Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: YtSBWCm2eggFNF19720Suzl5ZG0kCfdkphjXBxRWwmA=
Subject key identifier: 27:D5:D6:87:73:77:56:2C:1F:0E:D8:A1:83:B4:A6:C4:7D:2C:1F:0B
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 019680594349ABE468C2E7D91E72BA0BDD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 07:00:55 +0000
Manifest this update: Tue 29 Apr 2025 07:00:55 +0000
Manifest next update: Wed 30 Apr 2025 07:00:55 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: p+UxoAT7b7A2gG9HLIIxZjrWWQzhmUsl2Xc6QLAUZ5Q=)
2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:43:49:ab:e4:68:c2:e7:d9:1e:72:ba:0b:dd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Apr 29 07:00:55 2025 GMT
Not After : Apr 30 07:00:55 2025 GMT
Subject: CN=27d5d6877377562c1f0ed8a183b4a6c47d2c1f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:72:05:b4:69:8c:59:e1:c9:31:e7:1d:88:
eb:fc:4b:11:cd:9f:46:1a:36:98:1b:98:8b:10:61:
93:88:76:6b:c9:28:fc:4d:b4:8d:cf:2a:83:85:20:
13:3a:3a:91:b1:36:cd:31:d3:6f:80:78:c6:5c:4c:
55:7c:ff:b1:47:50:2c:f5:da:d4:e2:dc:77:0f:05:
78:a8:3d:f7:14:67:bf:0e:02:56:bd:e6:12:96:ee:
17:bd:b8:9e:3d:a5:36:7b:ad:db:c8:ef:81:61:58:
5a:24:f2:b5:99:47:0b:fb:55:1b:a3:4a:dd:31:cf:
60:aa:b1:1a:2f:ed:cb:69:74:b8:51:88:38:b9:8c:
d1:69:d8:22:51:50:46:da:3c:18:b7:5c:5b:7b:48:
48:49:6b:19:2b:5c:6e:c8:df:6e:02:35:1d:05:09:
bf:97:49:46:81:48:5e:18:07:7f:80:e6:2a:07:b0:
87:d8:95:1f:9c:e6:7e:7d:b4:ad:fc:e2:2b:60:c7:
0a:96:c0:e7:3a:28:e8:b5:16:33:8f:53:b0:40:69:
93:da:67:4f:72:8d:67:98:d1:d7:e7:e8:bd:e9:73:
bc:be:58:a6:44:e4:af:46:57:c7:3b:db:2a:9a:d7:
9c:5a:d4:44:c2:dd:6e:cc:0a:a6:ca:5e:9a:87:26:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D5:D6:87:73:77:56:2C:1F:0E:D8:A1:83:B4:A6:C4:7D:2C:1F:0B
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0e:3c:93:23:15:07:3e:9b:bd:f9:41:fd:be:69:85:06:c2:
55:a4:0d:c9:44:ff:ca:06:cd:2d:e6:45:b5:4b:78:20:ae:3e:
fa:36:2b:55:b1:2c:51:ba:3a:db:a5:af:70:14:74:a2:c0:a6:
91:95:e6:20:1c:ed:39:ce:5d:b7:2c:33:be:5d:ca:db:df:91:
d2:b5:93:a8:1a:7e:78:8f:86:46:c2:90:a3:6d:41:48:53:a1:
6f:ff:4f:86:58:19:66:4b:aa:ed:3e:f9:82:be:3d:88:86:49:
34:c7:a7:77:02:dd:19:69:4f:cc:a1:f1:34:ca:6e:b3:68:73:
6a:d1:0f:4b:60:a4:e0:85:42:7e:7a:f7:78:51:78:78:ee:4e:
f8:23:a4:86:66:94:57:b5:01:38:52:d3:93:e0:9b:94:98:f4:
ed:33:ca:4d:b4:dc:a0:e5:43:60:e0:37:92:3a:74:28:13:d7:
dc:84:8c:70:8d:39:07:09:10:30:44:ec:7b:a8:37:54:fc:8f:
2e:7c:da:64:fd:1b:5c:91:07:27:fa:8e:97:5b:33:1c:9a:c4:
7b:88:b4:cc:f5:e1:7e:2f:87:67:c1:3a:ce:a8:be:1a:0c:50:
bb:52:c8:6e:81:c7:64:87:46:33:4d:4a:f2:c2:a2:ef:c4:93:
55:7b:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:50:04 2025 by rpki-client