Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: TOCMpm9Md6RvDqR9m9C66V+dfV42pvqxmwTw29TTvpk=
Subject key identifier: 3A:CA:62:4F:51:2C:4B:3F:EF:AC:32:25:D9:D0:2A:CB:E5:E7:BC:3B
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019687DC16D9B564134CFF3C067EA377C8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 18:01:09 +0000
Manifest this update: Wed 30 Apr 2025 18:01:09 +0000
Manifest next update: Thu 01 May 2025 18:01:09 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: 1I4cgjVrBvCMBTNqqwxxngH7N4biL+Qp32YNfdlqoQA=)
2: BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa (hash: fBvbXWPI6WfZJHj+SHtFQme53z0G5Q3tNcbJRdIO7rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:dc:16:d9:b5:64:13:4c:ff:3c:06:7e:a3:77:c8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Apr 30 18:01:09 2025 GMT
Not After : May 1 18:01:09 2025 GMT
Subject: CN=3aca624f512c4b3fefac3225d9d02acbe5e7bc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:f7:c2:fd:b6:bd:8d:8c:dc:be:df:2d:68:
c0:b5:1c:16:fd:97:68:11:b6:41:38:92:34:d6:a5:
3b:33:16:2e:55:7d:67:34:f1:4b:c4:eb:25:60:74:
c9:ea:16:2c:65:f0:7f:68:77:0b:a2:2f:33:03:74:
a6:93:67:c7:a0:34:54:c4:0b:7f:7b:78:85:79:aa:
c5:a2:c7:5c:ca:d7:04:3e:ad:d9:80:e0:3c:e1:ce:
65:5c:16:e1:85:b7:b5:6c:32:e1:62:75:4f:7b:f8:
fd:c0:39:74:dd:33:06:9b:73:f0:fa:56:be:26:fe:
16:5e:af:eb:73:54:fa:a4:6c:1c:1b:88:95:44:9f:
60:1f:be:d9:c5:f4:b5:c8:b6:b9:da:f9:52:eb:5d:
9a:bc:62:66:83:c7:55:09:1a:14:b8:10:c0:99:82:
99:28:63:04:53:32:88:a4:b3:b2:d4:59:50:08:e2:
e0:52:39:07:3d:c1:53:5b:85:6a:c2:7f:39:a0:0a:
0e:94:37:ef:6f:dc:da:2d:32:a4:64:e4:22:dc:f5:
6c:05:77:41:42:b7:64:f0:d7:c2:cc:28:dd:53:06:
be:3c:69:71:10:85:1b:2b:98:bd:dc:3c:31:05:5f:
4e:e6:59:6c:7a:5b:03:af:55:4e:38:df:d4:d0:7f:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CA:62:4F:51:2C:4B:3F:EF:AC:32:25:D9:D0:2A:CB:E5:E7:BC:3B
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d6:13:f9:c9:ef:62:f9:f1:ea:64:fa:16:72:0b:76:c1:8e:
61:3f:17:64:e5:b7:83:ab:59:ff:89:72:12:2c:65:d1:d2:ab:
b4:88:7c:55:62:fe:97:4e:dc:30:e7:06:b4:95:02:75:d6:60:
6b:b4:6d:75:65:5d:26:d1:d2:9a:61:01:f5:b6:c9:dc:cd:05:
22:5d:f6:04:8a:65:83:19:78:66:6e:98:c1:f9:e4:68:da:cb:
fc:8e:71:22:ab:12:cb:9d:f5:57:fe:e8:0c:3c:b3:26:5b:09:
e5:6b:86:f3:e7:2f:68:bb:b3:b1:18:b7:c1:8c:a7:a5:59:78:
fb:b6:32:0c:33:8e:99:f7:99:5f:ee:f6:e4:7e:82:4d:65:f0:
b8:74:ba:9f:b2:c6:22:a2:24:3b:3f:d2:84:c5:ab:f6:2b:47:
2a:1d:20:01:61:b1:0f:8a:37:f4:0d:8a:43:21:69:2b:e2:b8:
9a:a7:66:e0:6c:83:2e:0e:41:b2:53:bb:23:d9:9b:8f:db:41:
29:e5:8b:18:87:e7:3e:f8:23:06:7a:73:ba:8c:06:63:db:01:
7f:75:fb:da:c5:f0:ef:b4:5e:39:3b:4c:d4:45:eb:8b:97:6e:
77:a1:14:50:04:87:77:c1:65:9d:89:11:b6:c0:ee:c5:1e:f9:
2c:d4:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:41 2025 by rpki-client