Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: G47ZCAtzu33ZjrWWxPrBAs+69ba7pLaMFEtW2atHSGo=
Subject key identifier: E5:17:C4:F8:7B:87:83:7E:3D:41:8C:47:04:78:97:09:DF:E4:41:D7
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 01967F467528E56B968CD69A98F01244A0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: EE
Signing time: Tue 29 Apr 2025 02:00:45 +0000
Manifest this update: Tue 29 Apr 2025 02:00:45 +0000
Manifest next update: Wed 30 Apr 2025 02:00:45 +0000
Files and hashes: 1: E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa (hash: 0UXW9577f81NC0CmIqC0W/KDB1+9xji40a5s/Ktdi/g=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: 0M1QKEpsqTs2SLmViyErNyTgGKWJ+93W8/svL4LHG/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:75:28:e5:6b:96:8c:d6:9a:98:f0:12:44:a0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Apr 29 02:00:45 2025 GMT
Not After : Apr 30 02:00:45 2025 GMT
Subject: CN=e517c4f87b87837e3d418c4704789709dfe441d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:2a:34:77:7d:aa:c7:af:01:1a:3a:ca:2e:
c0:ca:02:ea:89:d8:ec:ac:32:f9:4c:d1:2c:6d:67:
0b:87:95:f4:b8:2c:a1:ab:82:e1:cc:ac:de:be:7d:
fa:b8:25:c3:80:b9:99:31:dd:03:15:d0:87:36:6a:
5a:75:28:5e:e8:75:d2:3f:cb:af:f8:f3:d8:0a:b3:
8c:4e:bb:9d:aa:46:ca:51:ce:c2:23:9d:2d:3f:bc:
df:53:95:c0:78:d0:66:8c:06:e1:eb:a5:29:2f:ba:
a2:ab:a8:91:cb:91:5d:33:52:07:69:eb:6f:a1:f8:
ea:91:66:49:c0:7a:1c:45:96:94:01:a9:19:b9:6f:
5a:2a:5f:d0:aa:90:97:30:41:95:70:cf:8f:5e:77:
39:36:35:74:33:e3:9e:6b:c6:c7:8b:9f:f9:f5:f2:
98:fb:2f:de:58:33:ea:a4:6d:a7:8d:f0:f1:62:e1:
a5:94:a1:af:74:79:fe:62:ba:92:3a:ef:d6:cc:b9:
57:21:ad:bd:c1:a2:a0:01:65:6c:c5:7d:f9:76:36:
1a:a5:0e:dc:f5:94:7d:09:35:fd:03:ec:29:17:80:
31:96:de:99:42:a3:83:b9:1d:46:f1:f4:1e:26:1e:
df:50:47:4d:70:c8:63:e7:39:06:24:c7:59:05:73:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:17:C4:F8:7B:87:83:7E:3D:41:8C:47:04:78:97:09:DF:E4:41:D7
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d6:6c:75:73:8d:a6:9c:2f:9a:36:c3:e2:51:e5:4d:7c:2b:
90:d8:df:16:d0:de:92:49:21:de:2d:e3:44:ea:b8:e9:c3:8e:
ac:a4:bd:bd:94:4f:a2:4c:7c:61:c3:93:43:e2:17:29:18:7a:
fc:8f:8e:56:b3:bc:54:da:31:92:60:b2:bd:98:96:a6:9c:c3:
ef:ac:ce:cf:d5:1d:0b:d4:b1:ec:6c:12:05:a3:a7:9f:5d:3d:
58:7b:c6:56:eb:aa:6f:32:b2:8a:12:71:20:6a:c2:74:76:f3:
46:de:ea:1d:94:ea:80:91:69:b4:58:d2:03:99:95:19:b8:21:
3f:50:67:76:de:1a:a4:db:a5:9a:69:ab:0a:11:2e:a7:03:68:
91:a1:cb:f2:4a:67:a5:08:2e:d3:21:0c:f9:e2:44:76:7e:15:
ed:ae:8c:cc:ef:ca:0e:23:11:58:d8:8a:ac:7a:8d:4b:18:59:
5d:58:ca:9d:9f:5c:4b:e4:18:9b:57:c0:0a:ef:98:30:9d:37:
9c:55:7b:5f:b8:66:44:25:94:bf:35:49:fb:0a:c1:a0:63:b0:
01:fd:5c:1b:e0:26:bf:4e:d7:8f:00:60:5f:98:7d:80:0a:01:
bc:6d:af:80:23:34:9a:be:bc:a1:5f:be:d1:19:b7:8d:2f:82:
9e:9f:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:51 2025 by rpki-client