Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
File: k4EH0RRkaaEaY-X10tfbj28717M.mft (raw, json)
Hash identifier: UEogHixniQO+tvjStsVMd6UCNrQ0p3/r2hwQD/JB7O4=
Subject key identifier: C3:57:BB:54:1F:0A:3E:AF:B3:F7:8D:3C:83:A4:ED:F5:FE:55:07:5B
Authority key identifier: 93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
Certificate issuer: /CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Certificate serial: 019691164F19741B2CC7C16D44EF3701714E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
Manifest number: 0581
Signing time: Fri 02 May 2025 13:01:20 +0000
Manifest this update: Fri 02 May 2025 13:01:20 +0000
Manifest next update: Sat 03 May 2025 13:01:20 +0000
Files and hashes: 1: k4EH0RRkaaEaY-X10tfbj28717M.crl (hash: wmGkBmiaiwRycmugJXBJJvHON7Yt+mie/iIRPGTbJF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:4f:19:74:1b:2c:c7:c1:6d:44:ef:37:01:71:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Validity
Not Before: May 2 13:01:20 2025 GMT
Not After : May 3 13:01:20 2025 GMT
Subject: CN=c357bb541f0a3eafb3f78d3c83a4edf5fe55075b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:a3:b2:c9:75:72:d3:1e:a4:33:bd:70:a3:
28:2c:83:25:5b:df:f9:fa:48:14:32:12:d8:9a:bb:
1f:dd:01:6e:58:bd:ce:37:fa:05:50:be:a2:77:ff:
10:c8:8d:81:c2:7a:92:b3:13:c2:2e:e0:5b:30:b4:
17:66:41:6e:4c:04:c7:f1:a9:43:6c:76:04:c5:15:
3e:9d:19:c6:d4:d2:1e:d3:6c:05:56:1c:cf:a8:e9:
32:3f:b6:3a:9c:78:fb:82:f4:e3:20:c6:d4:26:2e:
0d:0c:9f:67:e7:3b:e0:85:3a:d7:90:c3:5d:6f:c3:
70:2c:55:a6:85:10:90:a0:b2:e6:83:55:3d:a1:b2:
55:8d:cc:c8:25:c8:52:9a:de:65:3f:f4:a4:78:cd:
64:de:20:e6:a2:51:2f:5c:6b:44:0c:2e:c7:9f:4d:
7f:13:b4:f2:40:f2:93:9f:c6:2c:8f:cd:0a:14:52:
4c:d0:e0:fe:98:8e:8c:0d:32:72:18:b6:93:15:b7:
62:b2:8c:4d:f3:15:a7:b7:0a:04:89:41:54:9d:9d:
66:40:fb:14:72:25:3e:f4:ea:9b:af:b4:6b:4c:1f:
7f:b7:5c:0a:b9:56:57:d1:5a:51:e3:35:a4:aa:2c:
0a:e1:6f:55:00:bc:18:5d:ea:07:92:a8:f1:a5:42:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:57:BB:54:1F:0A:3E:AF:B3:F7:8D:3C:83:A4:ED:F5:FE:55:07:5B
X509v3 Authority Key Identifier:
keyid:93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f0:8a:08:ea:e7:3e:38:f4:12:03:eb:c5:36:e5:84:93:6d:
8a:d6:89:62:6d:8e:82:f1:c0:8f:8a:91:04:ff:81:32:fd:ee:
3e:2f:1a:b4:3f:ea:21:f0:80:dd:52:3e:59:cb:e8:42:4d:df:
ab:53:4e:76:88:6f:2b:73:08:bd:99:7f:b3:9c:81:13:e9:22:
e0:d4:2d:96:f8:ec:08:44:47:66:f5:0c:fb:d5:1f:f3:92:43:
9e:83:f2:73:e5:ee:8a:0e:46:1a:74:67:ad:dc:2d:b9:1a:c6:
32:4c:9e:f8:4e:06:55:b0:43:93:1c:75:48:34:14:39:ab:f8:
8d:7c:1b:7b:95:ae:7b:29:5c:89:4d:ff:b1:ac:b1:69:a4:42:
e6:24:e7:af:40:e4:d6:fa:c2:6d:5b:a6:5c:f4:48:35:ad:24:
7e:2f:dd:33:2f:d7:da:6e:84:27:e3:e2:1f:28:2a:0e:d6:72:
db:48:c7:be:b4:df:4f:30:ec:1f:e8:59:f7:8f:36:4b:ea:45:
a3:ea:b2:fb:ca:e8:56:6f:e6:55:15:90:96:df:e5:da:07:0c:
2e:37:c4:f1:85:21:68:09:20:81:dc:a3:a3:58:ff:4b:f3:15:
23:c1:e6:a7:a5:e5:94:97:cf:87:76:a0:dd:c0:54:e9:06:64:
ee:77:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:20:16 2025 by rpki-client