Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier: e7NEyWtUo3CHkvlguKCC+kF66cUOyYKeyLbmVIHRiUY=
Subject key identifier: 9A:E7:E5:24:F5:75:3B:E3:A8:3C:4A:20:E5:26:11:AE:D5:DB:6B:FD
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 01968B4A54721E912239094FF70554351ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number: 1147
Signing time: Thu 01 May 2025 10:00:26 +0000
Manifest this update: Thu 01 May 2025 10:00:26 +0000
Manifest next update: Fri 02 May 2025 10:00:26 +0000
Files and hashes: 1: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: 6VJavGW3S3311OCbs7x9Ob7XxYzCDixx7jnvOfNH7VU=)
2: UELJaiMVSRwrvUCFtrZ9GXV7epU.roa (hash: q9QCYQSQGQmo5qqoOtk1Ibo5KX8kGvjJhcZ2aob3nKM=)
3: v6hueYNyF9uNlLtlUb0AzeNT4cA.roa (hash: 9y1HAaiP+48RFVQa5JDWbbUjnwyoOqmjCXAn55Eo2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:54:72:1e:91:22:39:09:4f:f7:05:54:35:1a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: May 1 10:00:26 2025 GMT
Not After : May 2 10:00:26 2025 GMT
Subject: CN=9ae7e524f5753be3a83c4a20e52611aed5db6bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:81:4e:25:70:ff:b3:2b:ed:ad:e3:26:2c:
6f:f1:0a:c9:4d:a0:f9:b8:b8:9c:04:9e:5d:dd:a1:
76:bd:94:f2:85:fd:4e:cb:6e:71:41:1b:5a:d6:3e:
b2:d1:84:0c:df:fc:d5:11:c1:dc:10:5e:35:9c:ec:
03:cf:44:c2:2d:dd:f6:7a:94:a7:4a:93:be:1d:57:
a1:fe:bd:07:7c:ff:93:50:cb:b8:d5:95:b2:d9:06:
47:bd:1f:4f:35:ea:56:fc:dc:cb:ce:f8:10:55:4a:
d8:2d:27:37:7c:08:78:1e:1a:2c:4b:d1:7f:0f:77:
ab:af:cc:8f:5a:4a:a3:e9:56:3e:c1:8b:72:9a:62:
e7:83:0d:ca:1a:ac:af:2a:71:c9:b5:3c:b0:38:60:
ec:60:b8:e4:0d:ea:aa:79:cf:bb:cc:6d:ec:cd:72:
32:49:a0:53:7c:3b:b5:01:11:a6:48:62:a1:1c:ed:
84:8c:25:8f:72:f6:21:ca:29:52:32:88:56:05:15:
6d:35:ab:62:55:41:2f:76:a1:5a:49:56:9a:fe:57:
e2:51:c9:03:bc:c7:b6:3c:28:94:bd:0d:4d:ec:48:
39:3f:4b:d6:e2:89:f8:57:4e:de:5c:fb:1f:ad:ef:
d2:e0:40:06:e7:25:6b:8f:23:e5:8d:e9:e4:77:bf:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E7:E5:24:F5:75:3B:E3:A8:3C:4A:20:E5:26:11:AE:D5:DB:6B:FD
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:0e:82:cd:7a:ff:d3:cf:90:71:df:7f:00:92:5d:ab:e7:
13:03:07:61:ca:ed:81:36:bb:16:03:24:11:0e:a4:af:e7:3b:
63:3f:3c:eb:9c:04:ff:2b:84:32:07:c4:e6:6e:07:5d:3c:50:
61:23:83:eb:41:a1:8a:a2:99:88:9e:c2:69:4c:c8:33:10:6a:
ee:2d:70:c1:5d:4e:c3:44:46:37:8d:9d:ca:9b:48:35:d3:6e:
ed:6a:fe:0b:37:29:57:75:7c:17:f0:65:c7:21:9f:fb:19:46:
4e:30:4c:9f:b2:98:f3:e7:09:11:39:47:20:30:ad:17:10:07:
81:e3:ce:f3:3a:08:4a:8b:0c:b3:7b:a3:f4:0a:d7:3c:fc:1c:
23:e8:8b:b1:d6:3c:dc:ef:14:91:a2:b5:a1:cd:09:89:ef:66:
62:f6:02:20:84:e9:43:7c:4b:32:04:f6:7a:8b:2e:65:88:69:
4a:8d:3e:07:18:11:11:c8:6d:d7:72:3d:5d:43:ea:a0:b5:4a:
1f:a5:95:73:29:59:26:d6:bd:af:53:43:64:70:00:30:cc:fa:
78:d4:b8:a3:3f:f6:79:a3:eb:88:8a:0e:1d:90:bf:5e:a4:7e:
49:79:ab:a8:16:e4:80:0e:68:41:5d:c1:6d:c8:37:c8:4a:6f:
20:b2:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:32:05 2025 by rpki-client