Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
File: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft (raw, json)
Hash identifier: t9N/VP2k6vgDTMaMYTeil8DN8UO3A6yojMZBBgc1i64=
Subject key identifier: E9:1E:56:5D:54:1B:B5:1C:4D:2E:E4:A8:C0:71:7B:DE:52:BE:4E:EF
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 0196914C6ABC0A07DF5AE31EE644C132BAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
Manifest number: 0938
Signing time: Fri 02 May 2025 14:00:26 +0000
Manifest this update: Fri 02 May 2025 14:00:26 +0000
Manifest next update: Sat 03 May 2025 14:00:26 +0000
Files and hashes: 1: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl (hash: xUh0DysnlWhDFrY+VSH9GqeLoi1m6jVjiMLmhJjrpyQ=)
2: cK4llrkBdLlV4HeILjRyQ98esEM.roa (hash: MuU2BWlfRFj75k9zGngWfQu7w/ZtaYOQ1aHN3Tj8NDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:6a:bc:0a:07:df:5a:e3:1e:e6:44:c1:32:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: May 2 14:00:26 2025 GMT
Not After : May 3 14:00:26 2025 GMT
Subject: CN=e91e565d541bb51c4d2ee4a8c0717bde52be4eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:89:93:9a:af:87:43:42:55:8d:d9:06:f4:
11:54:ba:a7:77:5f:11:8d:91:89:42:92:86:bf:a7:
dd:af:b9:76:45:d7:08:13:43:e8:6c:84:dd:d9:67:
09:60:07:8a:90:63:97:01:66:cd:dc:33:10:f5:7a:
89:6e:df:e6:8b:4e:16:4f:60:4f:0d:70:4c:0c:c4:
81:40:3a:12:96:b8:d9:16:b0:32:f6:6f:25:f6:7d:
14:2f:f2:d0:e8:a9:1b:69:c0:9b:b0:df:06:4e:dc:
70:d0:00:d2:3a:4c:92:3b:83:e7:a4:ba:77:50:b3:
2a:3e:fb:3d:ea:28:f6:cc:59:64:74:d1:4e:8f:d4:
66:c4:33:19:38:79:15:36:94:97:61:b3:ad:41:14:
1d:74:56:b9:f9:52:9e:ab:11:2d:ce:0e:a5:67:77:
ed:7c:8d:3b:77:ea:ae:ed:39:bd:2e:80:61:ca:d7:
25:ce:b1:e7:e5:57:d9:5c:b7:b9:f0:74:f6:c5:90:
03:c5:2b:b1:94:6c:e8:e4:33:c1:30:eb:91:f5:7a:
59:77:93:bb:07:42:99:b2:eb:a6:b5:aa:19:58:e8:
9e:0e:63:b7:bc:b2:1e:a5:bd:aa:c3:1f:a3:0f:08:
28:bc:61:2b:c9:b2:e9:9d:1c:39:a6:ee:ba:0d:1e:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1E:56:5D:54:1B:B5:1C:4D:2E:E4:A8:C0:71:7B:DE:52:BE:4E:EF
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:37:0d:58:d4:06:44:d1:c0:fe:f0:c8:cf:01:31:b8:21:16:
44:17:6b:80:f2:8a:3f:a1:96:0b:db:e7:c0:68:e0:01:50:e9:
77:43:9f:0a:07:19:d9:ca:11:36:6c:6d:b1:3f:ad:d4:f3:e1:
ed:ce:21:12:ed:f2:6a:f2:e2:c7:b5:85:52:bd:d9:aa:01:de:
23:ac:d5:26:a5:ca:1d:94:f8:35:78:b8:5e:af:bf:bf:17:46:
9c:40:3f:88:48:9c:8a:3d:00:7e:6e:ed:44:99:bd:a4:11:9e:
7a:ef:ad:35:fe:c6:97:88:fa:16:5a:9a:58:37:72:ef:8a:40:
bc:23:f6:5d:51:53:3c:59:26:e4:ae:64:03:63:a1:17:de:07:
49:ff:59:31:fa:43:a3:bf:e5:60:97:37:d2:d4:f6:d0:5f:55:
f5:dc:a5:a7:6a:22:e8:24:21:70:41:17:9f:16:c8:6a:6b:0a:
51:2c:7f:d2:e2:33:0c:c1:39:a3:97:7c:61:a3:2e:a7:72:b5:
6e:68:66:81:66:50:31:02:9a:90:e6:ff:04:ce:27:2d:04:f5:
5d:8d:da:ba:15:ba:a2:35:c9:1e:55:c6:f8:a6:e1:8d:20:98:
d2:af:25:52:43:38:40:db:d4:d4:73:1f:0d:f9:e3:81:60:5d:
8b:4a:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:43:53 2025 by rpki-client