Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
File: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft (raw, json)
Hash identifier: 5ABQDkbaW6hXglA983BkxeOIVjIFnW5xhGEq2Gb+/ek=
Subject key identifier: 8E:6E:AF:41:C2:AF:D9:2E:61:C9:EA:2E:0F:A1:53:08:98:B0:CB:54
Authority key identifier: E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
Certificate issuer: /CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Certificate serial: 01967379582D4DCB648BF057570C85D4D4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
Manifest number: 103F
Signing time: Sat 26 Apr 2025 19:00:54 +0000
Manifest this update: Sat 26 Apr 2025 19:00:54 +0000
Manifest next update: Sun 27 Apr 2025 19:00:54 +0000
Files and hashes: 1: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl (hash: e9E8mAysM4O9rVTCCwTVj3NSibYQ4uOPGH9H6JQXzeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:58:2d:4d:cb:64:8b:f0:57:57:0c:85:d4:d4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Validity
Not Before: Apr 26 19:00:54 2025 GMT
Not After : Apr 27 19:00:54 2025 GMT
Subject: CN=8e6eaf41c2afd92e61c9ea2e0fa1530898b0cb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:6c:31:64:ce:d2:39:46:c0:45:f5:f5:17:
21:08:15:ac:cb:ec:0b:80:75:ab:54:d5:9f:8e:f2:
7a:12:c3:77:f0:92:ef:39:ed:c8:83:ff:58:2b:00:
9c:02:37:11:23:ac:1c:a0:c4:48:4c:25:aa:ec:9c:
8d:84:e9:50:09:03:af:73:14:e8:aa:8c:cf:86:c8:
1f:27:52:07:8a:65:e8:c8:72:e2:88:05:3a:bb:b2:
b9:46:66:0c:ec:48:66:a0:2a:e0:ee:31:41:b6:1d:
2c:e4:5e:ac:50:24:c5:62:59:14:35:d8:35:5f:7d:
7f:a2:07:84:54:8d:35:57:7c:1f:d9:6b:ee:b2:35:
4a:6b:e1:b9:e8:a3:12:b1:eb:ee:cc:e0:ec:8b:72:
14:29:80:63:8a:8c:54:6d:73:5b:3b:1c:16:20:99:
df:89:a4:d1:62:81:04:1f:c6:84:6d:1d:97:d4:9e:
1d:f2:88:80:5d:2f:f4:03:68:ee:bd:32:f4:4b:e0:
a9:ca:54:c4:91:a5:20:79:7b:5b:d3:3e:e1:4e:5e:
5a:f4:d2:c8:13:5c:78:0b:bc:51:1d:6c:02:cc:b9:
ff:b4:4f:b2:4a:e9:2c:eb:14:fe:07:8f:c4:dc:ec:
8d:6d:4d:ff:97:57:63:e8:0d:30:95:19:95:8b:44:
27:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:AF:41:C2:AF:D9:2E:61:C9:EA:2E:0F:A1:53:08:98:B0:CB:54
X509v3 Authority Key Identifier:
keyid:E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:90:24:c8:7f:a4:a6:b9:cd:2a:0f:cf:7a:56:0a:14:23:e1:
d1:8f:8d:ba:21:97:69:6c:ab:e8:b6:e5:d1:fb:b3:0a:79:26:
39:33:ed:ee:19:d9:53:5e:3b:0e:15:fd:19:34:af:d7:e0:43:
e9:34:84:d1:4b:58:8e:b3:e2:32:04:16:b1:ce:7f:89:b7:cf:
a7:d2:f0:8f:ce:b9:7b:06:34:34:fe:0b:e1:4d:c4:04:e8:26:
8a:03:c1:cb:cc:b0:f8:79:d1:03:ef:d2:bd:56:fe:93:8b:e7:
6b:09:54:2e:47:50:4d:cf:18:48:be:98:28:4b:b9:90:fb:49:
27:f1:02:99:33:01:73:07:72:8f:06:8e:c2:40:0c:4d:f0:a7:
1e:08:e1:08:8e:dd:37:a0:25:8c:8f:4f:47:f6:7e:a0:41:79:
57:b2:4f:bc:90:04:89:75:d3:30:b9:a9:06:e0:7a:66:84:11:
ed:a5:2a:50:2f:cc:de:dd:66:e4:72:8d:f5:de:ab:54:79:e6:
be:ce:e4:b2:cc:7b:8f:c8:5d:ec:1f:e5:bf:b1:3d:20:55:73:
03:6a:85:0f:26:fe:53:c0:29:30:80:dd:af:e1:8e:64:94:d7:
4c:14:49:be:08:4b:13:c4:c3:16:5c:9e:0e:13:28:b6:bf:33:
44:c8:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:44 2025 by rpki-client