Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: P/4CnoP9mBmooiXj+HMrYAFLKlqKrd0BFT2KxjWRZU0=
Subject key identifier: 68:B0:3A:F7:92:E6:43:D1:8B:27:37:EE:A5:C7:33:83:61:30:7B:21
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 019677C3D03D6D1BC2C6510C39D3D1154ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 052A
Signing time: Sun 27 Apr 2025 15:00:43 +0000
Manifest this update: Sun 27 Apr 2025 15:00:43 +0000
Manifest next update: Mon 28 Apr 2025 15:00:43 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: kTq349pv0W5R0UVtC39K3KUNLI1AYuTs/D9fx1v3J3M=)
2: 6QTOObZCJD1chm-ODo_uH-86-lI.roa (hash: PPt6OC48BVzBGzWbhNau2lL/cgNIrrJFP+rxLWVwYyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:d0:3d:6d:1b:c2:c6:51:0c:39:d3:d1:15:4a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Apr 27 15:00:43 2025 GMT
Not After : Apr 28 15:00:43 2025 GMT
Subject: CN=68b03af792e643d18b2737eea5c7338361307b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:d9:6a:60:38:fb:c1:f5:2b:49:be:50:73:
88:fa:40:bf:f6:d6:dc:70:f6:6b:4a:ce:aa:0d:e6:
c6:f2:9c:10:3f:6c:d0:f9:38:3e:f8:03:b0:1c:bf:
b6:95:cc:ac:ec:59:fd:4c:b0:a5:c5:ee:62:1d:d6:
7d:08:df:c7:70:65:0e:5e:f4:74:b2:32:e8:f5:ea:
d7:08:c6:f5:54:53:a3:68:a6:82:fb:3f:e1:9a:84:
00:c6:98:f2:04:5a:7c:fc:a2:f8:86:61:cd:e5:dc:
3a:e3:cb:40:56:b9:bb:c7:92:0f:87:8f:df:5e:bd:
0e:ac:60:0e:d4:26:a2:78:c7:85:0a:47:b4:10:e9:
7c:bc:24:c9:53:98:2d:4e:c4:79:ad:ef:6a:c7:20:
a7:f2:36:d8:04:4c:91:12:3a:fe:47:f1:51:5c:03:
7e:b5:d1:cd:77:53:a0:4c:ac:45:e6:bd:f2:5b:27:
02:f6:99:a4:8f:70:d9:fa:5c:2b:f9:7e:69:a5:af:
53:92:17:11:0b:74:e4:07:54:7a:6b:fa:06:2d:08:
6c:6d:97:0a:5e:e0:c6:f0:b3:ea:a1:69:29:4c:5c:
f0:05:04:1b:89:b1:47:25:89:d8:da:5d:90:aa:14:
1d:3a:22:e9:8d:d2:84:3e:cf:9c:4b:30:ac:1e:a5:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:3A:F7:92:E6:43:D1:8B:27:37:EE:A5:C7:33:83:61:30:7B:21
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e1:e4:a3:8b:d2:74:e3:4d:2f:e4:61:49:a8:af:d2:05:ea:
08:79:05:58:7d:44:9f:be:86:d7:ef:04:12:15:55:6a:3f:31:
8a:f2:14:ce:5d:cf:c5:69:0f:ea:a0:2e:c8:6f:5a:9c:3e:a9:
9a:eb:b7:9d:15:4f:5b:8c:b2:1d:e7:de:8b:2a:24:3a:9a:bf:
94:62:99:d3:46:22:85:2c:dd:37:04:46:5d:d7:1d:30:45:ec:
b7:2c:d2:29:99:3f:5c:3a:f7:d4:eb:1c:98:7b:0d:b3:6b:af:
75:df:1f:b2:26:ec:94:72:0f:7d:69:1d:d3:0b:4a:e6:08:c4:
ab:1a:17:08:2c:2b:55:a8:24:63:b3:00:f7:d2:9d:00:4a:08:
79:b0:c3:60:c1:1b:1a:f6:8d:3a:56:e7:c7:0e:eb:c0:d3:4e:
ec:f9:ba:64:81:03:5d:17:44:83:2d:73:3c:10:84:b3:82:9d:
75:9e:6f:c6:18:ae:49:86:fe:93:a4:07:8b:06:ad:99:e4:e6:
57:cd:ea:d4:0c:83:96:78:ec:3b:a9:9b:79:1e:b1:5b:39:08:
a0:fe:07:ad:c0:d5:9d:95:78:b4:1b:6a:50:9f:c2:df:c7:d5:
e9:1b:a0:ce:3a:01:87:a9:73:49:b6:f6:62:d0:e9:01:f3:0e:
a7:53:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:00:55 2025 by rpki-client