Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
File: 4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json)
Hash identifier: wB3GFNVUl4/AmKobzpWPjJu2lb0xc8uVKj5Di+HioDs=
Subject key identifier: EE:8D:CB:30:81:A1:D2:EB:F2:E3:7F:78:2C:9A:20:D4:A0:AB:76:A9
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial: 01967C44E67F55328A13633066219857AEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 12:00:12 +0000
Manifest this update: Mon 28 Apr 2025 12:00:12 +0000
Manifest next update: Tue 29 Apr 2025 12:00:12 +0000
Files and hashes: 1: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: G7dDNc+fNYWlNRPoJHRzEIQmI7a112huAmJwzZ7ekYE=)
2: IcskwdSROKi9qZels4yHQYnddgE.roa (hash: vPtKorJ6NxT7CsrYyPVFrqYiL53IkN4t+VtNjaUnOjc=)
3: R1WYdjBFxaqOJXdmYl0VkK_31-A.roa (hash: jZxWD0uM9IaDgIRuAxwkdjeq40Xiof3RV5ZUg9OIXw4=)
4: UgQvx_lbsNuoPrOWEqQQU5trSo4.roa (hash: n18F2sXvjdyTqUjm8/utigztVnaPt5K+HXMDSCAPMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:44:e6:7f:55:32:8a:13:63:30:66:21:98:57:ae:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Validity
Not Before: Apr 28 12:00:12 2025 GMT
Not After : Apr 29 12:00:12 2025 GMT
Subject: CN=ee8dcb3081a1d2ebf2e37f782c9a20d4a0ab76a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:df:08:f6:08:50:50:7e:0d:b8:f7:cd:1a:
55:69:7b:86:47:05:74:aa:98:32:1d:15:e9:fe:01:
99:3a:a7:4d:11:9c:3d:be:0f:b3:16:0f:33:be:c8:
eb:ce:8c:ea:be:3d:a8:92:74:69:79:70:46:3c:1f:
33:27:76:33:d7:e5:98:ae:06:25:4e:19:8d:91:55:
2d:1a:b9:48:66:06:50:47:6d:4b:dd:cb:61:c9:f1:
c6:dc:6d:78:05:98:67:2e:91:3e:e8:03:85:f2:f0:
c0:ed:3b:37:24:98:32:59:c8:77:28:1e:b3:2d:ae:
2c:28:dd:60:57:d8:f4:86:60:ff:9a:a4:24:10:86:
cc:aa:f8:75:40:92:99:54:34:39:d9:af:d3:58:ec:
19:cc:64:42:0d:1c:b1:18:71:c1:2a:40:9c:f4:6d:
53:5f:17:46:d4:98:be:b7:b3:df:6c:c2:8c:55:78:
15:6e:4f:6a:a2:52:4a:b8:2d:d6:37:a0:a7:66:3a:
88:9d:a2:ed:44:17:29:02:c7:28:7e:38:cb:55:0e:
3e:7c:08:62:84:41:83:3b:2b:90:6a:38:39:a1:7e:
b0:cc:e8:00:59:bb:53:99:a8:18:23:b0:fb:ab:9f:
67:ae:44:23:a5:fb:97:fc:18:9c:b3:20:6f:ab:8c:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8D:CB:30:81:A1:D2:EB:F2:E3:7F:78:2C:9A:20:D4:A0:AB:76:A9
X509v3 Authority Key Identifier:
keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:45:00:4b:4f:e5:b8:23:b4:1b:d5:11:55:77:b2:aa:9b:8b:
0d:c5:d5:de:ca:e6:da:44:88:21:83:88:18:8c:02:af:23:f5:
7c:36:5f:9c:2d:c8:6c:44:1e:27:d1:f2:98:79:ab:fe:e8:93:
31:14:84:80:2f:f2:29:23:b2:91:e5:ba:6c:47:e8:6e:c3:24:
96:59:51:19:c4:2a:d5:26:8d:23:fb:35:6b:94:9a:6b:00:79:
7b:89:e6:e1:ab:22:ce:7f:6c:e4:a2:df:cd:04:85:f3:40:4f:
e5:db:b0:9d:af:e8:f9:51:72:73:4f:34:12:4e:38:a1:dd:a1:
61:12:ee:d8:eb:92:59:43:df:b6:03:72:3f:35:a1:47:49:2b:
b8:74:ba:2a:0e:d0:3b:00:6b:1d:dc:ba:b2:73:b4:53:c9:03:
4d:55:91:f0:e2:c5:7f:b1:08:ee:d8:8c:61:65:18:86:10:bf:
73:37:18:40:09:78:08:cd:2d:3c:e5:fa:4f:1a:dc:4c:c3:41:
90:54:b8:83:3c:c6:c0:30:29:6e:24:10:46:42:df:1b:5d:3a:
ad:64:d9:7e:e2:1c:de:63:3e:a1:dc:83:40:d8:34:9f:42:7a:
ae:ca:79:1c:3b:da:1f:37:82:7f:28:28:8e:62:a2:17:8c:86:
ae:0f:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:59:44 2025 by rpki-client