Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: GLUQDBxwZDvmd5boQlAtj2FCjyO5xZG2ae1OwhNrtz0=
Subject key identifier: 30:FF:67:D6:94:8B:47:32:27:DC:59:EA:17:F1:E8:B2:F9:0E:F5:8A
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 01969295DAA5C6301E5AE8518324A9FB6E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 0877
Signing time: Fri 02 May 2025 20:00:16 +0000
Manifest this update: Fri 02 May 2025 20:00:16 +0000
Manifest next update: Sat 03 May 2025 20:00:16 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: Rwa15REcoRcyBU2xpk5LDTZ0jKJU7/daoZohpQ0NCd8=)
2: N3RhFZbfRfFlakkE1oKkv4idahs.roa (hash: S19WQvJ0cwuBe3l5agvGw5hBi9jlwv6QitA6NIAiWl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:95:da:a5:c6:30:1e:5a:e8:51:83:24:a9:fb:6e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: May 2 20:00:16 2025 GMT
Not After : May 3 20:00:16 2025 GMT
Subject: CN=30ff67d6948b473227dc59ea17f1e8b2f90ef58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:e0:10:09:82:b2:1e:d2:1d:0b:53:d1:de:
83:7f:db:51:75:09:65:fa:ac:5a:a8:2d:ab:b9:71:
51:fd:82:12:d0:2b:83:d7:ad:3f:4f:28:da:19:30:
8e:ac:45:e6:d3:ba:e2:66:6d:e8:d7:3c:b5:0e:df:
8a:0d:cc:2b:8d:ab:75:e8:9d:64:55:a3:84:74:fc:
eb:54:0a:ba:5e:10:f9:e8:13:69:1c:e7:2c:28:24:
44:b5:8f:89:b1:77:ec:c1:d5:34:27:b2:96:8a:ea:
df:f7:db:d7:ef:10:c8:5e:cc:5f:f2:74:82:6d:cc:
ac:58:61:3a:06:c3:8d:f7:93:c3:1b:44:c8:78:fe:
9c:52:c1:fe:8b:56:b1:5d:ca:dc:65:69:1e:59:ef:
5b:69:0e:c0:3a:e1:0c:f0:20:22:30:52:8f:40:9b:
4b:5a:bc:e2:83:b3:36:fa:2d:30:0d:b6:8c:89:fe:
f7:8f:c9:4a:2d:26:d6:05:67:0b:2f:88:c0:4f:e6:
5d:79:ba:b8:ba:58:9a:d0:96:90:85:77:a0:1e:6b:
7c:c6:e8:7c:78:ef:60:ca:24:09:9e:2c:06:67:35:
6d:44:df:ab:67:82:ce:5e:ce:1e:9f:2d:59:be:ca:
0d:21:dd:c4:6a:94:ef:f9:9d:57:54:00:2c:cc:67:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FF:67:D6:94:8B:47:32:27:DC:59:EA:17:F1:E8:B2:F9:0E:F5:8A
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:80:0e:27:28:9a:2a:69:d5:4b:13:f5:f1:7c:1d:c8:10:d5:
d4:e5:de:57:c0:5d:b6:1b:e8:ec:3b:dd:39:71:d0:a1:16:d9:
e0:9a:fd:a5:d9:07:d0:1d:b5:d0:6d:44:ce:22:bd:eb:a2:86:
79:49:9f:b2:ea:8f:23:c3:99:37:85:2e:46:44:cb:01:0d:7d:
7a:b0:8c:e6:ef:87:6f:47:09:ed:6a:a2:e5:bd:ea:32:44:55:
a8:87:c3:d1:dc:68:b7:bc:57:dd:49:f8:36:4f:5e:e9:2e:9f:
d5:70:51:69:32:d2:25:f9:13:92:a1:2d:c2:10:5c:75:2b:5f:
34:21:d0:ec:6c:83:eb:fd:05:bf:f3:48:9c:d8:97:26:05:a4:
17:31:92:91:ae:c5:32:a8:c6:91:4e:e2:c8:45:34:d4:05:28:
f8:13:f2:1c:a3:f6:02:b8:2c:f8:53:dd:3e:19:be:67:78:0a:
6f:fb:09:b7:dc:d1:47:57:2b:76:01:51:ae:0e:a3:8c:93:3f:
ee:38:03:09:ac:da:a4:fc:9b:13:e2:17:ce:9c:fc:9d:36:de:
8f:cd:1d:2c:8f:b1:20:e5:8a:f3:c3:72:09:de:7a:b0:17:2a:
ad:e6:63:a6:0d:18:be:cb:c2:30:53:63:f7:2c:eb:42:04:b9:
41:08:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:55:38 2025 by rpki-client