Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: gNoNFd+xVnF7FsUQ4IyRduMeLf/ig6t1yN7ABo2MdxM=
Subject key identifier: E4:AF:48:68:0D:F5:77:B0:D5:19:55:54:D0:BC:A8:84:10:63:1F:B5
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 01967D57CB9999B3CF30C95A7A4167223F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0C4F
Signing time: Mon 28 Apr 2025 17:00:27 +0000
Manifest this update: Mon 28 Apr 2025 17:00:27 +0000
Manifest next update: Tue 29 Apr 2025 17:00:27 +0000
Files and hashes: 1: CHQq2YDxipt537b311Ui3tG3zOU.roa (hash: Q8vdLMat40/Z7pZgYQmg+RQTQD9awPvQh60JlwKVzLU=)
2: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: ZSG7ihxJsn4nK3X43FEPXXEH4hAG/PGFYnadXMLlhf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:cb:99:99:b3:cf:30:c9:5a:7a:41:67:22:3f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Apr 28 17:00:27 2025 GMT
Not After : Apr 29 17:00:27 2025 GMT
Subject: CN=e4af48680df577b0d5195554d0bca88410631fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:fe:6f:92:8a:00:d3:d3:17:4e:8b:e3:bf:
e4:ff:b4:cb:12:ca:ba:86:aa:7c:50:51:37:28:af:
47:7d:64:95:ee:96:c3:4b:16:9a:87:a6:5f:0b:7d:
80:19:01:08:91:66:82:0f:85:72:ac:fb:6f:a4:ce:
08:85:03:58:cf:e7:ba:ab:d8:7a:db:93:5c:06:0c:
81:bc:97:27:82:b0:c6:f7:03:f9:be:29:1a:00:52:
f8:2e:03:49:82:be:4d:0f:5a:ad:7c:a7:d5:ff:a0:
c0:1e:65:35:e0:16:f5:72:dd:86:a9:3a:0d:33:68:
b3:78:27:93:44:55:d6:f1:34:5b:69:8d:7d:12:db:
a7:c4:9a:69:07:b7:88:11:da:02:52:fe:9b:2b:0c:
f4:59:6d:69:21:c4:e7:35:e9:b8:82:47:00:67:ed:
43:39:7a:9b:4e:70:07:5e:ff:55:46:52:e9:2b:a5:
b3:e9:a2:ca:5e:20:32:c4:e8:5a:85:49:0d:e2:65:
87:2c:46:67:d9:9e:56:29:11:cf:b0:1c:84:cc:9d:
d9:0f:48:83:77:ec:c4:9f:00:ec:a5:3d:5e:f7:61:
4c:0b:3a:be:b7:3e:f6:46:ac:27:5b:c7:14:ec:8a:
80:18:b8:70:96:e1:b3:54:ed:b9:c9:98:53:6d:11:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AF:48:68:0D:F5:77:B0:D5:19:55:54:D0:BC:A8:84:10:63:1F:B5
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:61:d2:69:bf:a1:e9:53:48:1e:36:fb:67:23:8a:a1:4a:1b:
0f:5f:b6:18:c7:9a:96:7e:ae:c1:23:d4:b5:ec:9f:eb:80:7d:
9c:9d:65:4a:0c:3c:d1:e3:d4:25:a8:84:e4:b5:6a:32:4c:f0:
8c:9f:ff:df:39:ae:9c:c4:55:2d:77:e7:55:0e:32:df:1d:e8:
c5:9c:42:4e:5f:da:bc:29:d6:15:56:9d:e1:71:7a:40:80:97:
59:6a:5c:39:37:88:f7:cd:5d:19:da:39:57:a3:de:fc:af:b2:
e7:61:2c:a0:57:35:09:fc:ec:c6:e6:16:b9:5d:b9:cd:4d:bc:
82:9e:fa:f0:4d:1f:90:8b:73:d9:81:3b:8d:8c:ba:df:42:d8:
ee:cf:cb:6f:7b:75:fd:44:60:b7:42:9e:53:32:49:45:a2:e0:
8c:c5:cb:16:7f:2e:2e:e0:77:92:36:c0:14:cd:fa:6c:42:e8:
96:a8:04:34:8d:df:f0:d9:aa:80:8e:a6:9f:03:5c:06:31:8c:
03:ea:f8:b3:99:26:6c:8f:0c:49:41:14:6c:28:a5:0f:5c:e8:
ee:f7:9a:e5:4f:74:f8:89:88:60:bb:8f:ef:7f:88:5c:9c:2d:
bf:7e:a4:9a:32:dc:b8:11:05:7c:03:77:1d:dc:15:4e:53:fd:
91:f2:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:41 2025 by rpki-client