Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: mmnEr26U5kHA2VUhD7tZAt/44r3OXKvvFrYjDU0T9pw=
Subject key identifier: E5:4C:0B:DB:0B:80:DE:06:C8:63:10:17:5E:4C:08:FC:3A:D1:8E:09
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019676B0DC565EECC626A338C81A18BF5D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0BA8
Signing time: Sun 27 Apr 2025 10:00:24 +0000
Manifest this update: Sun 27 Apr 2025 10:00:24 +0000
Manifest next update: Mon 28 Apr 2025 10:00:24 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: merW8pcFAY/VTSEyyN4lTpzfDbfWl3chvZgg/QPtneU=)
2: AbMC-uCs7slVFGZAL7TclsHp_g4.roa (hash: FWhCaCKOhoNVOjvP6h/wKTnNY21QV1BPVgLANISx2oM=)
3: znDGyTFXHxgds03YiKxu855yeHM.roa (hash: PokYry9XBN7Hw+cBZPUeLE2rCoMZAI1GoWKG5QQBoBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:dc:56:5e:ec:c6:26:a3:38:c8:1a:18:bf:5d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Apr 27 10:00:24 2025 GMT
Not After : Apr 28 10:00:24 2025 GMT
Subject: CN=e54c0bdb0b80de06c86310175e4c08fc3ad18e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:13:7f:36:b3:23:6c:31:81:13:b9:32:07:
6c:fb:b8:8c:6b:bc:ba:1c:27:66:00:c4:11:08:20:
4f:73:17:f7:2a:4f:08:90:83:02:fb:d3:d6:20:e6:
33:ef:f0:2c:b9:23:93:36:bb:8b:c1:c6:7a:54:2b:
d2:af:13:95:9d:21:9b:a3:33:ed:ce:d4:d9:2a:cf:
91:14:1b:a0:e6:e7:2e:dd:d5:87:39:6f:8d:3f:5e:
6a:5a:be:f5:bb:6b:da:a4:2c:67:88:74:75:36:ae:
2a:6c:ee:50:f6:cd:c7:b4:5c:19:a7:3d:9d:41:af:
5e:c4:e2:5a:1a:8a:03:a2:7f:52:10:00:dc:0a:5a:
0a:1c:38:68:8b:a6:40:1b:54:42:99:70:fa:65:6b:
37:a0:85:dc:1d:8d:87:24:ee:41:6a:05:f9:0c:ef:
46:b2:08:60:9a:4f:14:6c:57:0a:c1:c3:e2:ee:ad:
6f:66:00:6f:85:c1:be:37:ac:97:95:e3:a6:0f:72:
dd:da:5b:f3:90:4b:52:fe:90:52:15:2b:ba:ba:62:
c7:8f:16:fc:9a:0c:40:30:b8:2b:ea:85:e4:b3:49:
b1:26:de:24:24:d7:fc:b4:cb:96:1b:f7:f2:57:d3:
27:7f:29:93:94:25:f4:3e:ff:0d:e0:17:53:98:83:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4C:0B:DB:0B:80:DE:06:C8:63:10:17:5E:4C:08:FC:3A:D1:8E:09
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:94:1d:b2:6a:08:db:01:13:21:4e:e6:89:bc:1f:e8:dd:ce:
fc:2b:59:ba:ba:ac:d5:c0:bd:51:96:2a:cb:a4:aa:0f:04:fe:
f2:4d:04:57:39:44:e2:84:55:14:db:da:2c:b4:f9:ac:e3:96:
65:14:e5:24:67:08:26:c3:56:a9:b1:e4:0d:71:c6:97:62:d8:
78:c0:90:17:7c:4f:8e:33:06:61:d2:5e:1f:5a:6f:3f:c6:d4:
3a:13:4f:86:8b:24:20:24:97:fc:bf:4e:95:a5:81:a3:4c:da:
cc:6d:9f:8c:ec:92:e6:6b:6b:53:95:1b:9f:44:6c:d6:c6:2c:
02:ee:86:e1:c9:69:05:df:86:3e:9d:b7:12:fa:06:a0:6f:9e:
10:24:ec:27:80:ca:82:21:22:5c:87:84:15:43:9b:9b:99:e5:
03:ca:68:1b:f8:43:3f:c9:1b:26:a1:d6:6c:be:57:d6:ba:0a:
c9:e4:79:31:6e:81:63:9b:64:8c:89:75:3a:e0:92:1b:c1:da:
4c:ee:3e:82:ce:0a:1a:95:38:51:46:5d:fb:61:71:8d:21:7c:
52:9e:df:3c:f7:19:cd:b5:e5:fb:1a:a2:60:1f:62:13:ec:4b:
c7:de:11:4e:7a:c1:31:62:45:6a:bb:e9:67:84:e4:20:c2:78:
47:5a:ef:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:29:41 2025 by rpki-client