Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: b2LeHbRY0bdwdZ7upaSm9y/FAc5VHK4FtaOolIZGMvI=
Subject key identifier: 9D:D7:1E:4A:36:BD:7B:D7:BE:F7:97:6D:B8:6E:3A:3F:09:51:82:D7
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 01967D8EDCC434F83F70A03A1183C83BAFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 18:00:36 +0000
Manifest this update: Mon 28 Apr 2025 18:00:36 +0000
Manifest next update: Tue 29 Apr 2025 18:00:36 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: vTqlfdXuSh4WBku8bHM9EJbIiME4RsgmfpltfDPqhBU=)
2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:dc:c4:34:f8:3f:70:a0:3a:11:83:c8:3b:af:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Apr 28 18:00:36 2025 GMT
Not After : Apr 29 18:00:36 2025 GMT
Subject: CN=9dd71e4a36bd7bd7bef7976db86e3a3f095182d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:16:d3:89:64:f2:c4:72:4a:ad:84:52:42:
78:3b:e9:8e:5a:24:7a:b5:aa:70:fa:85:cb:96:19:
db:a5:fb:cb:20:4f:d8:65:ef:e3:92:c6:f8:9d:c7:
6b:3f:a8:f9:0a:2a:df:18:1e:3c:ee:73:e9:23:57:
95:14:c7:b7:e9:21:63:b4:d5:e4:45:57:86:87:8c:
7c:f4:0d:72:ab:e5:5b:e1:3f:73:42:a1:43:ac:fb:
f4:80:50:a7:f8:2d:88:f0:c9:b8:95:e9:04:a3:eb:
c3:76:75:1d:a3:fa:83:40:af:18:05:4e:ec:09:c8:
ed:e9:a9:9b:60:83:c1:a0:22:e5:77:45:35:73:d7:
cd:7c:77:a1:59:91:dd:65:7b:c4:e4:be:d3:c3:41:
ce:3a:f2:6a:d1:c0:fc:b6:d2:fc:55:b0:c4:45:e0:
d2:b9:b1:7a:8a:73:14:f0:88:94:ee:eb:6a:cb:05:
d7:24:bc:a7:54:72:76:01:41:ce:aa:77:b4:40:ff:
fc:65:fe:0f:8a:ec:2d:16:ba:08:c1:12:60:97:0e:
ba:5e:c4:31:98:6d:e2:9b:03:44:7b:52:c7:f3:2a:
e8:d7:37:91:7b:d0:cf:8d:80:1b:df:9b:74:17:b0:
d4:7f:94:90:ef:ca:53:e3:43:8c:41:04:82:24:a7:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:1E:4A:36:BD:7B:D7:BE:F7:97:6D:B8:6E:3A:3F:09:51:82:D7
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a4:e8:c3:71:39:6b:35:05:13:63:c3:01:4c:23:ea:d1:3d:
10:db:1d:9e:e5:1c:37:62:52:93:6b:e4:d4:94:10:e8:e4:b0:
41:c1:cc:65:ce:83:e8:2b:14:24:da:a8:b6:66:b0:35:b0:4c:
6c:e7:f2:77:e6:60:5f:c1:b6:60:84:bc:d1:63:3e:30:f9:97:
7f:9c:ad:37:79:9d:9f:26:a0:5f:e7:95:c3:60:d5:9b:95:de:
48:8f:e5:89:72:d1:64:97:8e:e4:96:94:0b:c1:67:de:dc:90:
ee:3d:f8:21:1c:4b:e2:70:3f:b2:c8:f7:c3:df:78:72:b3:3a:
b0:45:d6:63:c9:5b:a5:34:c9:66:1d:58:2d:6a:64:b3:cd:4a:
fb:b3:29:9f:f2:80:0e:1b:f3:6c:bf:a8:c8:c1:1e:4f:6f:35:
76:fd:e1:cd:7d:eb:3a:7f:a2:4e:10:29:76:96:0e:86:83:5c:
d7:bc:1f:f6:52:b4:fe:69:45:f6:7e:f7:e4:09:1c:da:8b:b4:
50:8f:f4:63:7b:ff:a2:85:13:08:35:31:f2:2e:33:9b:bb:e0:
3f:e9:44:fe:53:05:07:42:5b:01:b6:7e:bf:c1:2b:b7:8f:f1:
00:18:01:f3:16:9a:67:e8:82:d1:c1:df:b2:d9:9c:5a:d4:a6:
c7:24:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:32:16 2025 by rpki-client