Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File: 4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier: hKy3XfnnJsgH05t9JLXwIk7RDJ+pfKxfuo/gZk0RPEc=
Subject key identifier: C9:6B:69:D2:9B:3B:06:F9:6C:23:EF:2E:3C:93:F4:37:E2:14:D8:CE
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer: /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial: 01967CB3221C1E5D29CFE5422B1B22955FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 14:00:36 +0000
Manifest this update: Mon 28 Apr 2025 14:00:36 +0000
Manifest next update: Tue 29 Apr 2025 14:00:36 +0000
Files and hashes: 1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: W+AiHVhJkGhQO1BS3S8yKnF4pI4ZrD/vygwMIg2t/WU=)
2: at7Oxyqw1YSxEoUOaW5RKvIjf0s.roa (hash: yOhpw2razZhrT29WlGA/CY3Yi3Lil58jkjnW17t8rig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:22:1c:1e:5d:29:cf:e5:42:2b:1b:22:95:5f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Validity
Not Before: Apr 28 14:00:36 2025 GMT
Not After : Apr 29 14:00:36 2025 GMT
Subject: CN=c96b69d29b3b06f96c23ef2e3c93f437e214d8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:89:bf:65:85:bd:39:c2:ab:a2:58:66:e8:
db:2d:e2:f3:92:8c:66:ab:e7:4d:bb:5a:8c:14:c8:
71:ba:88:d2:11:24:97:dc:12:4f:59:5a:fa:d6:e0:
54:7e:97:71:81:de:26:b2:53:a6:03:c9:59:fc:bc:
00:53:db:0e:bd:42:55:38:24:34:14:ef:30:44:74:
78:ff:9c:fe:48:99:6b:a0:68:63:6b:be:7d:f8:bb:
2d:98:4a:8a:5a:f7:61:84:f5:c6:3c:e9:47:2f:be:
a9:29:91:3a:12:64:9d:8f:b4:7c:b7:07:42:6d:d3:
81:eb:1d:db:6b:5f:7b:6b:1d:bb:68:eb:6a:dd:8b:
ac:6e:50:7a:4c:09:e3:5a:7a:72:9b:d8:47:b4:be:
87:54:ee:ee:5a:5f:92:5e:a7:f1:60:8c:4e:b3:20:
0e:d2:d8:5a:6a:be:25:1d:28:1c:11:3c:7e:8b:1e:
95:ac:c8:02:28:c4:a6:63:97:fb:55:8d:8b:ba:ac:
aa:59:44:f7:94:42:0e:33:5d:ec:5d:be:99:fa:5c:
14:d8:9b:0d:31:93:e1:64:8b:d9:8c:08:b3:56:34:
11:5f:c5:11:b5:cc:e0:3c:28:62:d4:56:5a:03:79:
d3:3c:9c:00:05:3f:d4:34:ef:39:2b:d4:8e:d6:bc:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6B:69:D2:9B:3B:06:F9:6C:23:EF:2E:3C:93:F4:37:E2:14:D8:CE
X509v3 Authority Key Identifier:
keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1b:c2:26:3e:06:ae:bf:fa:34:0c:83:56:29:d6:e1:46:f8:
af:19:a3:a3:8e:20:bc:2a:dd:4e:45:88:6b:23:2a:59:67:04:
c6:8a:09:20:83:0b:fb:f0:4a:a9:f1:3e:45:61:e4:0e:6f:25:
5b:15:41:29:5c:ec:2a:b6:23:a5:64:9a:bf:88:8b:29:09:e4:
f5:21:0b:3b:18:96:6b:6c:14:33:36:01:a6:79:91:0f:3e:97:
a2:94:e7:a8:7c:fb:51:82:9c:0d:65:98:d6:71:95:35:63:0b:
2f:08:49:90:36:b8:e7:3e:96:a4:70:08:0a:1b:94:9c:a3:0b:
c6:48:2a:ae:d0:68:2d:c9:27:1e:91:b4:d4:0d:67:8a:60:27:
38:00:0a:6a:f2:8b:df:0d:ec:d0:0c:79:40:33:a6:76:8e:50:
0a:7a:4f:48:71:4b:dd:bb:e5:b3:c9:d1:ba:40:5f:92:fc:58:
53:ad:42:a3:44:33:40:50:a1:00:16:ef:64:9a:3d:b8:61:86:
3a:9f:d7:af:50:9d:95:55:21:ba:3f:14:d5:c0:47:7a:74:03:
e3:79:b1:8a:ba:c5:96:45:f4:3f:7c:ad:df:4a:f7:36:1b:b6:
ac:b1:8f:69:dc:58:a6:ef:97:e9:07:0b:c8:1c:52:84:1b:e8:
af:d8:45:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:32:14 2025 by rpki-client