Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: IvUcnB0IB4WjLsTjBvMbj4f3Q9uzGrwYVVVz8nHWIaY=
Subject key identifier: AA:1B:76:EC:E7:50:2E:26:63:D8:C2:21:40:EB:47:B2:EA:5E:52:93
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 01967DC5993FC87D4A4368149F60328154E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 19:00:23 +0000
Manifest this update: Mon 28 Apr 2025 19:00:23 +0000
Manifest next update: Tue 29 Apr 2025 19:00:23 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: RiyUnFVyq+S67A7FEjwzt60NhhcqjctRNdPzP+XO+EU=)
2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:99:3f:c8:7d:4a:43:68:14:9f:60:32:81:54:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Apr 28 19:00:23 2025 GMT
Not After : Apr 29 19:00:23 2025 GMT
Subject: CN=aa1b76ece7502e2663d8c22140eb47b2ea5e5293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:a4:b6:d6:ee:1e:99:0d:3d:80:4b:14:a3:
43:6f:14:66:2b:8d:d6:5c:ec:5e:a0:c8:63:10:d0:
c0:7c:a5:57:55:f5:e2:bb:82:5f:60:d8:4a:d8:6f:
a5:75:aa:a6:b3:66:b9:da:3f:af:11:aa:41:74:96:
33:63:ab:e6:32:32:3b:95:12:81:e6:c0:13:e4:b8:
21:45:0a:0b:5e:58:e5:09:02:2f:32:a9:39:b5:99:
50:1f:20:d3:f5:03:b5:ed:16:c5:98:a8:b9:38:a3:
9a:f9:95:ed:ed:b2:11:97:f3:8f:8d:d4:0d:93:d2:
eb:50:84:73:8a:37:5d:e7:ac:27:a2:7f:72:04:f0:
b6:29:d7:85:12:c0:e9:85:cb:83:94:3b:9b:e0:92:
7f:79:66:b7:61:5f:38:c8:2b:72:be:79:20:65:3c:
7a:fd:72:1d:63:90:ca:a0:d6:7c:37:e8:d8:00:86:
ae:76:3a:b5:14:e9:83:88:53:8f:66:5c:b3:3c:55:
e0:f7:0e:0c:89:f5:a7:18:e6:a7:ce:ce:5a:52:5e:
84:a7:16:74:4f:e3:a3:4a:50:93:76:82:5a:95:59:
ae:31:79:f0:62:86:04:3e:8d:de:c3:92:0f:c9:26:
0f:3a:8b:98:1b:64:f6:b5:e0:db:63:57:2b:5b:d0:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:76:EC:E7:50:2E:26:63:D8:C2:21:40:EB:47:B2:EA:5E:52:93
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ae:7f:96:83:62:7a:8b:33:5d:1a:0a:ba:75:aa:1f:4c:7e:
1f:ed:64:90:61:fb:69:f0:5f:97:84:2d:ba:c1:48:93:85:46:
55:4a:45:88:ba:df:6b:cb:66:92:70:ef:c6:95:be:82:9e:c9:
7a:4a:7a:c0:ea:1a:4a:63:0c:73:c0:2d:6a:2c:7c:a8:d8:a1:
a9:99:6b:aa:18:5d:42:df:24:5f:40:bd:98:6b:e8:b6:c8:8d:
4e:7a:50:9e:58:d2:9c:51:2b:7b:fe:6d:13:4c:e7:b9:13:13:
1b:8d:ec:41:85:2f:64:6f:aa:50:3d:91:30:76:21:a2:dd:54:
e5:94:00:fb:fc:de:6a:be:a8:26:66:4f:77:f2:b5:a0:48:be:
2e:91:06:4e:9d:1a:86:74:c5:0c:a5:43:03:7e:09:25:f8:af:
17:b6:2b:2b:1c:92:92:7d:47:61:fb:9f:fe:18:e1:ee:e7:5f:
d2:ad:42:b0:9f:ad:4d:e6:f6:67:a4:e0:b6:e3:40:2f:b2:52:
f9:83:01:18:d4:e8:89:cc:20:7d:6f:22:ed:ed:92:27:c2:c7:
85:8a:5d:32:21:30:19:a1:78:ca:32:d8:2a:34:60:89:cf:55:
b8:12:33:9a:cf:dc:03:e6:1c:b6:92:c7:0c:fa:7d:3b:99:6b:
89:61:03:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:26:18 2025 by rpki-client