Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: I0PS3pVaWGROtwFmAcdJn9FD0cO4RZVhERhQC3FLaOY=
Subject key identifier: 8A:34:88:C0:0D:C9:12:65:FE:0A:51:B3:4C:46:32:FE:9E:F8:F2:F2
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 01967EA1D75F706FEE00733ED353063ED290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 23:00:57 +0000
Manifest this update: Mon 28 Apr 2025 23:00:57 +0000
Manifest next update: Tue 29 Apr 2025 23:00:57 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: FrfZlHSyNUARMpVPC236h2rTsacdkTNXsjw/hhsyWMc=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:d7:5f:70:6f:ee:00:73:3e:d3:53:06:3e:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Apr 28 23:00:57 2025 GMT
Not After : Apr 29 23:00:57 2025 GMT
Subject: CN=8a3488c00dc91265fe0a51b34c4632fe9ef8f2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:23:13:f5:07:b8:be:7d:a5:23:6e:cf:c6:
f1:04:33:e7:86:36:88:f9:fb:54:75:5b:8c:0a:64:
8e:4c:23:0d:e8:a1:70:3d:97:3e:ae:92:f2:fb:a2:
f1:2a:a9:d0:ce:75:bb:38:76:84:fd:6d:9b:7a:f1:
39:6d:4f:e8:ec:92:8a:a7:6f:45:18:57:29:68:fb:
ac:6d:4e:91:7a:84:3b:b3:8c:34:4f:cd:c3:44:d6:
28:55:52:b2:cb:6f:0d:e6:70:ec:0c:bf:93:27:03:
7e:24:8a:ff:42:e8:de:63:f5:4c:7d:90:45:3d:d4:
d3:52:02:f6:81:0b:08:c0:d5:d0:06:07:1b:b6:61:
a4:9d:7f:1b:99:2d:3f:c3:eb:b3:92:ca:8e:3c:d9:
c7:05:eb:95:5c:2e:e1:51:20:32:d7:75:a2:57:86:
15:5a:fd:4b:11:32:cd:16:de:ed:65:51:2d:09:04:
8d:d3:17:75:51:ee:d5:c1:26:4e:3a:e9:50:28:69:
78:57:ac:ea:b2:13:62:78:79:a2:f2:91:96:22:d2:
ea:9b:0f:be:90:b0:85:ab:19:30:d4:dd:0e:4c:96:
34:94:92:b5:06:70:86:c2:1c:88:92:7c:bf:3b:63:
55:6f:69:97:7c:71:7e:d5:d7:61:f9:12:34:31:7d:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:34:88:C0:0D:C9:12:65:FE:0A:51:B3:4C:46:32:FE:9E:F8:F2:F2
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:10:a5:93:74:58:4a:b4:b6:52:65:91:38:20:fe:c7:17:76:
7e:0d:8f:2d:9b:e5:0a:f3:68:cf:d1:55:85:25:8d:a0:34:54:
5f:17:3b:a1:64:81:8b:81:2e:98:86:b1:0b:92:b5:36:0b:d3:
94:df:9b:d4:00:44:4b:7e:4d:11:b1:04:16:69:c8:a7:5b:f8:
2b:93:37:d2:87:4d:ad:30:4e:eb:ba:a1:6d:af:60:aa:3e:cd:
6b:e0:77:91:b9:d0:41:e6:97:35:d8:32:cf:45:cf:48:9c:1f:
6c:92:50:ea:01:70:4b:7d:ea:b5:64:51:a8:cb:be:85:75:43:
f7:c9:15:fd:e9:03:ab:fe:62:b1:47:3f:33:b4:2a:fa:73:9b:
24:e2:17:5a:10:84:8d:bd:eb:cc:cf:0a:f4:6d:22:f4:c0:02:
31:94:db:91:19:09:7c:fd:01:f6:2e:76:dd:ea:2c:09:61:7c:
e8:60:39:70:35:27:06:06:db:7b:55:3c:7b:f6:d7:a2:87:bc:
1a:ff:0d:9d:fd:fc:06:fd:a9:c8:d7:ee:50:10:8c:73:23:a8:
7c:a4:1c:d8:4c:00:10:25:ed:77:7b:d8:14:b6:a5:3a:3b:5d:
8b:af:50:57:e9:cf:8f:e2:10:c0:38:45:c8:f9:64:87:90:a7:
d4:da:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:16:27 2025 by rpki-client