Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: TOjAmwPkwLNOM8WGvvdyeREXCvpqiAHYcueEJSHgaEc=
Subject key identifier: 76:51:7C:A7:C8:FD:07:03:0D:87:19:7E:89:FC:AE:DC:D5:84:D7:0E
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019674C2625B99C326EA5B820F2B74D5139C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0884
Signing time: Sun 27 Apr 2025 01:00:18 +0000
Manifest this update: Sun 27 Apr 2025 01:00:18 +0000
Manifest next update: Mon 28 Apr 2025 01:00:18 +0000
Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: QzDnoAmqlWEgds8IIhmzVgb8BBBMoorAjZHLAM8DP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:62:5b:99:c3:26:ea:5b:82:0f:2b:74:d5:13:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Apr 27 01:00:18 2025 GMT
Not After : Apr 28 01:00:18 2025 GMT
Subject: CN=76517ca7c8fd07030d87197e89fcaedcd584d70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b9:69:0d:b8:c5:54:9c:18:a6:8f:e1:56:75:
9c:0b:29:3d:a4:07:59:8f:5d:00:d3:ef:22:49:a4:
a7:c7:76:e2:e7:59:e1:9b:7f:1d:e6:98:7c:e0:44:
58:2c:25:12:64:e8:7c:b7:59:28:bd:7a:25:fa:35:
0e:14:91:86:6f:3f:b8:ca:38:36:66:f0:c1:a1:71:
43:b0:1b:bb:c2:b2:98:8f:92:ce:4c:39:21:30:c6:
22:b4:d3:19:c4:dd:92:4b:0c:fa:00:fd:cf:58:55:
5a:54:b0:fe:62:d7:d9:fc:79:00:3b:12:2f:3e:6b:
e3:f3:0e:1d:4b:74:fc:c1:a1:9a:6e:35:db:b8:4b:
e0:ce:f0:11:bc:f1:6e:75:5d:dd:a4:32:93:e5:28:
e8:cc:f7:50:a5:17:85:f5:37:f0:88:44:99:fe:1b:
50:ae:10:a3:8c:5b:1e:97:a3:17:05:d3:23:c2:2b:
1a:7c:e3:a6:8d:96:2e:0b:01:06:c8:6c:98:43:90:
bb:d2:b5:ce:07:57:83:ad:75:e6:66:a8:50:b1:b8:
56:19:da:a7:4c:09:d2:a4:ce:d6:ab:a8:90:00:34:
02:73:81:eb:30:79:94:e1:14:02:78:d1:2d:3a:c4:
d9:8f:91:35:5e:86:58:77:79:ab:47:40:99:7d:fc:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:51:7C:A7:C8:FD:07:03:0D:87:19:7E:89:FC:AE:DC:D5:84:D7:0E
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:7c:e0:07:fa:17:96:51:da:00:64:29:46:cc:95:89:e7:
25:05:c2:c8:88:f7:e4:fb:de:35:72:67:34:b1:c4:a0:64:d1:
a3:e3:db:a2:02:3a:17:50:a3:15:a2:9b:6c:16:9c:79:48:cc:
d6:78:06:11:c7:0b:c2:d5:97:5d:e4:6e:4e:1a:59:90:28:e9:
70:cb:7f:79:95:3d:52:8b:64:85:2f:59:b7:66:3d:9d:f2:8f:
b5:dc:ee:95:3a:db:64:41:25:df:e3:3c:3f:09:e9:44:36:58:
5e:3b:cc:9d:68:d7:73:91:d4:2a:b2:7e:20:2b:bb:ca:66:f5:
5f:76:02:20:b5:d4:a4:09:24:05:e6:16:84:1a:19:b3:73:95:
c2:ee:e9:0c:5e:3b:ec:77:f6:62:cb:7a:32:ac:b5:a9:3a:2f:
18:b5:c4:a5:12:f2:41:cd:d9:58:cd:20:b1:94:61:81:75:9d:
6f:2f:84:bf:c1:1c:1e:2d:ac:56:15:fa:e3:0f:19:e6:55:ad:
00:a4:08:ba:03:0a:99:ff:e9:94:c6:6b:45:f2:2e:dc:e4:e1:
63:fb:56:0b:48:35:3c:70:78:3a:52:05:32:49:61:94:90:00:
7f:ed:20:ba:7d:ac:7f:33:dc:f9:32:10:f8:7a:36:ed:70:f7:
b9:7d:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:10:25 2025 by rpki-client