Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: 9U/2/JHalNvqU6y8UgmxtQ6lffCbnRQjE+m3M+W2Wcs=
Subject key identifier: DF:C5:F3:94:FF:6E:59:3C:82:CA:59:35:EB:CB:5F:19:52:00:6C:7D
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 01968021EAE3117E68E60488EE53B86F3220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 06:00:28 +0000
Manifest this update: Tue 29 Apr 2025 06:00:28 +0000
Manifest next update: Wed 30 Apr 2025 06:00:28 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: uE7XlG31tuMEv2YnQKW6EezHu35lRd0huWBCO6vYCJs=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:ea:e3:11:7e:68:e6:04:88:ee:53:b8:6f:32:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Apr 29 06:00:28 2025 GMT
Not After : Apr 30 06:00:28 2025 GMT
Subject: CN=dfc5f394ff6e593c82ca5935ebcb5f1952006c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:01:41:76:56:26:39:c9:1a:b4:52:54:bc:
74:e1:f2:dd:4f:ad:b2:8f:e8:8f:28:b8:1a:ba:f3:
c7:1c:81:66:f5:4d:7a:57:88:2b:43:48:ec:0a:60:
a1:75:b9:50:06:ee:8b:1e:bc:a6:86:e1:ed:1d:1a:
a3:90:a6:53:f6:a9:bc:86:a4:f4:a7:f7:3e:e9:d1:
d8:f0:1a:9a:9b:ca:f5:ae:44:b8:db:65:07:1f:ca:
28:37:0d:c1:da:6e:98:7b:48:7e:bf:8f:85:d2:14:
ce:17:4c:98:16:94:6c:ce:21:95:a4:36:83:6d:14:
31:c0:83:55:65:2d:ab:25:e6:3a:38:a5:36:a5:d0:
9e:3f:f8:1c:4b:f0:3b:5c:58:d3:5e:b8:42:e0:30:
04:c1:b4:d7:0a:1b:40:d7:d4:dc:f4:26:89:87:2f:
66:7d:e1:9f:6f:c5:8a:cb:a1:40:ab:0d:fa:88:17:
e2:97:77:ea:55:d4:29:f5:c1:92:b4:dc:61:19:a8:
27:e9:ce:30:7f:63:54:f6:1a:7a:b2:c7:b5:e3:25:
77:97:2b:58:27:82:7f:04:c3:9d:d3:66:79:07:95:
53:da:07:06:87:b0:bd:bc:9b:e6:49:de:c4:4e:75:
0f:71:8a:bd:a8:4b:2e:36:fd:b3:85:9a:f3:63:0e:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C5:F3:94:FF:6E:59:3C:82:CA:59:35:EB:CB:5F:19:52:00:6C:7D
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:75:0a:12:fe:12:a7:9b:ef:58:0a:72:55:22:fb:34:d9:6f:
2a:cc:d2:6a:6d:76:8b:7e:4b:16:7f:b0:d4:1c:cf:7e:99:7a:
46:68:54:20:73:91:18:0c:6d:ef:71:1a:e4:4e:32:62:b9:3a:
23:58:41:9f:4b:a3:fb:81:85:c4:39:be:b9:ca:10:13:10:3f:
e5:bf:d5:ae:e6:0a:8f:42:e3:6c:84:b0:75:a5:4b:78:4d:68:
49:3d:20:4f:16:fe:be:a4:f0:30:2e:52:57:ba:7c:b3:98:13:
cc:f6:53:73:ff:55:e4:f9:a0:9e:36:ab:e3:51:2b:fa:40:21:
30:8e:20:e3:b8:b3:86:74:1f:86:95:5f:17:99:49:dc:35:08:
15:f7:2b:7c:a4:54:c9:33:a1:45:c3:a8:3e:0a:c5:86:71:c6:
e6:68:33:2a:fd:d9:3f:c0:76:c3:e6:5f:71:85:94:3a:51:d4:
dd:e3:c3:45:bb:18:d3:da:ec:4b:55:1c:ea:41:35:9f:6f:1c:
6f:bc:bb:69:a9:3b:42:6c:ae:f1:48:86:69:39:e3:78:d2:23:
ae:b8:5e:b2:a5:ab:60:c0:c9:14:e4:98:ec:a2:19:c4:c9:b6:
ff:db:bf:1b:de:3e:d9:7e:dd:81:83:53:d5:4d:23:bf:22:ac:
52:1e:9e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:26:48 2025 by rpki-client