Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier: Ly/4oXqyLDKh4PgQ/Y7Cz2zlqy/HVCBVe/Vwh0g6bjU=
Subject key identifier: 68:BF:4E:AD:69:63:82:FF:2F:63:FF:73:FF:1E:3F:CD:A4:32:02:CD
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 019676B0D4580D21FD7E0D67084FA46E7E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number: 0EE8
Signing time: Sun 27 Apr 2025 10:00:22 +0000
Manifest this update: Sun 27 Apr 2025 10:00:22 +0000
Manifest next update: Mon 28 Apr 2025 10:00:22 +0000
Files and hashes: 1: 4fpK3rH7dDsLZcwC8fv__9MCBNk.roa (hash: H+mNwrXZUXB3OGGb/VrqoSQBBpWlzYIXILfgLQd6xuU=)
2: 4niQy2euydDFq7GTJuaxJySkYgE.roa (hash: lEIj5wjui/e5DTBCiecGhk5U5JYfLtQIN+3o7VCLqqU=)
3: 5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa (hash: dTmUbt8r9KTK4oCfqPnmc0NkXc8ljy+XbX2k8rf1LxQ=)
4: DWF9Jo3FImxKenqMCCuMh99Ds_I.roa (hash: VPrgFeIcUkZV1CVnwsWbonO9j9PHcQRDHPIETmI4o3E=)
5: UNKbAcEAJHWJC-HG72D-vYqbVfQ.roa (hash: m35AjrcjrDzhORVJU0fjE54zFfVUjrq+cuZi9udA0+8=)
6: cLFAPtOqlcUfpbbbNNENVqdfu8I.roa (hash: fE/OxbEqrhzEaEBEiWo6VY8shfzEaI5zfx5000I8b5Q=)
7: hgq-3QFFzN187B-65tYpaJQwwz8.roa (hash: l85+PXj1Myvhf7HIXT0WO1F3ljNUQ844ImZJ7Pq6XL8=)
8: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: JLG015o1KFZ5b1E6NS/QMu2hIZKfCiEpU/q+n19P0Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:d4:58:0d:21:fd:7e:0d:67:08:4f:a4:6e:7e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Apr 27 10:00:22 2025 GMT
Not After : Apr 28 10:00:22 2025 GMT
Subject: CN=68bf4ead696382ff2f63ff73ff1e3fcda43202cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:de:49:87:ba:22:17:f2:91:68:13:0f:8c:
35:39:3a:df:20:3d:f7:0d:95:0d:f4:ea:dc:16:77:
95:7d:30:7a:ce:2d:94:a0:af:90:83:bc:88:ee:ff:
e4:64:e4:57:9b:e1:c1:eb:dd:26:c5:e2:e6:a1:f3:
f2:13:e9:b9:46:de:6c:34:d0:6b:a4:6e:54:05:c9:
9a:29:b3:a5:b3:46:be:fa:38:07:a7:93:83:44:94:
f2:7c:92:cf:7d:d8:65:5c:e2:ac:0b:96:de:6b:2e:
0a:44:cc:17:9c:e2:ed:9a:6d:2b:df:e8:29:76:27:
1b:af:e8:ea:f0:3d:79:30:d6:56:d1:2d:59:16:39:
2f:2f:49:b0:b5:7f:e5:94:70:bd:97:15:c1:00:51:
35:25:e1:2a:56:85:17:24:d7:5b:b4:87:a1:59:97:
db:26:02:4e:4b:7e:69:d1:1f:03:69:aa:f5:88:fe:
59:08:eb:d9:e8:c7:92:28:20:c5:6d:48:0b:17:8c:
ef:12:a8:b0:0b:61:fa:d3:86:03:85:1f:4b:00:9f:
46:90:1a:51:9d:78:2b:39:1c:47:20:01:4b:b1:72:
4a:c5:5b:47:42:47:7d:62:3d:46:61:78:a4:85:2e:
49:b4:9b:67:c7:c0:4e:2e:50:ca:d0:5a:c3:5f:be:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BF:4E:AD:69:63:82:FF:2F:63:FF:73:FF:1E:3F:CD:A4:32:02:CD
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:32:e3:ed:ff:3d:31:44:b0:18:d9:64:16:69:ac:bc:5b:18:
c6:dd:ee:93:3a:dc:cc:73:22:50:a3:78:ec:73:16:aa:4d:96:
48:62:9b:d5:67:98:dd:3c:34:c3:ea:18:b7:45:7e:40:eb:59:
35:10:82:64:8e:7e:da:e3:ae:ff:42:1b:d1:ea:6b:0a:4b:61:
03:d5:ba:f6:11:71:16:5b:95:37:e0:bb:18:0a:d8:79:74:60:
6d:bb:e3:b6:54:52:05:06:d0:2b:8a:a7:3f:78:16:28:87:53:
ab:56:b2:da:2a:03:ac:18:2d:bb:74:6f:09:bd:7b:d2:2f:48:
1a:aa:69:52:d7:73:94:63:1a:fd:56:8f:41:a1:e1:95:b8:38:
99:7a:ec:56:73:43:f2:9b:a8:b5:ee:7c:aa:06:b8:0a:a5:f5:
6e:7c:f2:35:80:1e:5f:db:ca:41:12:9b:37:25:c1:8b:23:5d:
34:ed:ee:40:0c:ed:4a:a4:93:78:74:3e:e8:4b:09:16:27:c2:
25:c9:f8:34:b9:f4:e4:2a:e3:d5:6d:b6:b8:a0:2d:c6:40:b0:
c5:53:85:c4:80:c4:ed:4a:2c:bc:62:31:44:36:f2:cd:3b:4d:
90:2c:af:9f:df:8d:fe:70:40:5d:ed:74:8d:bd:f7:ed:35:05:
cd:11:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:13 2025 by rpki-client