Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: 8BXaqEKsSy99iNzqwwTMVaKzkUCOT3pm9Uvc0wya/wQ=
Subject key identifier: 82:1D:99:16:74:AA:07:17:35:50:0B:2B:09:E0:6A:07:2C:24:44:62
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 01968D01FF49931FAAB65E07AFFB0507DE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 14AE
Signing time: Thu 01 May 2025 18:00:40 +0000
Manifest this update: Thu 01 May 2025 18:00:40 +0000
Manifest next update: Fri 02 May 2025 18:00:40 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: Pf5bzmCX55DVzLzvyz/2isBny/1IVAuGDNl4yNEqpDg=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:01:ff:49:93:1f:aa:b6:5e:07:af:fb:05:07:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: May 1 18:00:40 2025 GMT
Not After : May 2 18:00:40 2025 GMT
Subject: CN=821d991674aa071735500b2b09e06a072c244462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:87:24:1f:05:d1:4b:ba:0a:61:68:04:16:
5c:7e:aa:ff:23:48:79:1d:69:2b:9b:e2:ea:7a:c0:
5b:11:ce:98:ff:85:0d:4d:63:8c:28:75:d2:78:6f:
96:2a:80:c2:ba:42:18:ff:9c:c9:f8:75:5d:cc:48:
c4:74:1f:98:6f:55:b9:af:4e:07:19:7c:c2:d8:7f:
e6:e2:b9:fa:65:46:7f:19:f4:dc:e7:40:06:da:84:
41:f1:3e:6d:08:28:ce:a1:b2:69:73:fb:64:3c:69:
4d:ca:a6:a7:9a:46:be:5f:a0:de:0b:51:94:7d:f7:
89:ea:96:11:1d:e0:b0:0a:fa:7a:da:79:f2:9b:fb:
68:bc:75:62:49:12:59:7b:be:dd:7a:b8:7c:fb:5e:
f0:84:c2:77:31:3e:c6:ee:8c:a0:2f:9e:14:3c:7e:
38:7b:aa:42:ce:5b:40:78:24:67:11:02:a2:ff:ed:
62:fd:94:5e:36:cd:13:0f:46:25:1a:c3:09:ed:46:
be:26:8a:32:fe:0b:76:65:e7:c4:da:66:3b:f4:7e:
aa:6a:b4:ad:2b:20:c1:92:ce:d2:5c:fa:5d:b1:81:
50:cd:d3:7d:bb:b3:84:bc:29:7f:4b:d3:17:4c:f8:
f8:8a:51:a3:31:be:87:a3:ab:f9:75:c7:f2:d3:8d:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1D:99:16:74:AA:07:17:35:50:0B:2B:09:E0:6A:07:2C:24:44:62
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a0:b0:1f:fc:9c:76:fc:d2:4b:4e:58:cd:66:6e:dd:0b:87:
38:6e:40:56:ea:ae:08:47:4e:6c:b4:e1:9e:0a:40:9b:f4:47:
5e:a1:6c:b3:b3:3f:9c:09:c6:7a:8b:bf:3e:3e:3a:5d:5f:9f:
81:40:d3:3f:37:0e:62:f8:2f:1a:fb:cc:d9:bd:9b:6d:0c:f3:
82:b5:42:95:d8:59:f5:52:19:4e:ea:fc:f5:89:24:c4:0f:25:
36:88:5c:b8:77:3f:70:c2:e3:31:76:09:cb:b1:22:fc:5d:a6:
44:35:76:ff:46:a2:bb:17:1e:ce:e0:8e:dc:ed:03:75:1c:d1:
4c:c7:96:83:e4:cd:a6:0f:9f:8e:f6:48:a4:49:fd:71:27:3f:
40:d2:52:ef:09:54:37:6d:bd:c8:92:ac:67:1b:fe:ca:cb:a5:
65:01:b3:c5:b0:05:b8:d3:19:85:4d:c7:7b:6f:d2:6a:d8:c1:
88:79:16:57:da:96:98:be:12:89:da:61:6f:8c:a8:34:54:6b:
70:bb:dc:6f:e8:55:c7:5b:99:e6:c3:e7:8f:6a:54:b5:ba:12:
14:f3:74:8b:dd:3d:d3:6b:35:f7:bc:fa:68:6e:f8:e3:f3:52:
1d:9a:22:83:f0:1f:9b:a4:fb:43:37:c0:13:a2:bd:37:6b:54:
3c:47:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:46:13 2025 by rpki-client