Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: Z54ZrMdV6T9th2KoXrj6wegaHjnGX+eW/prksz0p0ag=
Subject key identifier: 38:E7:D9:61:6C:53:68:5E:17:62:04:52:D0:FD:D4:DB:43:C8:A9:15
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 019676B0C300F0A15EDFD6F949EF4CC32DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 14A5
Signing time: Sun 27 Apr 2025 10:00:17 +0000
Manifest this update: Sun 27 Apr 2025 10:00:17 +0000
Manifest next update: Mon 28 Apr 2025 10:00:17 +0000
Files and hashes: 1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=)
2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: HomFWYdZlHB0vsxRtJ+Be1mIpD4Qw8BtVxvDh5bGo64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:c3:00:f0:a1:5e:df:d6:f9:49:ef:4c:c3:2d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Apr 27 10:00:17 2025 GMT
Not After : Apr 28 10:00:17 2025 GMT
Subject: CN=38e7d9616c53685e17620452d0fdd4db43c8a915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:11:1d:91:8b:f3:25:fc:2f:bc:c1:c7:62:
57:86:3f:ce:8f:34:6d:3b:e4:00:55:33:fc:8b:bc:
a4:64:5c:0b:e1:1a:42:6b:02:7a:05:34:2f:db:dd:
83:61:30:66:d0:9e:85:53:0f:70:2c:4a:cc:22:dd:
ce:5e:a7:ea:3e:31:f3:2d:e1:0f:97:6a:24:e8:32:
07:40:17:5a:32:bb:03:eb:f9:26:c5:9d:aa:44:ae:
06:8f:05:71:15:1f:ae:c6:fe:32:f8:47:a9:c0:e3:
c6:90:04:36:6e:94:86:de:76:37:da:2d:e9:26:49:
f3:ec:05:f4:ce:2b:47:a5:0e:f0:fe:f1:1b:df:83:
4d:32:da:0b:f4:6b:5d:42:01:76:e4:6c:fb:32:e5:
d8:f9:ef:8f:ce:83:cf:b2:17:99:32:0b:d3:a5:80:
aa:28:41:68:85:db:d4:32:40:12:e8:48:22:e3:1b:
4c:4a:dd:93:05:28:3a:80:f5:f5:4a:bf:08:2b:e5:
f9:23:1c:f0:59:c9:f7:8d:7b:5b:be:f5:33:14:a9:
43:a7:23:53:56:d8:df:42:8c:e9:07:46:85:9e:59:
46:87:12:d5:27:07:1b:16:af:70:4c:6c:cd:1d:65:
fb:98:4f:04:9c:ee:3e:ef:23:28:cb:ce:18:72:f7:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E7:D9:61:6C:53:68:5E:17:62:04:52:D0:FD:D4:DB:43:C8:A9:15
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:03:4e:a8:eb:5a:7f:bd:b1:da:20:54:8d:12:2b:1b:c4:3f:
ef:de:89:06:33:91:21:a5:ad:bb:5b:cc:e6:33:2e:13:7a:62:
5c:69:8c:db:3b:df:e0:f6:1a:c0:89:e3:27:e5:bb:c8:e3:73:
a5:4c:c3:23:7b:11:d7:d8:0f:66:20:43:17:75:60:c4:c7:76:
bf:32:ad:d4:45:ec:40:3b:a3:39:39:c8:29:f1:44:55:e8:7f:
76:38:c2:f3:0f:de:ce:92:72:1d:25:c4:7d:ea:fa:43:c2:81:
48:12:cd:b6:28:90:34:a9:de:78:a5:ed:65:2c:a4:7a:4b:67:
6d:1b:f0:e6:c7:a9:84:75:91:71:ac:ef:03:83:e4:e1:4e:b2:
f6:69:9f:df:85:61:ba:a8:f5:79:e5:cf:81:f5:27:c3:78:f9:
d7:17:b2:e7:89:f1:de:d6:3e:0c:94:ef:c9:da:e6:8b:93:12:
fe:2b:be:1c:ac:b7:99:f8:a0:22:6e:1c:ec:10:c3:be:f8:6a:
95:34:ec:96:cc:3c:52:b4:6b:6f:06:73:79:54:78:e7:3c:46:
88:f2:6f:7f:df:9e:ae:5d:9d:b4:0c:2e:84:24:00:a6:b6:7a:
5e:d4:09:5e:af:db:ca:94:d6:5c:be:7b:88:b9:34:11:ed:30:
a9:c5:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:11 2025 by rpki-client