Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier: TmGNP1nFKtHRcOmDPwCbUbpAyU5vHAC/xgQj8StUn50=
Subject key identifier: 62:67:27:79:47:52:F1:5A:9F:DD:08:9E:94:6B:82:E0:21:2A:6B:BE
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 019677FAA4C281DEA219841D4AEDFF52B88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number: 0D30
Signing time: Sun 27 Apr 2025 16:00:36 +0000
Manifest this update: Sun 27 Apr 2025 16:00:36 +0000
Manifest next update: Mon 28 Apr 2025 16:00:36 +0000
Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: 1/zdqt9az9ELSt0byr4TB3u8WHu519m2hgbqaHi4DeY=)
2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=)
3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:a4:c2:81:de:a2:19:84:1d:4a:ed:ff:52:b8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Apr 27 16:00:36 2025 GMT
Not After : Apr 28 16:00:36 2025 GMT
Subject: CN=626727794752f15a9fdd089e946b82e0212a6bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:e2:37:51:3c:d9:61:8c:cd:f9:28:69:65:
ca:14:82:e1:5a:ac:59:55:ef:64:7b:f1:ba:f5:9d:
be:4e:3a:2d:f7:31:38:69:d1:2c:4e:3c:d1:49:af:
b2:2b:60:94:57:95:4d:4d:f6:17:35:d8:ee:ad:7c:
4c:a0:1c:3c:07:9f:b7:bb:5f:0d:e7:6b:d2:5e:5f:
70:de:0f:db:b1:14:f5:54:79:e2:3e:9b:5a:c9:a0:
06:8d:d6:d3:66:3f:7a:6f:3d:e4:90:3f:8c:67:36:
9b:5a:b0:a8:7a:b4:8b:b4:72:13:e5:c2:5b:dd:92:
d8:9a:dd:54:44:c5:8d:7a:fb:48:46:9c:1e:ea:7c:
c1:4c:99:eb:78:57:82:6a:f7:3b:9f:72:6a:c1:6b:
68:95:e9:df:8a:eb:60:95:8a:59:74:83:9a:7b:5a:
b2:65:92:c9:77:1f:47:20:32:2a:df:4d:13:6c:db:
d5:09:cf:55:7c:19:b4:cf:8f:3b:2d:66:d4:05:08:
f9:b1:17:1e:fb:ea:55:67:38:47:04:5d:0e:e2:a9:
e0:57:52:d0:b8:23:12:02:dd:fa:6e:4a:d0:df:2f:
9f:6e:69:97:96:06:4f:87:27:35:b7:b6:56:9c:9d:
12:e7:a4:b4:81:cb:9f:a6:ea:f6:ad:b5:b2:75:72:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:67:27:79:47:52:F1:5A:9F:DD:08:9E:94:6B:82:E0:21:2A:6B:BE
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4a:6f:e9:fc:a1:6f:1d:aa:ad:36:46:70:53:fd:4b:15:5c:
18:85:71:a2:96:b2:fb:27:01:dc:81:80:f2:7b:cc:11:18:5a:
29:7d:3c:20:04:e1:3e:63:d6:ef:2e:d3:9b:01:64:bc:6c:42:
60:9a:66:d4:d0:e7:43:d2:08:6c:65:83:a2:cf:97:4d:fb:67:
85:cf:3c:b3:01:52:21:9a:2c:95:e9:6c:11:38:83:fc:a3:35:
2e:3c:fb:ed:c9:a7:e1:60:3f:5e:25:06:02:6c:d0:9c:bc:5c:
00:40:7a:02:5b:a3:34:5c:89:62:c8:12:f1:72:cd:d2:1c:45:
b2:f1:81:91:3a:65:46:7c:6f:58:b9:38:65:4d:11:e0:48:34:
a4:75:b0:a4:ef:19:8e:04:7d:16:37:3c:e3:2a:93:a0:5e:c1:
64:ef:6b:d3:c8:71:cb:49:82:44:de:fe:1a:36:bc:d9:8e:f7:
4e:10:42:dc:cf:f0:d6:18:05:08:b1:cc:13:df:9d:f5:8c:e9:
ca:d8:0f:30:20:f6:29:af:ec:8e:c3:1f:b7:ec:c6:cf:c2:ce:
c5:ff:58:e9:ab:85:12:b9:79:4f:62:4f:e9:b1:e2:5e:1d:d2:
04:9c:75:67:16:e7:c1:c6:61:29:ea:9f:f6:1b:53:8d:f9:6d:
e1:54:95:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:16:26 2025 by rpki-client