Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: fG0igUIW3O8Cj+TG0xLsqJX9ze8nJRt+74ne7ElPoLA=
Subject key identifier: 58:11:AF:26:61:D9:41:90:2D:A0:CB:6A:8A:61:82:00:63:72:B7:63
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 0196759E9800EB71611EBCE1688FB20B5D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: A4
Signing time: Sun 27 Apr 2025 05:00:49 +0000
Manifest this update: Sun 27 Apr 2025 05:00:49 +0000
Manifest next update: Mon 28 Apr 2025 05:00:49 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: cHzdX4+F+C3ypY4QsHJFn4O3cIZWLE/H1hzT7AYyOV8=)
2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:98:00:eb:71:61:1e:bc:e1:68:8f:b2:0b:5d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Apr 27 05:00:49 2025 GMT
Not After : Apr 28 05:00:49 2025 GMT
Subject: CN=5811af2661d941902da0cb6a8a6182006372b763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:83:99:75:65:b0:91:85:2e:ed:03:20:07:
51:f2:74:4d:7a:a6:51:f9:54:d6:9b:9d:2c:63:ad:
2e:a9:9b:4a:e2:f4:4e:24:25:89:1f:9c:a8:5b:1b:
c5:c6:9a:c0:b7:04:35:0c:09:bc:21:3e:f5:f2:f4:
51:f9:6b:c4:62:2b:32:12:eb:e7:f8:a2:d3:0d:07:
79:99:e0:77:f3:11:68:33:db:4f:ee:70:0c:35:7f:
0a:2f:da:44:e9:a5:69:85:32:3a:9b:ad:3e:97:5e:
9a:70:02:d8:1a:c4:9f:37:09:a5:08:e4:5b:64:ab:
7c:4f:79:ac:e6:a4:f6:ed:ca:ee:73:0c:ec:d0:d6:
8f:07:ee:59:aa:cd:ea:74:99:1d:17:d8:84:96:5e:
0f:e9:cd:8c:b8:c6:b6:65:5f:f9:88:98:e0:2f:09:
f2:d5:73:1e:16:5a:ba:d5:87:a5:7c:e4:f1:b8:2c:
ae:f7:ff:8c:22:5c:c5:30:b4:0b:ad:12:eb:94:7e:
5e:db:ce:e2:a1:eb:0f:7a:f9:5f:c3:b8:db:6c:5f:
c6:01:59:4e:98:3e:8c:84:3b:ae:3a:14:1a:5d:58:
3a:73:b9:a9:2d:64:8a:3d:fc:78:6e:2e:5e:03:86:
5f:4a:a0:fc:87:17:45:8e:30:62:0b:8a:67:de:bf:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:AF:26:61:D9:41:90:2D:A0:CB:6A:8A:61:82:00:63:72:B7:63
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7c:20:6f:1a:1c:5c:f9:e3:19:7d:56:17:b2:4f:49:53:9b:
58:52:e8:6a:75:a3:08:1d:bf:67:6c:f7:9d:b8:27:7d:cc:a6:
e8:9d:23:b6:35:34:39:00:83:52:60:05:7a:6a:ef:5d:7e:0a:
5f:54:6e:f2:09:46:9a:a5:c5:0a:50:11:61:1e:a4:38:18:4c:
78:fc:fb:65:0d:6a:6f:0c:a8:98:fb:79:c0:54:aa:f8:7c:f8:
ed:fb:ea:ba:50:ec:b9:ae:2d:df:2d:6a:72:70:8d:49:37:2c:
c0:5c:24:00:c7:af:7c:96:b7:77:1d:fc:0c:4a:9f:b8:ab:48:
80:c4:99:1a:cf:41:2d:f8:18:1f:be:c1:f1:fd:50:bb:8d:78:
96:7e:6b:d3:73:ab:9a:04:f6:02:a6:2a:de:7e:76:73:f2:ab:
a3:98:1c:66:dd:7d:5d:93:9f:7f:9b:6b:c5:02:7d:1c:87:f9:
5f:7e:e5:f9:7e:17:09:ba:b9:3e:1a:97:4a:af:64:62:92:b3:
24:de:74:ea:17:9f:56:ef:7f:de:a5:c1:36:ae:ee:83:1d:21:
3d:4d:c7:63:27:a0:91:34:48:9c:d8:0b:53:13:d8:2e:01:81:
cc:e1:02:28:2b:15:38:ee:9e:e3:30:70:74:bb:ae:63:f9:27:
0f:89:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:02:27 2025 by rpki-client