Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: ZRZodFsNSU3MnTBdKwg4/aTDaquUweAJSjKXB84/w6A=
Subject key identifier: 50:6B:4A:CD:3A:FC:5E:4B:0D:6F:1E:07:E3:1E:4D:1F:54:9B:1A:29
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019676E7D105C724459826034901CDB6B2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 131F
Signing time: Sun 27 Apr 2025 11:00:25 +0000
Manifest this update: Sun 27 Apr 2025 11:00:25 +0000
Manifest next update: Mon 28 Apr 2025 11:00:25 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: kdMHqTXaJQoviH3utP8563rYuqp79BudlE62+5r4qx8=)
2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=)
3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:d1:05:c7:24:45:98:26:03:49:01:cd:b6:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Apr 27 11:00:25 2025 GMT
Not After : Apr 28 11:00:25 2025 GMT
Subject: CN=506b4acd3afc5e4b0d6f1e07e31e4d1f549b1a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:cc:d3:87:78:ab:12:e1:f5:5c:db:c1:aa:
7b:55:8b:cf:16:12:c4:6c:34:4e:86:73:ca:57:64:
5f:02:f0:27:76:8d:a5:d9:f2:35:24:00:26:73:f3:
33:4b:97:b4:70:66:13:2c:89:67:51:77:e1:6c:57:
cf:ea:ec:ee:4c:17:a2:d1:64:ba:96:06:84:4f:e1:
5f:5b:e2:c7:66:02:fa:a1:f5:77:6d:4e:ef:27:37:
80:84:04:de:eb:28:b1:18:0a:ce:06:40:62:b5:cb:
2a:33:4a:c1:41:bd:a9:72:c5:6d:e2:6e:9b:9a:1b:
b9:b3:ec:44:4e:ed:08:41:21:ae:b9:5e:fb:39:7a:
48:5e:db:6f:f5:b8:2f:c7:f4:b5:94:9a:e6:c6:63:
03:70:07:d4:3c:fc:7c:52:d9:fb:ea:34:cd:7f:7f:
7c:ac:ff:8b:e6:56:2a:5e:f8:c2:36:04:df:5c:79:
f8:5f:46:bb:05:84:d6:f8:57:30:48:05:1f:97:15:
3e:e0:4d:2a:9c:90:a2:80:a5:81:d6:e4:d6:0c:83:
69:20:04:2e:0b:4d:04:02:55:52:69:04:eb:f9:4b:
fd:4f:2f:d6:96:e5:57:87:59:18:5b:39:fa:70:8c:
56:55:a3:86:09:23:1a:9a:30:c5:af:1e:fb:0c:94:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:4A:CD:3A:FC:5E:4B:0D:6F:1E:07:E3:1E:4D:1F:54:9B:1A:29
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1a:f5:7c:f3:f0:ff:d3:09:78:41:fb:4d:f1:b2:c4:3d:99:
a7:d6:99:59:a6:c6:0f:37:91:5a:ea:e4:91:ee:34:e2:ac:80:
8e:dd:ae:ab:dd:43:8e:db:f1:60:fc:ec:2b:32:5f:c5:6b:39:
79:fe:21:e2:53:c7:5e:96:c9:aa:d0:36:6d:1f:43:b1:16:9b:
65:4f:6f:95:13:e4:38:5a:59:dc:f0:55:50:51:ef:ee:77:1a:
07:62:9d:f8:72:25:df:8a:4a:ee:6b:ab:46:fd:c9:be:91:b2:
53:09:5f:60:ab:63:2c:b0:01:98:82:74:e4:97:9c:00:d7:3b:
40:d3:ab:24:8e:3a:96:30:b6:61:71:76:46:15:a6:a4:b7:37:
8b:c1:9b:7b:2f:6e:00:e4:01:78:b7:6d:8d:79:66:d4:1a:4d:
37:67:17:b9:ad:85:d0:9a:1f:3e:06:e5:8f:0a:1d:84:82:50:
58:5b:8f:08:75:a9:34:be:39:d0:5b:f1:20:0b:db:80:57:7b:
0e:6d:ec:90:31:b0:5e:29:f2:06:90:67:cf:04:d4:3c:16:d2:
27:0b:40:ef:22:99:4d:aa:ae:0b:05:e1:0c:80:71:24:f7:f3:
5b:66:b2:11:65:08:3c:ca:c0:38:dd:b7:38:01:6b:50:2d:dc:
88:5a:6e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:25 2025 by rpki-client