Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
File: 4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft (raw, json)
Hash identifier: 5LtPdJxkxj/TEs5q6uoNS7YBStFuDbxegMISM0uw+pg=
Subject key identifier: 7C:E3:0E:B1:37:6F:18:38:D7:97:9C:B6:01:F8:54:E4:7E:B7:2F:C7
Authority key identifier: E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
Certificate issuer: /CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
Certificate serial: 0196760C7E715BF63A0B73FA0852AA14E789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
Manifest number: 12B4
Signing time: Sun 27 Apr 2025 07:00:52 +0000
Manifest this update: Sun 27 Apr 2025 07:00:52 +0000
Manifest next update: Mon 28 Apr 2025 07:00:52 +0000
Files and hashes: 1: 4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl (hash: tcNcmPF4aFO+RpffExuQbk77iEB9Y8j6wcqQKyUF42g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:7e:71:5b:f6:3a:0b:73:fa:08:52:aa:14:e7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
Validity
Not Before: Apr 27 07:00:52 2025 GMT
Not After : Apr 28 07:00:52 2025 GMT
Subject: CN=7ce30eb1376f1838d7979cb601f854e47eb72fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:f8:e8:f1:ec:12:ca:9a:27:15:be:0a:aa:
d4:97:7f:1e:7b:3e:d6:21:59:4e:57:39:4f:b4:fe:
4e:7b:9b:26:38:0b:0c:8b:d9:ef:c4:07:90:a8:1c:
cc:c1:ee:46:20:0a:df:74:d4:df:ae:00:44:dd:e9:
f2:d8:0c:bb:7b:56:db:cf:19:69:d9:e3:08:c4:e8:
ac:9d:0a:97:03:82:6b:54:33:96:bb:18:f5:1e:bb:
5d:2b:3d:71:3c:a8:8f:d5:03:36:e3:b9:48:1a:a3:
28:c4:95:da:dc:9d:14:f6:a9:9b:22:13:e1:07:25:
38:1e:e6:eb:a1:ff:fa:70:2f:ae:85:96:66:a2:b0:
60:5c:d4:93:2e:67:a7:ae:95:f2:34:28:04:62:e6:
79:50:d1:36:ce:53:d3:15:69:01:e5:35:ae:c8:41:
5a:cd:4b:de:71:a5:06:c2:4d:f5:79:b6:f1:47:1b:
6c:64:cb:36:82:2c:88:f6:a0:49:b1:ad:71:8c:ef:
18:39:15:d7:54:2f:26:e3:16:ec:cc:cb:99:9b:db:
21:93:56:d1:13:8c:d0:ee:97:f0:e2:eb:9d:1b:bb:
68:06:59:c1:52:88:b5:9b:3f:57:5b:af:81:c9:18:
b4:57:43:c4:b0:21:74:8a:3b:8f:ec:0d:81:7f:9b:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E3:0E:B1:37:6F:18:38:D7:97:9C:B6:01:F8:54:E4:7E:B7:2F:C7
X509v3 Authority Key Identifier:
keyid:E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7e:d8:14:de:3f:eb:1f:74:40:85:24:27:c1:bd:b8:3b:59:
90:b2:e7:ce:21:fa:22:67:7f:3d:44:21:5b:30:76:b0:38:26:
c8:6c:2b:cb:08:54:9a:9a:1e:10:a3:36:cc:d7:7a:f2:c0:5b:
d7:a6:53:ac:ef:c8:50:36:2a:58:c1:17:51:e8:e6:4b:38:8e:
98:ca:08:f9:32:76:88:d2:84:c3:8a:5f:96:f3:dd:ae:96:7e:
85:2d:f5:22:9a:d4:f6:f9:d2:3d:48:d8:3a:b3:58:05:b1:73:
e3:0d:f8:ab:e1:b6:4d:00:9c:92:de:f6:f5:1c:46:5a:b3:95:
16:45:e7:f6:13:9f:8e:0a:0a:6f:ef:4c:a7:06:9e:8b:6a:b3:
5c:fd:10:eb:71:80:ec:14:18:9d:25:0c:9b:e2:4f:90:97:3a:
ca:9f:1c:f4:eb:bd:6f:60:61:7c:c2:4f:03:e8:5b:94:1d:ac:
09:83:d5:07:5e:21:92:05:2d:2c:dd:0b:29:2f:52:71:02:24:
51:a8:1f:93:3e:cd:00:ff:bb:82:9f:ec:08:8f:ef:8d:24:85:
6f:d0:95:00:82:9c:00:df:c4:b5:bf:89:ee:24:5a:5e:66:a7:
0a:0c:88:e8:5e:86:49:c2:19:5b:16:18:51:e0:1c:df:40:ec:
3c:ee:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:46 2025 by rpki-client