Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: dUbGi5m5Y+VxKgiDEo1AluDid3SITI9TIEAroQZI6F0=
Subject key identifier: AD:D2:41:F1:AF:D5:17:9F:E3:D7:40:B0:72:D5:09:2C:23:72:B9:10
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 0196835A3605403846621EF8B810DB2AA2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 057C
Signing time: Tue 29 Apr 2025 21:00:49 +0000
Manifest this update: Tue 29 Apr 2025 21:00:49 +0000
Manifest next update: Wed 30 Apr 2025 21:00:49 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: 5/k+1PrLCDluVU53/fahDVzZhlz7HTkSKEJUHQ7obtI=)
2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:36:05:40:38:46:62:1e:f8:b8:10:db:2a:a2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Apr 29 21:00:49 2025 GMT
Not After : Apr 30 21:00:49 2025 GMT
Subject: CN=add241f1afd5179fe3d740b072d5092c2372b910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:39:33:39:c1:22:68:2c:d3:9c:c1:08:1a:
e2:04:36:18:a7:07:d9:3e:ed:00:c9:60:0f:d4:8e:
2d:ca:3c:35:41:cc:84:cc:31:46:15:0b:ea:06:19:
7e:08:f6:fd:5f:3c:93:92:35:1a:9e:c4:f9:c5:a3:
67:b5:79:82:dc:ec:07:a4:15:34:a1:2e:33:3d:de:
ca:ad:a8:0d:38:ed:bc:93:48:0f:fc:f8:1f:c8:a0:
1d:f0:9b:a8:b5:2e:b5:c7:50:4b:db:91:61:e0:22:
0b:b1:e9:97:26:4d:3a:61:90:7c:ff:cc:b8:90:66:
f5:e1:0a:c0:dc:88:42:b5:bf:cc:2b:f7:c3:49:e7:
68:89:55:26:7d:ad:c3:a9:cc:62:c6:3a:ac:1e:0f:
66:ce:f0:f9:ce:0d:a1:f1:28:ae:c7:c4:50:d3:24:
e1:32:40:8d:be:6c:02:31:96:c6:ef:12:97:1c:57:
60:71:62:40:c1:ec:1f:f9:84:2d:ae:e0:5f:63:30:
b1:9c:db:07:18:2f:d1:47:d3:45:be:b1:41:b3:3c:
8a:dd:a3:ec:49:5d:0a:10:4e:ef:57:b5:e0:a3:d7:
eb:66:51:6b:07:3c:71:9f:7d:0f:58:a5:d4:f5:bd:
db:f3:5a:77:b5:d6:fd:d1:c6:33:15:b4:b2:4a:d8:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:41:F1:AF:D5:17:9F:E3:D7:40:B0:72:D5:09:2C:23:72:B9:10
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:77:6b:3e:17:e0:f2:2e:dd:47:c9:e8:d6:8f:f0:78:af:dd:
29:d0:06:c7:da:46:77:04:7f:00:91:1d:4c:94:54:e0:85:fa:
ea:b8:80:4c:44:c1:89:a6:78:f0:2a:88:26:a8:28:01:f8:60:
d9:cd:e8:35:2c:3d:37:49:6e:44:22:0c:07:af:57:33:62:bb:
0d:78:00:38:fa:b0:4e:14:cf:c2:ac:27:b8:b6:dc:fb:43:88:
ef:0f:c5:f2:7e:9b:c4:db:68:85:8f:42:3f:1e:aa:a3:bc:be:
ce:e6:87:b6:fc:1a:78:dc:d3:c3:86:7f:8e:69:b5:38:c8:89:
bf:44:a7:06:95:91:fb:6e:aa:3b:a7:98:20:18:59:da:a7:57:
28:11:c9:b9:a4:32:5a:b5:8e:fb:d3:ca:8e:19:29:c6:9a:cd:
a3:bb:92:1a:04:33:c4:87:54:26:25:e9:33:85:ec:74:80:a9:
ef:2e:6c:de:8c:9b:9f:49:43:8e:ae:ed:a9:1c:ee:5c:0c:3b:
45:b3:3b:a9:5c:de:13:58:01:74:6b:0d:12:27:a6:a4:9c:69:
9f:f8:14:b4:b4:d9:71:8a:d7:22:5b:e5:05:6a:bd:8b:0d:72:
58:b7:ed:24:a8:4c:64:53:db:f5:03:f1:eb:6b:1b:70:d3:9a:
8e:74:da:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:26:04 2025 by rpki-client