Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: 99NDgy5eBYBs8U+j80066cU7ifoBwp0gKisUzo7UwbQ=
Subject key identifier: 0B:50:B8:D4:14:9F:6A:B8:23:F1:DD:55:37:EE:DD:40:B3:C4:4C:23
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 0196759E41492D9F228A7142FB85D2804AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0B02
Signing time: Sun 27 Apr 2025 05:00:27 +0000
Manifest this update: Sun 27 Apr 2025 05:00:27 +0000
Manifest next update: Mon 28 Apr 2025 05:00:27 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: 1o388M/px5H/4e26czU6sy0dWU+FkKJ7W0dZs5p2qq0=)
2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:41:49:2d:9f:22:8a:71:42:fb:85:d2:80:4a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Apr 27 05:00:27 2025 GMT
Not After : Apr 28 05:00:27 2025 GMT
Subject: CN=0b50b8d4149f6ab823f1dd5537eedd40b3c44c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:c0:c9:39:f5:5a:89:ec:b7:19:0e:5b:a5:
24:c8:bd:80:8c:d7:44:69:a9:0a:75:ba:9c:6c:6e:
5f:b4:dc:67:b1:ad:c5:88:5f:b3:28:b1:9a:37:4f:
cd:4f:eb:a4:47:d3:03:4a:00:6d:3b:5c:94:f7:a9:
68:ff:a2:ca:fa:26:0e:44:c2:2b:99:3d:35:08:9a:
ab:78:24:e3:bb:44:f4:c6:b7:5d:39:2e:8a:ee:08:
55:98:78:b2:97:f7:23:96:6d:0c:b6:08:57:b8:11:
41:67:62:bf:a6:9f:ea:ea:d3:f1:7b:35:f6:47:04:
1b:1f:13:8d:a5:e4:30:0e:a4:7e:9c:1f:24:d3:49:
4e:d5:69:05:74:a5:45:f5:f4:65:e8:65:3f:63:37:
db:dd:ce:05:16:3d:d5:ba:36:ee:54:ce:1d:6e:8d:
83:ac:d7:67:50:76:d7:9e:a6:18:62:7d:d8:09:14:
5d:93:e3:d5:18:0f:b4:93:3d:83:92:b8:b4:30:de:
59:a4:4e:75:3d:be:6e:d7:2b:a7:34:94:31:fa:65:
89:bb:c1:92:a3:b6:5d:f0:4b:c2:3a:47:b0:66:dc:
04:f6:2e:8a:68:f7:fa:b2:27:bb:70:5c:26:a8:1c:
ba:cb:18:3e:b4:85:18:ba:e3:1f:54:f9:46:a0:ac:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:B8:D4:14:9F:6A:B8:23:F1:DD:55:37:EE:DD:40:B3:C4:4C:23
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2f:d5:06:05:94:34:29:28:b4:e1:bd:f6:ca:1e:06:aa:9f:
f0:45:cc:e2:0d:7d:11:45:47:d7:98:5f:bd:d1:db:8b:bd:17:
a5:c0:5c:8d:63:80:7e:fa:fb:93:ad:98:d9:23:d8:1a:33:42:
1c:6d:66:38:7c:48:31:e9:61:e4:2c:f8:4a:32:72:45:85:5c:
08:7a:9e:2e:d6:da:92:a1:51:f1:49:a7:17:73:25:7d:a5:0b:
b6:f1:e5:b1:fd:e0:a5:fb:de:ac:72:b2:53:56:8d:ea:1e:c0:
4b:ee:fe:ba:b3:ea:65:92:11:fb:c1:6b:48:3d:d0:74:3c:d6:
cb:46:ba:e6:a8:29:5a:34:fd:81:16:a8:1f:fb:41:77:b7:b4:
f2:75:a4:2f:f1:07:0b:d4:1c:22:69:03:b9:22:e4:05:db:05:
40:bb:09:a5:41:5a:d7:c4:97:10:a8:10:76:16:b7:55:f8:49:
fe:b3:3a:b2:69:0f:e0:ce:87:fc:d8:5f:c9:e7:4f:72:6a:82:
54:b8:01:6a:63:00:ba:99:f3:d3:61:0d:e7:80:f3:5c:6a:cd:
a8:d7:3b:c7:ce:1a:db:da:a9:df:7d:f2:71:b9:1a:4b:ce:8a:
12:40:17:a7:6f:47:41:70:df:55:64:54:89:61:bd:d1:f0:49:
16:c2:87:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:24 2025 by rpki-client