Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: I0gqASKfYwANFhzDK3bgvU7u8szwEi+X/QgmUlGwbsk=
Subject key identifier: 4B:41:9B:35:97:1B:DD:C9:1D:E1:B1:A7:07:4D:05:8F:26:5D:5C:CC
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 019676B14466F6CE067078BA83E8DB313462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 03DB
Signing time: Sun 27 Apr 2025 10:00:50 +0000
Manifest this update: Sun 27 Apr 2025 10:00:50 +0000
Manifest next update: Mon 28 Apr 2025 10:00:50 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: zInADlHjsufvDfjhek5VUuShrd6XDg/b86Wq7b9sHmY=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:44:66:f6:ce:06:70:78:ba:83:e8:db:31:34:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Apr 27 10:00:50 2025 GMT
Not After : Apr 28 10:00:50 2025 GMT
Subject: CN=4b419b35971bddc91de1b1a7074d058f265d5ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:35:35:65:30:49:16:0d:f1:76:0f:11:09:
11:3f:91:69:d6:f2:62:c1:2d:bb:53:26:99:4b:4a:
4a:88:4b:e2:d1:aa:f6:23:e7:d0:7e:ab:08:00:1d:
db:91:ea:75:15:5c:89:ec:cd:71:d8:64:c3:0d:d0:
9d:73:7c:c5:f8:4d:ca:68:c5:cf:1f:fa:92:be:b1:
8e:fa:74:c7:17:53:18:2b:f7:8e:21:25:62:e6:d3:
d3:b9:2e:a0:05:1e:97:2c:13:b7:ba:e7:14:28:aa:
f4:31:b9:e1:c0:8a:7c:46:32:5a:90:86:15:f2:02:
56:02:67:9d:c5:f6:fc:14:64:e7:2c:3b:d7:bf:86:
a4:0d:3e:b5:53:82:ed:c6:e5:2d:5b:61:d4:b8:f4:
ff:e5:b3:1f:aa:d9:06:65:81:f0:3f:26:66:ae:28:
41:7a:88:c0:61:66:b5:c2:7b:d5:ba:d9:22:de:be:
ac:e1:ce:a2:f1:39:e3:94:cb:75:e2:db:a0:e8:0e:
55:75:87:8e:fc:a6:60:ca:e6:24:49:44:a9:6b:31:
10:46:bc:fe:29:44:b2:9a:ad:de:d4:f2:f6:df:a4:
91:31:5c:6b:79:71:af:ad:0a:70:cf:4b:08:f2:37:
db:c5:97:6a:57:fe:0b:46:58:ad:7b:72:56:1a:4f:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:9B:35:97:1B:DD:C9:1D:E1:B1:A7:07:4D:05:8F:26:5D:5C:CC
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:11:1a:1c:96:9d:bf:b4:a1:95:c9:dc:b1:b6:da:b2:5e:7d:
29:38:8e:99:4a:4c:b9:82:eb:a6:cb:34:6d:86:5d:5a:8c:fc:
17:44:bb:53:05:69:47:ba:f3:f6:2b:dc:76:23:e4:3d:6c:41:
3d:81:3f:cc:71:6d:62:1f:ec:b6:17:69:76:84:91:d1:8f:0c:
43:b9:85:f6:25:ff:ec:33:19:4b:10:96:2d:d5:d4:22:af:5d:
a1:e4:90:99:cc:0b:b8:b5:6f:4c:a0:20:dd:ff:e0:c8:b4:d5:
f1:75:f4:6e:76:11:fe:f5:32:6e:c0:5e:de:6a:b6:25:33:32:
e5:9a:7f:00:5e:61:35:b6:ef:33:34:45:a6:ec:74:99:d9:02:
22:ca:6e:ac:4b:90:65:9c:a8:a6:36:9e:49:7f:1c:f3:f3:17:
6e:f4:b7:8a:42:4c:7f:b1:47:4c:22:5f:0c:0c:5e:fe:5f:d7:
85:93:dc:b4:e4:e5:a1:5d:a1:4c:24:c2:64:da:22:6e:b5:28:
cf:3c:7d:73:25:e6:b5:11:1c:0a:90:be:57:15:22:5c:56:d3:
9c:68:c1:9e:c7:dc:ee:30:6a:8a:e6:07:5a:31:e9:af:2a:42:
e9:d9:db:7b:42:a1:9f:5b:01:4d:b5:c9:53:86:91:01:9f:cd:
6c:bd:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:10 2025 by rpki-client