Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: +yMzZiudovmuB6idLRoNcyqKmNHo6mu4ya+htokE488=
Subject key identifier: BC:BD:89:73:BA:E0:5B:0D:67:3B:3F:2D:B3:01:47:26:44:D1:EA:93
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 019681D955DB90389F07FB95806C125914EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 0D82
Signing time: Tue 29 Apr 2025 14:00:26 +0000
Manifest this update: Tue 29 Apr 2025 14:00:26 +0000
Manifest next update: Wed 30 Apr 2025 14:00:26 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: U9h7fDZ6hvJpIFlysvLk7U7xMxqTCB6r4xjm1pz78/g=)
2: nCO98tc8B201HK59o3LGsGaIbRQ.roa (hash: 5XD9s6utrTJgO6HcLNBLSP37yElvartuHWVrwWT7jxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:55:db:90:38:9f:07:fb:95:80:6c:12:59:14:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Apr 29 14:00:26 2025 GMT
Not After : Apr 30 14:00:26 2025 GMT
Subject: CN=bcbd8973bae05b0d673b3f2db301472644d1ea93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:08:be:ed:ca:c8:dc:8f:a8:b9:a1:a1:19:
ca:97:3c:3a:2a:96:80:bd:4f:25:5c:52:60:d2:eb:
ef:f1:81:4b:12:29:3e:42:3c:e2:5b:68:44:93:75:
81:22:fe:95:da:cb:39:26:d4:10:54:1b:bd:f6:fd:
05:e0:b6:46:e2:41:68:66:71:fd:5a:22:b8:e1:8f:
57:17:e5:0d:71:b4:e4:17:34:61:4b:2e:7f:f6:6d:
53:c4:f8:4d:23:fd:45:0f:4c:5b:ee:bc:9d:f0:ad:
f3:b3:42:aa:ce:ea:9b:b8:1b:14:83:ed:67:ba:49:
7f:7e:a3:e6:c8:4c:80:76:4f:99:bf:62:fe:88:16:
a6:4c:f0:a0:fc:49:18:db:6a:4c:70:34:50:de:34:
ed:99:1c:9d:58:32:34:ad:07:dd:ca:4e:6f:35:c7:
59:e8:84:c5:10:d1:c1:f9:3f:af:35:e2:b9:3e:5f:
79:8f:02:05:48:cd:8b:2e:be:f1:70:ad:2a:56:39:
f7:38:7b:70:cd:74:dc:12:39:55:e3:c1:a2:13:75:
c3:bb:e0:d2:9a:65:74:82:b6:74:f0:a9:c3:cb:c1:
3d:4f:a2:62:dc:cb:34:d8:80:7f:26:19:67:15:58:
e7:3b:86:2e:3e:f4:d8:68:70:10:d7:a6:ca:7e:d3:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BD:89:73:BA:E0:5B:0D:67:3B:3F:2D:B3:01:47:26:44:D1:EA:93
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:42:b8:3a:c4:b5:99:28:c8:5f:d5:c0:06:f0:b9:b3:c1:28:
7e:55:51:37:c5:b4:05:5c:a1:5a:00:b8:96:86:c7:88:c6:71:
be:a1:82:31:54:6e:04:02:92:b8:a1:86:04:0b:56:67:bc:c5:
33:44:15:00:10:3c:b8:a1:6b:db:f7:1a:84:6f:13:de:6d:cc:
85:80:07:44:d9:68:86:94:d0:f1:2a:81:82:04:df:70:da:ba:
03:50:74:32:fb:0e:ea:9d:25:b9:e4:65:57:c2:f6:1b:10:50:
70:74:bd:77:ba:c1:be:9e:c9:a1:29:1e:ee:8e:ff:07:53:87:
39:b4:48:dd:e2:7f:d6:fe:37:15:ad:53:31:a6:42:75:37:87:
4d:6e:9e:6c:b2:49:8d:5c:6b:51:ec:fa:fa:33:a3:27:86:1b:
ae:1d:b7:ae:c1:38:b1:27:a5:18:5a:ca:53:09:b6:8a:8e:9c:
fa:05:c1:bc:26:15:49:6e:af:bb:4a:40:ba:75:59:02:5e:58:
cb:ce:05:34:7b:7d:58:96:9d:92:ed:ae:d7:fa:92:97:12:56:
01:af:35:c7:c6:db:60:ee:c3:6f:ca:e2:44:49:0d:50:86:63:
7a:2e:45:85:cc:c3:af:eb:2c:db:2f:5e:f6:74:62:1f:d7:43:
94:bd:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:23:44 2025 by rpki-client