Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: yeJZpzL1pfsJekaFFEjM9upbbcUuDvXs1/Qkk+1XnyQ=
Subject key identifier: 31:54:22:8F:91:40:EE:00:CD:3C:05:F8:7D:E8:1F:C9:F7:D5:3D:30
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 01969A4F99F017FDBA5813CDA9410864F600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 1232
Signing time: Sun 04 May 2025 08:00:30 +0000
Manifest this update: Sun 04 May 2025 08:00:30 +0000
Manifest next update: Mon 05 May 2025 08:00:30 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: uoU0Ag8DByEBQ4BDvQIDuopGWHga8Tk1ktN3TZGcBck=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:4f:99:f0:17:fd:ba:58:13:cd:a9:41:08:64:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: May 4 08:00:30 2025 GMT
Not After : May 5 08:00:30 2025 GMT
Subject: CN=3154228f9140ee00cd3c05f87de81fc9f7d53d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:35:01:7b:18:88:42:aa:8d:3c:e1:98:d5:e0:
d3:07:5c:10:59:1c:67:6f:2b:ca:18:a3:0f:0c:07:
b6:27:ad:5f:5d:0d:8b:23:89:27:6c:44:5d:9f:5a:
b6:78:95:85:23:59:e5:e2:59:37:a4:63:75:24:73:
80:33:d5:16:83:48:2d:5c:81:9c:76:a3:0d:73:69:
43:6b:27:07:44:fb:43:f6:5a:a8:3f:5b:77:86:34:
40:eb:49:12:47:9b:15:f0:7c:c9:16:ef:e6:fb:12:
51:95:04:d1:d0:e7:83:46:36:51:a9:bd:0d:90:be:
2e:51:79:6a:ae:0b:c7:a7:00:61:87:4b:ed:62:b5:
eb:1a:a4:2f:06:9e:17:6a:63:f2:b8:67:af:da:e9:
48:f6:41:0a:fb:5d:2b:df:3f:97:c3:4f:42:8a:fb:
dc:56:66:64:f1:5f:35:fd:24:72:cf:98:11:9f:5d:
c1:7f:a9:38:26:6b:06:ea:9d:e6:de:7e:a9:68:10:
0f:e2:ff:6e:15:48:e1:04:93:28:b4:15:06:07:a5:
5e:c8:2d:7c:4c:46:7e:2b:49:42:1f:de:b4:10:0d:
5d:dc:49:0f:fc:1d:19:1b:8b:79:cb:0b:97:f7:78:
80:6f:29:ed:8b:ab:63:44:65:99:ee:f6:2e:7e:10:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:54:22:8F:91:40:EE:00:CD:3C:05:F8:7D:E8:1F:C9:F7:D5:3D:30
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:91:9b:cc:4e:cd:c7:4b:56:be:3e:38:65:c6:69:e5:5e:a1:
4a:ea:41:29:d5:1b:c6:c7:97:d5:0b:2e:68:ee:d2:0a:3d:2a:
94:1c:12:3d:23:5c:70:fa:9e:58:e9:2d:7f:3c:fb:d1:86:aa:
91:94:fb:ce:d1:27:74:20:71:50:4d:14:ce:7f:76:88:f5:b8:
ed:f6:c1:ca:e3:e9:56:75:4f:68:d9:d5:5b:47:66:68:cb:ae:
12:62:ad:12:46:4d:3a:cb:2d:98:6b:1d:c5:9a:88:ad:6a:21:
7a:d6:75:e7:7c:98:ed:70:1d:b1:a5:ef:f4:f3:92:4e:25:8e:
2e:71:07:3d:73:09:f0:69:99:54:e9:3e:bd:eb:f7:7a:6b:01:
fa:0f:8e:42:07:db:64:99:f9:9e:73:f3:70:48:b3:63:e6:5e:
8d:38:4c:05:a3:0e:be:88:d8:0f:c3:a4:66:74:e6:32:a7:a7:
cd:55:ba:29:ff:97:17:6a:99:e0:d0:51:81:fe:fd:ca:54:26:
db:47:91:05:a2:65:76:e3:87:36:a6:ba:11:60:5d:a1:43:8b:
61:34:5c:45:1e:b8:20:f0:32:9b:32:22:f2:a2:40:a5:fc:17:
2f:91:26:aa:cc:e1:80:53:da:c1:8d:e5:c5:60:3c:53:6f:4e:
e3:cf:b7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:06:40 2025 by rpki-client