Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: PyvfxVrecmUhTb9LtcPrJarVo3K6drq4VMoM35/EDWc=
Subject key identifier: 78:66:70:CC:FB:3D:61:C0:F8:63:82:1F:32:BF:B7:A5:2C:7C:0E:72
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 01967CB3359269475B706DB85558448BADB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 13A6
Signing time: Mon 28 Apr 2025 14:00:41 +0000
Manifest this update: Mon 28 Apr 2025 14:00:41 +0000
Manifest next update: Tue 29 Apr 2025 14:00:41 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: XAE60xL5mnsSpHrt4QOWn56AqGKW9NIBCoRAjNR4zJM=)
2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:35:92:69:47:5b:70:6d:b8:55:58:44:8b:ad:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Apr 28 14:00:41 2025 GMT
Not After : Apr 29 14:00:41 2025 GMT
Subject: CN=786670ccfb3d61c0f863821f32bfb7a52c7c0e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:a0:bf:64:65:dd:c9:6a:f2:a7:91:ad:80:
10:03:96:91:11:81:11:a6:83:2e:1b:d7:51:d4:81:
27:7b:bc:dc:1a:03:d0:03:62:e8:7c:4e:5d:9a:eb:
41:49:18:d2:4c:4a:73:1b:ef:5b:50:aa:ca:ca:d2:
9b:d3:c8:a7:5e:6e:f3:dc:a9:c8:db:b7:d5:8c:87:
cf:cd:d0:e5:32:1a:13:98:dd:9b:ab:f0:15:2a:8d:
cf:9f:13:2b:82:c5:59:f9:95:6a:b2:72:f6:90:80:
e1:6b:00:7f:77:3f:e8:4b:6d:e5:56:b3:c5:1a:91:
13:1f:c6:a7:cf:6f:49:1d:a7:99:56:4f:b0:9d:31:
4c:99:ee:cd:11:18:4a:02:b9:59:a6:29:0a:71:f1:
fb:eb:9f:92:db:84:eb:dc:96:a8:b7:51:a9:fd:3c:
cd:4f:62:9c:96:b0:dc:49:7e:b2:ce:ae:fa:a2:c0:
2e:99:57:7b:2c:52:3b:a3:50:02:88:8e:59:68:f7:
6b:07:6d:d1:80:92:23:94:78:fa:c7:6a:90:b9:23:
09:60:29:e7:04:77:1a:7d:78:1a:c0:24:33:eb:da:
34:3d:cb:86:37:0e:bc:a2:ab:4b:00:a6:c9:7d:79:
78:57:34:41:ea:94:2f:60:f6:0d:08:e8:10:cf:0b:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:66:70:CC:FB:3D:61:C0:F8:63:82:1F:32:BF:B7:A5:2C:7C:0E:72
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:11:a8:34:87:7d:51:f0:2d:45:e3:22:80:98:90:2b:a7:43:
e0:ad:36:32:b5:35:63:0e:07:0a:64:ef:f4:88:90:c8:79:55:
a8:b0:df:b5:4b:95:38:f4:19:75:a3:2b:66:f9:92:fd:22:7e:
79:c8:ac:24:ae:6e:49:14:02:fd:be:7e:48:43:0b:86:14:5f:
45:e7:34:dc:0b:44:18:50:77:86:ea:ae:6a:49:13:5a:a9:72:
51:ac:3c:42:36:18:08:7e:85:8a:12:da:35:19:25:46:87:da:
93:b1:7a:6d:05:6a:b1:1a:2c:af:84:68:3f:2f:c9:0d:38:0c:
84:56:fb:b8:5e:ef:55:42:42:c2:3e:3b:0b:2b:e3:c1:78:f7:
2e:a0:64:ad:95:ba:74:39:93:ba:bc:6d:45:ea:3d:3a:63:65:
53:55:be:ce:41:af:2c:c9:78:3d:3f:c4:81:c5:39:31:9e:ff:
a9:b1:ff:6e:f4:5c:66:f8:11:ca:8b:9b:14:ae:42:68:42:82:
c2:41:1f:fc:d7:88:48:4a:3c:6b:c3:c7:bb:11:fb:9c:9c:54:
71:fb:57:60:0f:6d:2f:d1:a1:d3:33:45:06:2b:a5:59:91:9a:
82:4b:41:f2:d8:1e:d8:50:9f:f9:2e:90:29:de:e0:dd:51:dd:
9f:b5:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:17:09 2025 by rpki-client