
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: jVvk4BEqXn17typGbfx9ix6l+nJMIakh+hc4aWgs7WA=
Subject key identifier: 0C:1F:18:0E:9F:C4:86:33:AE:9C:A6:7E:7A:C5:26:39:03:48:17:78
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 0196911635EA3EE9424B11AE24E0F2F7F3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 151A
Signing time: Fri 02 May 2025 13:01:13 +0000
Manifest this update: Fri 02 May 2025 13:01:13 +0000
Manifest next update: Sat 03 May 2025 13:01:13 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: cVDYzoBs6v8sCtuC/yuKdi85xqybbaKJ/BRjTAk7Y8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:35:ea:3e:e9:42:4b:11:ae:24:e0:f2:f7:f3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: May 2 13:01:13 2025 GMT
Not After : May 3 13:01:13 2025 GMT
Subject: CN=0c1f180e9fc48633ae9ca67e7ac5263903481778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b1:44:37:ba:7b:5f:d9:8f:50:25:e3:20:0a:
87:2c:96:12:f4:a3:1d:7f:cc:39:d7:22:4d:a0:e9:
8b:e6:af:78:b1:fc:d0:f4:a7:8a:f8:f0:34:af:81:
d4:57:dd:b5:f6:81:95:ba:f7:29:58:77:f5:15:d7:
18:07:f2:d9:40:2b:96:e9:8a:fb:2a:c9:f8:5c:30:
c9:8f:30:0f:4c:20:23:b9:e1:51:23:14:9c:b2:4d:
ef:65:24:95:46:62:a7:b5:fc:9c:f9:5e:2a:01:3c:
e0:5c:0e:07:a1:d2:db:c9:35:0c:fa:2e:89:ba:f2:
4e:ef:a1:48:a6:5e:c1:79:1d:a1:3a:f0:77:9e:a0:
a0:c7:3a:13:72:a5:d5:3f:30:0a:ab:85:f7:a1:fc:
42:2d:b5:18:d9:27:c1:62:36:12:45:00:5e:f0:d7:
ca:a8:12:c5:f2:6e:b3:d6:42:45:4d:4a:b7:25:3b:
1d:71:66:93:42:c6:34:52:7b:8c:a3:2f:46:cb:71:
40:56:17:bc:b3:ac:16:ff:7e:c0:1d:c8:5e:1a:7b:
01:de:af:eb:7b:69:fb:ad:c3:c6:fa:8b:76:b1:0c:
1d:1b:cf:d2:6b:35:b3:76:60:3d:5c:40:09:80:f8:
0f:48:7f:8b:be:7a:df:d3:23:1e:d2:04:e7:72:86:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1F:18:0E:9F:C4:86:33:AE:9C:A6:7E:7A:C5:26:39:03:48:17:78
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bf:3f:00:6e:1f:08:3a:35:64:2d:39:5e:a5:ae:b7:33:a1:
30:11:d0:17:3d:8e:b5:29:37:76:cd:5f:46:54:3a:ec:07:63:
2c:de:04:ab:c3:40:52:a9:1c:d8:a5:59:81:c3:75:86:15:8b:
2e:a1:24:7c:14:68:bc:5c:4d:d7:6d:3d:25:ab:d5:26:50:32:
c6:6c:43:97:85:76:92:20:b2:5f:e6:fa:59:e8:a4:8d:00:f3:
9c:bf:97:9e:73:62:b1:97:d2:ff:3f:5e:45:31:17:7b:22:75:
d7:0f:30:05:13:7c:65:5e:af:70:8c:6e:99:b0:0d:8f:d2:d4:
9a:0d:45:9b:7d:93:c0:e3:44:95:41:30:ab:67:80:d8:f6:ac:
7b:40:3a:2e:a0:4f:18:63:61:73:82:91:fd:05:53:b7:bc:a1:
66:7c:b6:c5:b7:b5:cd:e4:7f:2d:9b:61:dd:4c:02:3a:3b:25:
1a:4f:16:87:98:16:25:38:54:bc:02:bf:ed:5b:8d:fc:43:2f:
14:52:6e:fe:7e:89:85:46:83:52:7e:a4:e1:9b:58:41:36:f4:
7f:50:e6:1a:85:e0:0a:54:18:2f:be:23:43:45:bc:fa:39:65:
7e:55:fa:97:1d:04:5f:0e:7d:05:cd:a4:96:4b:c3:18:95:4e:
1a:a7:e1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:43:03 2025 by rpki-client