Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier: MiJeSpSVmGPhEd6Wf9nAWTb5rOiTQcK/oCG6sIsR2To=
Subject key identifier: 0D:52:04:E1:64:C9:85:4F:E1:6E:CA:0B:85:77:44:26:95:AA:71:EA
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 019673790D7CC7D77C94C7B38847C320069C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number: 121B
Signing time: Sat 26 Apr 2025 19:00:35 +0000
Manifest this update: Sat 26 Apr 2025 19:00:35 +0000
Manifest next update: Sun 27 Apr 2025 19:00:35 +0000
Files and hashes: 1: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (hash: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=)
2: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: r+TPdWkPFWwWdLl/lRIT6r6918Pe/kAMeOv/T6gBzHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:0d:7c:c7:d7:7c:94:c7:b3:88:47:c3:20:06:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Apr 26 19:00:35 2025 GMT
Not After : Apr 27 19:00:35 2025 GMT
Subject: CN=0d5204e164c9854fe16eca0b8577442695aa71ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:6c:7c:31:7f:90:db:b5:28:e9:d7:cf:23:
bb:95:95:c9:31:40:cf:57:93:f0:39:48:dd:e8:7d:
3f:41:c1:f0:a6:80:78:44:ca:fa:c0:49:0c:88:45:
de:1f:be:a2:1b:3d:3c:3d:20:ea:f8:90:ed:d2:77:
e4:1e:16:be:34:ef:2a:f8:d9:fd:39:d9:f8:27:35:
05:31:b1:3d:e5:a2:5c:d1:18:ed:d5:f0:0d:6d:26:
5c:83:4b:cd:91:ca:24:f4:5e:33:d9:58:50:d7:9c:
39:c7:b9:ab:f7:0c:b0:a4:c5:0b:90:8b:15:1c:3d:
50:d5:62:b0:ae:ae:2f:0c:31:7f:c5:aa:10:b8:65:
a3:08:66:88:9b:83:03:af:69:4a:f2:75:f0:2c:81:
39:39:9a:8c:80:50:f0:b8:49:94:8f:6a:7b:03:d1:
14:4b:6d:39:a0:5e:68:60:da:da:ce:09:b0:e2:f5:
71:b1:c2:d4:da:21:3b:71:86:cf:89:05:14:39:3d:
d3:57:77:20:fa:89:aa:87:d6:35:ad:69:de:90:75:
e5:ca:45:fc:c3:4f:fd:39:7f:59:b3:6a:7a:5c:6a:
f6:58:d4:ee:b0:db:b2:ae:91:27:21:6e:f8:86:ab:
9d:86:1e:b6:23:67:df:eb:81:e0:77:77:e4:dc:b4:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:52:04:E1:64:C9:85:4F:E1:6E:CA:0B:85:77:44:26:95:AA:71:EA
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:35:dc:5e:62:2d:29:fd:a8:dd:08:8e:65:72:c1:34:67:a2:
22:15:46:1c:08:f1:56:bd:99:52:f6:40:28:e6:8d:d4:a3:50:
66:10:45:bc:1b:38:42:82:c2:18:ee:ba:dd:ae:62:80:70:69:
2c:7c:ea:fe:04:3f:bb:9e:b1:30:9c:d2:0c:5c:3c:c1:e4:e0:
41:9d:97:24:43:2b:33:c5:2e:36:da:59:d5:70:f0:ad:e5:15:
b4:fc:16:3f:c2:4c:d7:6f:89:e8:2c:5d:42:24:4d:f4:a6:96:
2b:78:08:8a:1e:76:26:8d:0b:31:84:c4:a1:ab:3c:f6:9a:5e:
2a:ec:a2:24:64:df:b1:c2:d6:cb:02:cd:df:76:5d:f0:a5:5b:
ed:1c:2e:d1:4c:45:3d:85:99:b5:10:e8:5e:7e:6a:e7:68:c7:
dd:9b:28:bb:50:8f:6e:b6:19:7e:70:ff:c4:73:5b:cf:fc:74:
5d:c3:d7:7a:19:66:f0:02:a9:6d:58:89:0f:00:66:89:d0:82:
87:fd:c8:b3:6d:cf:39:fb:3a:37:3c:70:fa:e2:0f:19:dd:84:
73:ad:7a:49:71:c0:77:34:da:e6:76:37:64:cd:7f:62:a8:52:
46:90:69:85:2d:ae:82:44:77:92:bd:a2:11:26:df:87:b7:04:
46:ab:68:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:57 2025 by rpki-client