Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File: 4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier: z96285P2m5GzbQDG+f4mrAK5KMMrewLBFlA1Za35CJM=
Subject key identifier: 64:C3:13:FC:1D:52:FF:97:03:E4:04:F1:AB:ED:54:96:94:64:0E:54
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 0196790D2A60F4F43524227B3B3ABA1A9EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number: 0DC2
Signing time: Sun 27 Apr 2025 21:00:28 +0000
Manifest this update: Sun 27 Apr 2025 21:00:28 +0000
Manifest next update: Mon 28 Apr 2025 21:00:28 +0000
Files and hashes: 1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: DKmB0NYpBIowQrHbmkxuyROzYwojCD3fgtfOYFJbDa8=)
2: Mz3zdOLpdrQGVZtJncItYpvPliE.roa (hash: 6F2PNmZ9ECufEFXZhtjXXLlbHL0vIzCdtjQEK5a/NJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:2a:60:f4:f4:35:24:22:7b:3b:3a:ba:1a:9e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: Apr 27 21:00:28 2025 GMT
Not After : Apr 28 21:00:28 2025 GMT
Subject: CN=64c313fc1d52ff9703e404f1abed549694640e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:30:35:8c:2a:66:72:88:ee:42:43:c0:24:5c:
08:b1:cb:4e:40:d1:5d:7f:fb:cc:d8:51:03:74:a5:
e5:c8:b3:2d:39:ac:c9:56:71:64:6e:cb:9c:b9:ac:
13:22:97:a0:0a:fd:18:46:d0:da:e8:8d:e5:2f:07:
ad:cb:5b:44:ea:e1:6e:50:d3:a4:c6:ce:5b:1b:1d:
f4:bd:40:76:1d:05:74:25:c3:d3:75:41:70:20:cc:
b1:94:85:28:38:0f:b5:7e:c0:03:fa:8f:0f:58:5b:
32:fe:cc:4c:4c:51:57:1f:95:79:77:19:f3:42:23:
b7:24:c3:9d:30:83:33:37:cb:b8:3e:1f:d4:91:2a:
88:c6:0c:f8:9a:2f:4a:d2:2a:51:d2:93:21:24:58:
52:03:41:a2:6d:6f:6e:6f:3e:6f:6d:be:1d:fc:ae:
0a:f7:f0:74:f5:f2:4c:e5:ac:a5:71:94:85:ec:72:
b4:7d:b1:6c:fc:44:12:5e:e6:4b:d9:d2:37:a7:ed:
84:68:b4:ba:22:86:7f:f4:0c:88:cf:0e:53:dc:53:
14:68:5f:b0:0c:3a:ee:1e:0e:3a:2a:e8:39:fd:d5:
f8:11:b5:06:81:ea:25:eb:33:7e:b7:19:14:5e:ff:
9d:41:2c:01:c1:0d:18:cb:54:22:35:5b:06:82:ec:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C3:13:FC:1D:52:FF:97:03:E4:04:F1:AB:ED:54:96:94:64:0E:54
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:db:1e:f9:b5:1a:1e:33:ab:53:31:c6:81:2a:b6:2e:6a:43:
b1:44:51:22:df:36:79:82:c8:f9:14:99:70:85:01:4d:78:40:
75:2f:7e:41:97:fa:76:e2:ed:07:58:3f:21:88:3c:3b:94:1c:
98:e6:1e:58:44:02:9e:97:c7:cc:47:1f:65:b5:75:9c:c9:cb:
47:d5:98:3f:99:4e:98:ff:2c:dd:02:b5:53:60:0d:22:a0:67:
f0:37:23:20:89:ac:42:73:81:52:a1:53:2a:a8:16:40:b9:4a:
ae:bf:f9:b0:0f:ec:8c:31:9c:a9:97:8a:92:1e:c7:31:95:c1:
c1:f2:c7:e6:02:23:7c:29:d4:ec:3f:3e:26:a2:ab:5f:3a:dc:
bc:7f:63:be:90:3f:8d:22:0b:52:9e:5b:60:69:7f:c3:69:37:
fd:f3:18:07:f3:27:02:78:60:45:b7:45:a7:ad:78:a3:51:76:
3c:a8:a7:7d:f7:3d:3b:80:93:90:df:c0:01:c6:97:e5:c9:fc:
0b:67:fe:2e:6f:d4:45:a8:43:cd:14:38:d7:30:50:7f:cf:cc:
f8:9e:5f:85:7f:df:43:8e:cb:93:1e:e4:ea:bf:c7:0e:42:55:
e9:21:88:6f:b7:82:1e:12:4d:48:cc:de:19:9d:cc:d5:3f:2f:
0e:81:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:01 2025 by rpki-client