Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: Axjq3TCVN0Vy0cHGgdynKNUXPwsy+zcKQP+qYZbS/z0=
Subject key identifier: AA:84:01:A4:E2:F3:78:63:DC:6B:1E:89:03:37:F6:25:87:8D:6B:C8
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 01969672EB4449EFB6AE598C76DF56FEC39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 0110
Signing time: Sat 03 May 2025 14:00:35 +0000
Manifest this update: Sat 03 May 2025 14:00:35 +0000
Manifest next update: Sun 04 May 2025 14:00:35 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: ZA/1v1XRz3+S9lUva1HowDUkDMzf9M6HZwcHlggfISo=)
2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:72:eb:44:49:ef:b6:ae:59:8c:76:df:56:fe:c3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: May 3 14:00:35 2025 GMT
Not After : May 4 14:00:35 2025 GMT
Subject: CN=aa8401a4e2f37863dc6b1e890337f625878d6bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:d6:6f:d3:8e:97:d5:3c:e6:4b:d9:d0:f3:
e4:b2:e4:d3:6e:06:0b:79:4d:cb:89:6c:5b:9c:28:
56:0b:ed:d6:aa:74:19:cb:28:72:df:7f:ba:3c:3e:
49:39:0b:8e:ed:5c:bc:23:c5:b8:b3:19:5c:7c:f1:
51:18:91:12:5b:53:82:86:20:0f:bc:2d:6b:0d:2d:
cc:95:93:08:ff:d4:6b:a3:80:e0:47:15:95:f6:ec:
8a:56:84:d4:ac:d1:9d:ab:51:77:bb:b7:bc:01:dd:
88:d5:09:86:48:55:c7:dd:5b:3d:c0:5e:41:a0:90:
d5:d2:ee:7f:44:39:a3:b6:92:b2:ee:eb:8c:d8:db:
47:04:4d:57:40:f2:1d:66:a5:c8:9a:85:11:ab:57:
86:ae:8d:b0:75:0a:32:98:d3:18:95:a5:a7:42:20:
c0:21:43:21:ee:e6:13:10:3d:e6:bf:8b:d7:5d:40:
7a:62:45:85:88:05:08:2b:5c:35:76:c7:78:eb:55:
b4:df:64:da:0c:32:91:ba:78:4f:b4:99:c6:cd:5d:
7b:51:3c:35:d2:61:ba:91:0f:9d:b3:73:39:d2:c9:
c5:86:b3:03:7e:28:b9:58:88:8d:cb:db:28:36:49:
da:f7:77:13:42:3a:a2:08:b0:cd:13:62:ce:b0:90:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:01:A4:E2:F3:78:63:DC:6B:1E:89:03:37:F6:25:87:8D:6B:C8
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d6:11:07:f6:20:f8:08:a6:6f:e9:33:96:bb:ae:1a:8b:5b:
a8:c8:1b:2d:d1:0b:0e:1c:43:c9:6e:60:58:da:79:f0:df:e9:
24:47:fd:95:05:38:e0:6d:82:5c:99:98:1a:6a:bc:94:34:46:
6c:87:3e:20:1a:6f:e4:38:64:d8:fd:df:92:97:5e:9d:12:3f:
21:b8:ce:73:4d:7e:ab:7f:d8:e2:73:51:fb:17:14:46:b9:78:
ee:da:93:de:a9:c1:10:c6:50:17:b7:94:01:74:e9:f0:68:10:
56:7a:76:bd:12:2b:61:57:98:e4:9b:cd:26:1f:2c:fb:ac:9c:
d7:48:1e:ce:5f:53:db:a8:1e:69:0c:52:63:81:f0:93:37:67:
35:93:19:97:41:4b:32:bb:cd:e2:8d:3a:2a:07:f3:f9:65:ed:
cd:82:f3:c7:47:93:99:33:02:e6:5c:d7:74:f1:a9:73:b3:ab:
8c:f2:a7:0c:a8:bd:19:9d:45:49:b9:e4:fc:e9:ce:f4:f4:23:
d2:d3:59:ef:27:12:6a:1a:45:1e:10:7b:3c:22:99:5f:68:8b:
07:93:68:18:f0:1e:a3:fb:ac:3a:d7:d1:54:a1:79:d3:2c:a1:
5b:58:3a:4c:46:ee:9c:21:75:6a:73:18:6b:b2:65:80:e5:be:
b1:da:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:40:47 2025 by rpki-client