Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: SQga8mr90gA/E5wwcGB569o7lti9U6Wgsvazp+pdVFo=
Subject key identifier: 5A:38:23:0D:0E:7D:34:F9:E0:BD:27:58:65:05:9F:60:7D:DA:93:E8
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019672663186EACC15B075DA7813374119EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 1548
Signing time: Sat 26 Apr 2025 14:00:22 +0000
Manifest this update: Sat 26 Apr 2025 14:00:22 +0000
Manifest next update: Sun 27 Apr 2025 14:00:22 +0000
Files and hashes: 1: 00VNIWPkHk-eYeOCQl7mONDXy6M.roa (hash: pDq1pZp3C4Sqn1X3rX/G/la9ae1lH4HMURDoELo17/o=)
2: 1BHVcdS3kmkGH_bI9qfHON5UHfk.roa (hash: AuazvzToypQPnv8ss86Zt+CVshNBwKgwrntRNHToSZU=)
3: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: F6GEkOnYIEOZW6cymry0FjPIm7uMcr7Uup6V+Y8bZ2w=)
4: 8BE87qjZ_YzeOfLNdwdedbKrhNM.roa (hash: y4H1lZp3OfxaXMKEpq+PSjjHa3Z9ishqljKxtowY4Rw=)
5: DWKyWEO0EVyOMnjJFjMEItVfMZ4.roa (hash: pSZJrBmFotzFkW0MK9vnBFd5k9hTuU5zGox8lQ17bak=)
6: Gq5LjD46Wfjhio7d9iqIJDoHctI.roa (hash: hNIDxt9EAkLYgEqpa1TAGbSGsQ4erxVNMwWk5NfcogI=)
7: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=)
8: aoJwj7Qz2gzRB_XDuBO6wX0Pq-o.roa (hash: 5jUoTXpmo/yD1o3tfuN3Rs2LCM2hxJVWRtEkS9CuJHM=)
9: rmZqjN8Le7Lhxr8nmiAOtv3GMP8.roa (hash: fLQapcdkz83ll1G3Z6c9GnseLufz0CzHLdVlExrzp/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:31:86:ea:cc:15:b0:75:da:78:13:37:41:19:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Apr 26 14:00:22 2025 GMT
Not After : Apr 27 14:00:22 2025 GMT
Subject: CN=5a38230d0e7d34f9e0bd275865059f607dda93e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:9f:03:8e:0b:00:0d:b3:02:2c:df:b8:db:
b6:94:59:7e:06:58:72:fa:cc:fc:90:c2:51:39:e9:
9e:88:53:1e:15:5f:f5:68:1b:5e:4c:e8:9d:e9:62:
c0:fb:67:c8:f0:99:df:43:b5:34:58:11:97:eb:e2:
93:a7:78:e5:7a:d4:ec:e7:1b:a4:b3:f2:10:a5:2b:
3b:09:e5:b9:03:ca:4d:2e:60:bc:e5:f4:dc:59:e2:
17:26:5c:51:3a:3b:bc:9c:cd:6c:a4:e1:fd:60:0e:
7d:54:e1:a9:70:ee:a5:4b:2d:df:40:51:b3:c4:39:
aa:d3:23:fb:59:ce:be:a7:b0:f4:50:0e:07:50:64:
a5:e0:98:6b:82:14:6c:c3:61:86:b5:8f:be:77:61:
a8:91:b2:b5:00:4f:ae:45:0d:80:65:6c:31:cc:6b:
36:1a:8e:e1:6a:da:99:11:6c:e0:81:18:24:b3:66:
1c:0a:a5:4d:b0:e7:6d:d1:2a:92:4e:32:bf:fb:61:
c7:5c:cf:3a:dd:15:e8:b2:3f:e3:ee:e8:15:83:29:
62:ca:32:9d:85:91:89:81:38:e7:e0:d7:77:45:26:
0c:5f:69:24:e0:f1:e1:71:db:3b:7a:55:60:7b:06:
1d:9e:53:ae:45:ca:1e:d2:8c:d8:7c:37:12:3f:42:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:23:0D:0E:7D:34:F9:E0:BD:27:58:65:05:9F:60:7D:DA:93:E8
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:73:93:2e:3e:12:e4:cc:d3:53:9a:71:48:4f:ce:1f:5a:57:
b5:46:77:e7:79:23:66:08:67:83:7a:15:c0:50:3a:2d:af:e4:
55:2a:80:70:0e:28:96:a7:7e:1e:84:62:00:f8:4b:6a:26:e9:
da:7c:0f:df:e9:50:58:5a:81:60:bb:b4:52:c2:ce:e5:58:c8:
e4:74:93:dd:07:cc:fd:b2:33:7a:e4:d6:9b:5a:0b:7a:33:0e:
de:e9:74:7e:2c:91:46:80:b0:a5:ca:a8:ee:cb:cd:fc:d8:93:
3f:37:ed:b0:f0:21:75:b7:8a:04:92:94:09:90:95:f6:d9:9f:
d5:4b:b9:e8:2e:72:d7:2f:4d:b9:46:08:a3:c1:aa:f2:a8:7d:
c9:b4:5b:c2:1d:ca:e5:8f:90:7f:86:c9:bc:81:80:d3:1d:7c:
a0:ad:d8:60:7a:80:21:43:b6:d5:2d:69:f4:33:3d:15:5a:d7:
48:4a:af:f4:ce:54:45:39:39:54:cf:2a:85:fb:f5:0c:6e:d5:
fb:4f:50:e8:5e:66:5a:f9:5b:dd:85:14:d3:f0:ab:43:93:43:
80:39:4f:47:57:0b:c0:94:27:b7:5b:57:52:ba:1b:b3:5e:4a:
50:ff:42:4e:fe:de:ff:62:46:4c:c4:13:d4:7f:93:24:72:ed:
76:fe:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:11:14 2025 by rpki-client