Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: s1bzSL3kgYWHfdyvh+nJ9rDRikvae58Tm3IZA4RHoWM=
Subject key identifier: BF:24:2C:A9:F9:C3:BE:58:7D:66:9B:4F:00:32:33:95:83:DB:5E:65
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 01968D021C2A61588842C02C8042D6471BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 0361
Signing time: Thu 01 May 2025 18:00:47 +0000
Manifest this update: Thu 01 May 2025 18:00:47 +0000
Manifest next update: Fri 02 May 2025 18:00:47 +0000
Files and hashes: 1: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: 1lyBKjsb+UthYAM8YxLs3ZBIgtgkA9HjmkyJc7/KnIs=)
2: thETdmyhsrSxA59VxLlSHQ0J73Q.roa (hash: KY6/Rka8NKx7O/9lJJyGOxFVIRAxMy7b72Qvukxyq9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:02:1c:2a:61:58:88:42:c0:2c:80:42:d6:47:1b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: May 1 18:00:47 2025 GMT
Not After : May 2 18:00:47 2025 GMT
Subject: CN=bf242ca9f9c3be587d669b4f0032339583db5e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:9e:99:27:cb:4c:b1:dd:61:92:2b:e9:2c:
47:05:5e:44:bb:e1:9d:89:25:97:6e:7b:19:c8:34:
51:47:8f:34:3f:df:a1:75:c3:d4:cc:57:61:df:d1:
2f:ee:6f:08:9b:d0:69:dd:ee:c0:18:4f:82:85:ac:
53:0f:ca:dc:ee:38:1a:53:f6:d7:ab:b1:7b:88:f4:
63:5e:e3:3b:56:2e:2a:d5:b4:0f:ea:c8:2b:8c:b9:
41:4f:56:3e:ac:88:cd:77:9d:ad:13:b5:a6:92:60:
84:98:2c:f0:36:ed:46:8c:f1:31:ed:e2:ef:c3:41:
fc:6d:b1:a4:f8:38:1a:6e:65:36:b5:cc:a2:4a:23:
33:e1:dd:6c:76:8f:18:48:b1:82:7f:b2:ee:ea:0d:
34:c1:52:77:b2:1b:06:cc:60:a7:60:5f:e9:8c:db:
fd:c7:9d:09:d6:33:e4:73:ac:a1:95:54:6d:9a:97:
8c:8c:73:73:fb:d1:7d:7e:51:1d:fb:50:24:3f:d3:
13:92:7c:fe:19:5a:12:4f:fd:43:21:d3:8c:54:76:
66:26:69:df:74:e7:15:45:22:1b:3a:b4:dd:1a:f8:
a5:53:a6:63:38:62:f3:d1:63:ca:90:0f:f0:fc:a9:
a9:7f:87:26:81:6d:2d:0a:16:4b:cc:e9:f6:ac:1a:
eb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:24:2C:A9:F9:C3:BE:58:7D:66:9B:4F:00:32:33:95:83:DB:5E:65
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b5:0d:bb:65:5e:3e:f8:8c:af:00:bf:ed:f2:35:b4:d4:ef:
ab:86:dc:26:5c:e1:d5:dd:76:61:19:d1:a7:87:bc:05:5e:06:
a4:05:e1:4c:9b:eb:3c:36:eb:66:6c:0b:e0:a7:9c:a0:92:5f:
0e:a0:f7:a9:4a:ed:ea:38:45:a3:cc:81:9d:c7:f4:64:98:f1:
21:bf:d8:a2:f5:b8:a4:bd:d6:44:26:48:91:33:a1:04:5f:85:
67:85:e8:a0:c9:a8:e7:4c:e1:bd:21:22:ee:81:fd:ca:98:27:
bc:85:e6:ec:19:82:d3:6c:20:9b:8d:f6:2d:19:b2:89:41:42:
3a:a3:55:70:47:93:aa:7c:62:4d:21:d5:f6:b0:c1:16:53:33:
8c:59:c6:2b:bf:b8:19:6e:12:d4:3f:dd:df:1e:a0:33:03:95:
20:80:92:bc:46:af:b4:96:cc:46:d7:7b:aa:13:9b:15:2d:11:
01:62:90:5e:38:f7:84:97:04:78:f0:82:0e:f8:ef:6a:06:46:
5a:50:d1:eb:c0:32:e6:4f:5f:a3:40:a4:a6:5e:5f:30:4c:26:
64:4f:ac:06:a1:22:59:6e:66:80:4c:67:c7:84:38:58:89:dc:
62:9c:8d:75:51:71:e8:54:4a:aa:43:e6:7f:9c:91:85:a7:a9:
25:ed:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:52:15 2025 by rpki-client