Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json)
Hash identifier: MsZxgvNQ8frgONhLPqdYOtQv19Ewgggh/D5WRCZjByo=
Subject key identifier: 12:5D:E6:2D:7F:18:43:4E:EB:CE:E2:71:6F:F2:06:7A:DE:4C:DB:33
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial: 01967868C640CF45B444E2E248F4AC0EA8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 18:00:54 +0000
Manifest this update: Sun 27 Apr 2025 18:00:54 +0000
Manifest next update: Mon 28 Apr 2025 18:00:54 +0000
Files and hashes: 1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: hSOSS2ffZvWLrJ9JIQxloattagVrrWhPPwJZpMQmhUk=)
2: 8eT8mItdm-eFNRvcC95AKoGdkEY.roa (hash: V3x7HEHI2C6TpwyRaJQsDy3CR99xipPFrG4gu0IK5ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:c6:40:cf:45:b4:44:e2:e2:48:f4:ac:0e:a8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Validity
Not Before: Apr 27 18:00:54 2025 GMT
Not After : Apr 28 18:00:54 2025 GMT
Subject: CN=125de62d7f18434eebcee2716ff2067ade4cdb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:51:1e:e4:4c:e0:d8:ba:d4:44:f9:33:0b:
e8:ab:18:12:df:06:89:51:5e:fb:4b:47:14:3c:2a:
b6:69:a3:93:23:0d:9e:b4:9a:36:08:3a:96:b2:db:
93:c6:d7:d6:97:ab:96:a3:2d:55:6c:36:ce:12:80:
6d:ba:20:c9:02:23:26:6a:4a:2a:ab:6b:c2:88:aa:
cf:37:90:ec:95:ca:71:02:6d:99:a0:2b:46:20:a9:
4f:24:2e:8e:4b:bb:43:c8:c2:8f:33:06:24:0d:1a:
6a:bc:30:7c:90:05:f7:4d:5f:43:46:dc:e9:bd:ff:
62:35:de:87:d5:89:ed:2e:83:90:55:5b:0e:b9:03:
1f:d4:1d:ee:f6:93:e1:ff:d4:bb:16:b0:b2:68:d2:
a9:f8:32:ad:94:98:29:bc:13:cb:1e:7b:29:0e:15:
b6:59:2c:be:d3:bf:b4:c9:dc:1c:c2:c2:76:73:30:
d2:1b:41:15:af:cd:0f:98:d9:5e:69:72:c6:61:65:
09:22:79:85:45:a4:e7:99:0d:80:34:65:60:5a:f6:
96:c5:e5:8d:69:73:fe:03:a7:ba:7f:ca:cd:35:9b:
e8:a8:26:cf:fb:2e:bb:d5:60:1a:2c:ff:9e:dd:f9:
a2:70:42:f0:97:f1:9e:13:07:d6:24:0b:65:f8:79:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5D:E6:2D:7F:18:43:4E:EB:CE:E2:71:6F:F2:06:7A:DE:4C:DB:33
X509v3 Authority Key Identifier:
keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:54:55:86:7d:8b:b5:da:58:7a:bd:5b:92:f4:6f:78:79:44:
57:3e:ab:5d:27:27:24:ed:60:87:1d:e9:64:c7:81:f1:12:b1:
9f:8f:71:bb:d4:56:41:44:6c:bc:55:26:98:24:df:67:15:ab:
79:57:d7:18:de:75:21:1e:42:6e:c9:8b:55:02:e1:f0:88:5e:
97:3d:ac:d7:0a:5b:46:4d:73:ed:ea:43:b2:f9:e2:14:eb:94:
7f:a7:62:72:15:60:48:99:de:d1:ca:e5:57:2e:5a:f2:55:a1:
f9:75:84:57:eb:4b:79:cd:94:57:9a:4c:4b:e2:fd:9b:95:6b:
e6:68:e7:d5:5b:2a:42:70:6b:a3:69:59:67:4f:4e:22:a0:f0:
d0:f0:47:01:aa:9d:8e:23:c1:e5:4c:f2:ab:e6:f9:b8:78:13:
89:17:58:37:d5:eb:c2:09:51:94:37:7a:6b:01:40:4f:bb:fd:
7a:a9:8f:90:05:c5:cf:29:b4:ea:41:42:c1:fd:fa:b6:7e:18:
7e:6f:cb:69:3e:fe:2f:8a:ef:5f:af:07:7c:f4:27:57:62:18:
11:f9:90:df:45:6d:f0:eb:ec:27:1a:9d:1a:cb:59:e5:66:8f:
06:c5:a2:b2:76:a0:d9:43:39:a4:b9:5f:d2:66:37:30:69:5f:
b7:38:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:09 2025 by rpki-client