ee:02:b2:6e:a5:b2:64:b6:8a:b6:b1:bf:
71:0e:19:55:19:f8:d0:16:3e:e9:46:b6:24:71:cc:32:64:f3:
92:98:13:f7:55:95:3f:c3:a2:1d:8d:a8:b5:8e:38:c1:20:ae:
97:82:28:65:89:f4:14:ed:22:00:af:85:e6:8b:f8:8d:53:4a:
7c:e1:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:29:34 2025 by rpki-client