Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: lty5wPT7Q/RrTsPGvHFYoRY/mh0RIOhcO7iV6aebuyQ=
Subject key identifier: 33:A5:B9:C2:0A:7C:DB:7C:43:96:FE:89:33:05:4C:97:4E:37:F5:5A
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 019678683892C618758A4958732F9659BB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 1515
Signing time: Sun 27 Apr 2025 18:00:18 +0000
Manifest this update: Sun 27 Apr 2025 18:00:18 +0000
Manifest next update: Mon 28 Apr 2025 18:00:18 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: aNWyyJhYPCVBh/RfvBgfhYac5mbJY3DHYuDkaMwq/pc=)
2: 883carP1hhWb3_MmiKGn80hphf0.roa (hash: cPZWjDagkqb5tEO5wfwI807e/U08AzhpwxGlaqpcxgI=)
3: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:38:92:c6:18:75:8a:49:58:73:2f:96:59:bb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Apr 27 18:00:18 2025 GMT
Not After : Apr 28 18:00:18 2025 GMT
Subject: CN=33a5b9c20a7cdb7c4396fe8933054c974e37f55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:e2:fe:b6:af:27:39:8d:cc:34:3a:b2:47:
8d:09:0f:21:0e:ac:9c:ae:cf:27:4b:48:99:69:81:
d0:05:ff:ba:c6:b8:76:26:21:c7:01:ed:67:af:16:
ed:27:5e:e6:91:bd:57:37:6b:21:9b:b6:ae:91:28:
9e:dd:1f:76:6a:eb:18:ca:91:20:d1:d3:75:da:6e:
93:53:27:32:8c:73:cf:a7:2e:6d:bd:1d:e6:ad:2f:
75:d8:28:bf:5c:1e:36:d6:90:b8:27:51:ce:f5:43:
fb:31:9e:8d:45:99:aa:e8:a2:83:a9:36:8a:0f:fb:
89:55:09:a3:c7:64:de:b1:01:f5:b7:db:88:db:08:
c8:1d:bf:bc:db:33:b5:5e:df:61:0f:a6:17:c0:43:
d8:ff:a8:b9:1d:34:6c:56:ae:02:d6:25:11:f9:dc:
26:a8:04:5f:ad:1e:b5:ce:0a:bd:e2:f0:a1:d5:ef:
bd:0f:ac:ae:e6:21:0d:f8:95:cc:3e:32:ce:5f:46:
dc:36:73:c4:5a:09:9f:48:69:89:f8:0e:78:f0:22:
0d:ef:93:71:6d:9a:99:38:68:d9:f8:40:d3:b9:9f:
9d:d8:73:2f:93:14:73:8a:ab:79:ce:bc:ce:f3:89:
70:71:a0:52:52:0f:76:fb:70:7f:e3:00:1c:eb:4e:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A5:B9:C2:0A:7C:DB:7C:43:96:FE:89:33:05:4C:97:4E:37:F5:5A
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7b:9b:c8:a2:eb:88:5f:d7:83:aa:aa:f4:45:6f:16:a9:ee:
a0:da:19:f4:e6:30:aa:70:f4:f1:95:41:49:ca:d8:72:4c:9a:
8a:0e:eb:0a:7d:11:7d:ff:8a:ce:53:28:b6:87:cd:cd:31:f9:
6b:40:c2:39:db:e2:89:b0:2c:a6:21:93:62:63:79:d9:28:c0:
cb:f7:fa:3b:e3:45:54:36:a7:13:9d:64:cc:de:78:67:21:a7:
e2:29:8d:29:55:32:89:7b:86:36:4a:35:39:f0:2b:57:e9:03:
7b:12:b0:39:06:65:0a:2e:49:f2:14:2f:e0:8e:76:9f:fb:db:
5d:68:bc:a6:88:ee:9c:be:75:2a:54:02:48:99:96:03:31:0c:
6a:77:a6:02:f6:39:02:a3:ba:03:2b:16:53:b2:7c:b8:a7:92:
c1:fe:bb:a2:39:45:f5:43:8e:41:b2:74:6d:98:09:bc:3d:41:
54:81:9c:51:1f:97:a9:5b:a3:e9:9f:96:ef:2e:4e:3f:24:4f:
39:8c:47:3d:8a:53:95:d6:8f:20:dc:cf:e5:b5:4f:b0:09:3b:
bb:0c:d4:3a:5e:85:e1:fe:b3:ee:d0:c2:29:4f:28:92:32:05:
c0:3f:f2:cf:62:69:a5:b4:71:b2:e8:a6:48:ea:aa:0a:77:4e:
7b:9a:c2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:05:30 2025 by rpki-client