Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: pNX0BMyHncsZMnFG9Zky80B8tik9miuyxd1lkmeTbjE=
Subject key identifier: F9:1C:30:5B:B1:6B:34:7B:DC:08:95:AC:91:02:37:7F:90:5F:43:AF
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019678681C1E09DE7CB8ECEDB6BC8DA04FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 18:00:10 +0000
Manifest this update: Sun 27 Apr 2025 18:00:10 +0000
Manifest next update: Mon 28 Apr 2025 18:00:10 +0000
Files and hashes: 1: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: EC32VSR4JM6lzqnD6bwH8xW+2hF4N0up1eglp1uPkF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:1c:1e:09:de:7c:b8:ec:ed:b6:bc:8d:a0:4f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Apr 27 18:00:10 2025 GMT
Not After : Apr 28 18:00:10 2025 GMT
Subject: CN=f91c305bb16b347bdc0895ac9102377f905f43af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:ae:dd:d2:3f:1c:57:0c:8c:65:b8:c0:e3:
78:af:c6:7f:cb:a9:f4:4a:38:18:66:26:9c:8b:62:
9b:84:08:6c:7f:d0:cc:89:e5:23:17:1a:b3:48:8d:
bb:17:9c:85:92:98:a9:64:e4:1f:37:e2:8c:0c:2f:
cc:49:b9:04:a7:c2:93:0a:ee:4e:ab:c2:11:20:08:
04:4b:20:e8:68:5d:77:88:0f:4b:69:23:3f:98:9d:
9d:02:73:f9:5c:4c:a9:5b:17:31:bc:c2:f4:5f:ae:
8f:e6:44:5c:4c:2a:5f:80:5e:c1:5e:4f:44:f6:8a:
04:69:de:a9:ce:ca:06:14:65:e1:7b:7f:db:4f:b6:
a6:45:c7:d0:c8:81:25:d0:72:a3:37:11:4b:5e:87:
1d:03:b7:a5:b8:bb:de:eb:36:69:0a:91:88:ea:68:
81:54:5a:e3:9b:56:d9:c7:ff:d0:96:37:16:0e:a1:
3e:af:95:f7:8d:5e:04:75:4d:63:f4:b5:38:ed:bf:
1f:67:64:7a:76:1f:70:4c:93:f5:49:6e:30:38:92:
98:7b:19:69:65:b2:3e:d5:17:7a:ca:35:42:de:16:
eb:a3:c7:f3:63:17:c9:f7:69:7d:2b:e4:69:3f:da:
b5:d6:a0:95:97:62:58:89:e8:d9:60:93:b4:39:88:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1C:30:5B:B1:6B:34:7B:DC:08:95:AC:91:02:37:7F:90:5F:43:AF
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4c:43:83:cd:b1:ae:9b:60:95:0a:3a:d1:ae:79:cf:60:92:
41:96:74:b6:aa:e7:40:d1:2b:6e:4b:1b:be:b1:4c:4c:4a:f6:
86:6e:c4:e7:18:d3:c9:ab:57:37:e8:ed:cc:67:2f:02:e0:65:
fa:98:93:79:8c:82:b8:2f:7b:f2:92:71:72:5f:7c:9b:05:ff:
8b:36:b6:88:4c:3c:77:99:fd:b4:f3:85:51:eb:86:34:89:7b:
8d:79:04:f0:16:a3:94:2c:a0:0a:c7:3c:61:05:c9:ea:73:d2:
71:1b:14:09:07:8f:cd:b7:a2:df:df:1e:76:21:45:4d:7b:ef:
30:5f:b0:59:b5:02:0c:59:36:35:23:62:9d:23:32:dd:3c:20:
99:da:2c:8a:8e:82:98:20:fe:31:15:53:6c:73:eb:bc:cf:15:
b6:d3:f2:69:8c:91:24:10:ff:9e:b6:d6:01:60:35:72:5d:46:
4a:6e:9d:d7:ef:a3:41:93:84:9c:51:73:3e:58:5f:05:b2:47:
49:e1:58:6d:99:5e:7f:4a:27:10:c2:14:8c:0e:e6:87:26:1c:
e3:e6:cf:46:6d:04:4f:cc:c5:e6:81:70:e9:c2:66:77:64:9e:
7e:c6:eb:54:78:67:3d:e5:d0:f1:40:c0:56:da:ab:ec:69:fb:
a5:97:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:17:09 2025 by rpki-client