Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.mft (raw, json)
Hash identifier: 5O028G4TdLogNiXmDZxlCFNChw1FQlGD/bun8FJholY=
Subject key identifier: 95:15:14:C0:0F:70:B1:EB:35:07:C5:E5:66:7A:73:9F:C4:E3:7D:19
Authority key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Certificate issuer: /CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Certificate serial: 01967C7BD00981F08BCFE7146B3A9F98A4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 13:00:11 +0000
Manifest this update: Mon 28 Apr 2025 13:00:11 +0000
Manifest next update: Tue 29 Apr 2025 13:00:11 +0000
Files and hashes: 1: 4UYAGfiAaeNhThUQkhzH5E0cq-I.crl (hash: A9psJtjNJZIpVH57INGhD/tNxTxMNIzRs5n96Kg1Cj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7b:d0:09:81:f0:8b:cf:e7:14:6b:3a:9f:98:a4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Validity
Not Before: Apr 28 13:00:11 2025 GMT
Not After : Apr 29 13:00:11 2025 GMT
Subject: CN=951514c00f70b1eb3507c5e5667a739fc4e37d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:54:ac:69:16:4c:a1:a5:b1:0a:24:45:b0:
8c:d0:da:28:d1:e6:0a:01:a4:9a:61:ee:7b:b5:04:
df:a3:35:04:04:e5:c3:8d:98:81:57:9b:c8:11:86:
12:57:ce:17:09:d7:34:43:22:2a:9d:13:b0:54:5f:
5e:3c:c7:57:9a:2a:bb:ba:52:fd:86:3f:5f:8e:f6:
2d:60:f0:d5:0e:30:ef:9e:df:25:42:a8:fb:8a:11:
43:ef:31:ef:f0:49:9a:75:00:c0:b6:78:da:bb:73:
3c:50:73:1c:54:27:f3:62:b9:47:91:9f:54:01:2e:
00:68:fc:06:21:9e:40:01:b8:6a:54:4f:10:0c:6f:
7b:d8:ef:3a:cf:7a:01:0f:10:86:ae:03:5c:b2:6f:
11:63:6a:51:75:bd:5b:a1:96:de:49:85:f4:a0:99:
5c:c9:32:25:25:f4:45:39:b1:bb:93:ca:98:1a:fc:
e9:67:b0:36:3c:d7:1f:de:fa:7f:f0:e0:26:8c:63:
a3:03:e7:0b:cf:a7:f9:e0:11:27:ad:8c:bb:a0:f4:
87:1e:de:6c:fb:64:2f:b1:3f:81:78:47:96:13:2e:
56:35:6a:ee:0b:e0:d3:16:41:53:6e:52:64:47:6a:
c2:e4:b1:be:c2:08:2a:f9:8f:c4:ee:ef:98:f8:ba:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:15:14:C0:0F:70:B1:EB:35:07:C5:E5:66:7A:73:9F:C4:E3:7D:19
X509v3 Authority Key Identifier:
keyid:E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:72:7c:d6:95:8a:a0:43:e2:54:a7:30:3f:e1:be:b4:71:61:
fb:29:b5:42:d0:92:63:37:ea:09:ee:e2:9d:f3:25:8c:8f:b8:
06:66:d1:4f:cb:29:be:93:68:28:ee:9f:9e:1e:9b:4d:ea:48:
14:4f:97:6a:1c:3c:f4:5e:c1:7e:82:f8:a0:57:53:b1:23:bd:
b8:51:f7:90:61:27:2f:23:fd:17:76:b5:28:5f:84:73:9b:f4:
ca:58:73:24:ef:c0:54:95:06:f8:45:26:85:54:78:6f:f8:41:
f7:ea:2f:00:d6:f6:47:a6:2c:b0:f4:8a:d0:43:80:ec:8a:24:
a7:c4:9b:3e:69:a4:5a:07:d5:c3:4a:97:1a:a6:f2:1f:bc:96:
d5:24:37:bf:cd:32:1a:ed:92:c0:42:e6:be:ad:35:90:16:5e:
c4:8a:bb:48:c2:16:53:3c:cc:4b:17:b3:91:93:20:f1:2f:32:
2b:50:fe:67:d2:43:75:d6:4a:8d:05:99:9e:d6:2c:78:b0:c1:
1c:84:65:98:66:0b:45:81:f5:58:75:8c:f6:27:90:0e:03:61:
0d:ee:6c:a2:bf:e2:4b:86:a0:2a:c1:76:1c:07:78:bb:11:37:
7d:50:f9:a9:3e:1f:1b:f5:52:0f:5f:ee:eb:62:ab:bd:30:02:
48:03:93:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:20 2025 by rpki-client