Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: w6EXKVZKZ566E+pw6OHhAFjZM05oyam0GBbJbURBevk=
Subject key identifier: 91:DC:84:C3:36:7D:E2:6A:BA:62:15:56:A4:41:0B:AE:83:F1:6E:40
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 019681A2A9C64E6CC2960A94E5AB62EFC224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0C27
Signing time: Tue 29 Apr 2025 13:00:43 +0000
Manifest this update: Tue 29 Apr 2025 13:00:43 +0000
Manifest next update: Wed 30 Apr 2025 13:00:43 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: liVYavVXcPpe4f5qasiS00eSRif3AGOet1CEJT0KEUI=)
2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:a9:c6:4e:6c:c2:96:0a:94:e5:ab:62:ef:c2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Apr 29 13:00:43 2025 GMT
Not After : Apr 30 13:00:43 2025 GMT
Subject: CN=91dc84c3367de26aba621556a4410bae83f16e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:9b:42:97:9e:e8:aa:3c:b9:87:96:15:79:
d6:32:ff:fe:73:fd:90:11:c1:0a:ef:18:10:00:00:
f5:43:34:70:17:ae:2b:eb:51:2e:82:d3:c3:6a:ea:
16:eb:f0:6d:1d:24:d1:50:0b:8f:98:d7:5f:82:13:
08:51:fc:9b:84:bf:41:ec:56:e7:93:ed:97:30:ff:
66:c4:7b:0b:e1:6c:59:9d:67:bc:12:45:9b:40:82:
a9:a5:2c:4c:c9:3a:26:41:08:ab:9a:3a:c8:72:35:
02:a0:10:6f:14:69:e7:de:27:07:84:72:58:8e:b7:
15:c6:3a:7a:95:d3:9f:f5:f7:30:8d:59:40:d4:cc:
ed:17:f4:75:25:7f:60:d6:0f:18:18:31:25:2a:cd:
3d:26:2e:0d:65:45:4c:d1:0b:84:cc:9a:1b:8a:16:
fb:e2:4b:cc:07:3b:42:72:04:70:b6:f2:37:a9:56:
44:79:76:b3:69:b2:d1:cb:cd:61:5a:ce:c3:1c:30:
03:69:8c:a5:8a:d7:c4:3c:cd:a8:da:a8:9c:3d:62:
8d:55:ce:89:2f:94:a9:7a:05:ad:0b:bd:3c:6d:45:
41:3f:5f:27:65:1e:52:58:f2:01:2d:94:bf:f2:b8:
af:61:1f:5f:fd:03:37:5a:28:5c:87:dd:e0:80:28:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DC:84:C3:36:7D:E2:6A:BA:62:15:56:A4:41:0B:AE:83:F1:6E:40
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:04:a9:96:e3:50:fb:c0:dc:20:05:04:bb:59:9d:ae:5b:ac:
60:25:40:25:93:6a:d1:a1:3e:47:8e:a9:49:b0:5d:7d:be:37:
e6:39:f4:cb:47:08:90:55:9d:b8:05:c4:b6:62:3c:cc:28:cc:
33:40:d7:86:01:68:65:be:6c:47:dd:80:9e:71:37:15:22:3c:
c6:2e:47:82:d9:7f:51:42:b9:8f:30:18:ef:73:19:d8:24:b4:
a8:31:9a:59:35:ec:23:2b:87:ad:26:f0:a6:54:d5:98:32:4d:
de:84:74:44:6c:79:87:16:ef:44:11:4a:a4:ca:01:ad:7c:ff:
1e:d4:ac:63:4f:6a:cd:b3:8b:dd:0c:c6:b9:fe:1b:d0:f5:d9:
93:9f:42:a7:8a:b2:04:ee:29:51:3c:82:a1:46:0d:24:8e:03:
e1:a3:fe:1b:25:6d:0d:4a:39:00:cc:1e:bb:31:28:bf:60:38:
ad:10:94:1f:5d:2f:84:67:ad:89:88:e6:61:9c:6f:ac:2d:ed:
f7:01:fd:e4:53:e5:28:b6:31:14:20:9e:4a:40:39:c0:cd:46:
1d:a1:68:8c:28:38:69:d5:1e:bb:0f:ea:db:7c:0b:cc:54:63:
7e:f8:f1:df:09:7d:ad:3e:87:7e:4a:54:30:5f:5b:e2:ea:42:
16:6c:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:41:59 2025 by rpki-client