Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: 6MVyXJIHgMcDrEetZdbWTF8qKs7lA9A0rEE1VHM8SLk=
Subject key identifier: CF:36:AA:04:F7:5B:35:1E:EB:6D:4C:C6:A5:02:CB:77:39:C6:AE:C9
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 019677FB2558EDABA25E8F02DA2B35D49128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 038A
Signing time: Sun 27 Apr 2025 16:01:09 +0000
Manifest this update: Sun 27 Apr 2025 16:01:09 +0000
Manifest next update: Mon 28 Apr 2025 16:01:09 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: kRaCrkxaQVWveS8tNbcjtmNd0F3EbI8zNFUPn61JpEs=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:25:58:ed:ab:a2:5e:8f:02:da:2b:35:d4:91:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Apr 27 16:01:09 2025 GMT
Not After : Apr 28 16:01:09 2025 GMT
Subject: CN=cf36aa04f75b351eeb6d4cc6a502cb7739c6aec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:3a:4a:73:f2:8c:3a:d3:2c:d0:46:65:99:
e2:bd:f6:bf:55:2b:54:f2:58:1b:82:11:80:07:b7:
23:a4:85:2f:a9:79:90:39:c0:df:24:17:26:11:56:
45:43:e7:7d:47:2d:43:86:95:4d:4f:16:4c:2e:c3:
b9:42:0d:31:49:1a:ca:b5:19:10:b5:35:6f:e5:c7:
0b:7d:b7:3a:bd:80:14:04:b2:0f:07:75:63:a6:66:
64:a4:ce:df:60:bf:42:64:29:a1:0e:d6:67:3f:02:
68:df:c5:13:54:83:af:c6:9c:35:4c:a6:0e:36:1b:
c9:8a:36:39:e2:d8:dd:f9:16:42:7f:3c:4c:84:ac:
11:6a:4b:5b:c1:10:f6:4a:5e:9e:97:42:ff:6d:75:
6f:4b:7f:8f:56:4d:f8:f1:7d:f5:7f:5d:05:25:2c:
29:7f:c8:02:08:1d:2a:89:6d:c1:de:3b:ed:5f:8c:
d3:bb:86:5d:85:27:3b:58:06:02:65:bb:6d:b1:20:
77:4b:62:3e:7d:1f:ae:b5:4b:d0:4e:c3:f8:b5:98:
a0:40:11:52:e5:dd:d7:79:c4:8f:d5:43:18:fb:35:
55:c3:06:f0:1a:de:00:1f:5f:75:f5:a4:dd:d3:72:
97:1f:46:8b:34:0b:61:c8:a4:85:bd:a2:ed:20:70:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:36:AA:04:F7:5B:35:1E:EB:6D:4C:C6:A5:02:CB:77:39:C6:AE:C9
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8b:b7:f7:04:68:43:cf:98:7d:66:81:2f:52:98:81:91:90:
9c:45:d0:ff:46:0b:c3:0f:7b:4b:03:0c:cc:b9:64:8a:89:e3:
db:75:c6:bf:5a:96:86:7b:37:79:75:0e:67:5f:24:8e:28:06:
d3:5d:82:c8:92:21:06:08:ca:ac:95:00:fa:ff:11:82:e8:97:
62:b9:9f:f3:73:f9:f4:a3:c6:c8:36:6c:3f:4b:04:ba:4d:1d:
7a:2c:97:f5:c3:84:0f:44:79:c3:be:02:5d:ba:81:4b:f5:f3:
a7:5a:75:0f:86:54:79:69:bf:4a:d9:ee:66:e1:a1:2c:87:8d:
e9:6d:eb:49:21:fe:a2:33:82:a6:85:36:e5:94:97:de:25:d1:
dd:7c:87:d1:97:b0:7c:2b:17:19:b0:55:8d:b4:3a:e1:9e:0a:
cc:d9:64:c9:50:ee:fb:37:29:12:92:d0:02:7b:9c:80:e1:9e:
2a:49:ee:f3:d2:db:90:bb:ed:db:48:05:10:22:47:b2:92:6d:
93:d5:2e:2c:bd:58:53:34:97:5a:d6:7b:b8:1f:e8:fa:7c:39:
5a:cd:6c:9b:49:f4:1c:96:a4:de:51:d8:2c:ee:44:9a:68:f6:
4c:f9:a7:9a:6c:29:c2:13:0e:5d:49:d8:27:c6:f6:4f:1f:db:
2f:b9:c8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:03:56 2025 by rpki-client