Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: e/LsUYz0ndKpU3+Tnw29YDygnv5jIepNtk1udG/rPtg=
Subject key identifier: 11:17:95:00:48:BB:C3:70:32:89:CC:33:23:77:37:87:3E:B6:49:96
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 0196759EB02D29452FD0B00A363AB57FE7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 04C4
Signing time: Sun 27 Apr 2025 05:00:56 +0000
Manifest this update: Sun 27 Apr 2025 05:00:56 +0000
Manifest next update: Mon 28 Apr 2025 05:00:56 +0000
Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: wKPv3OiBhekfpfnELbWv4ZQzgHXBA07saa58ZhveKEs=)
2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:b0:2d:29:45:2f:d0:b0:0a:36:3a:b5:7f:e7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Apr 27 05:00:56 2025 GMT
Not After : Apr 28 05:00:56 2025 GMT
Subject: CN=1117950048bbc3703289cc33237737873eb64996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:a6:d7:1e:63:47:8c:91:15:e4:cf:0a:93:
26:46:d1:18:e6:49:91:57:b9:31:bc:0f:10:2f:56:
74:da:b1:d1:2b:14:3a:66:fd:0b:e5:ea:f6:75:fd:
02:7b:75:9c:3f:4e:3a:c9:f6:eb:60:b5:ae:36:58:
f8:79:a3:95:ec:da:c1:58:d8:ed:8a:e4:e6:dd:4d:
e5:6a:0e:9d:61:71:7b:6f:b4:47:0a:a2:8c:6d:ac:
6e:f3:45:a6:42:c7:3a:e8:38:98:c6:43:2c:d7:7d:
81:8a:6c:e0:6f:3b:5f:be:14:e7:60:fa:fd:7e:07:
36:7a:24:ab:86:bb:2c:3b:32:4b:27:d7:61:bb:4d:
a4:d8:77:d3:25:da:90:f3:1e:22:97:16:da:47:56:
5a:01:32:09:ea:7f:bd:fb:2d:2d:35:b9:0c:2f:f8:
b2:41:06:d2:22:57:3c:38:df:b8:e2:c3:0b:ad:a6:
98:ed:29:5b:6c:7d:26:31:b5:2e:77:78:86:c6:81:
f5:f5:f4:cf:2d:05:6b:75:7c:bf:eb:58:7d:84:15:
d8:d8:59:bc:67:17:34:c6:82:e0:9b:c3:4c:06:81:
3d:82:61:a8:20:cb:44:c4:db:a7:e4:79:09:1b:c6:
b7:6c:ee:50:2f:72:9c:1b:52:55:94:28:4e:88:ff:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:17:95:00:48:BB:C3:70:32:89:CC:33:23:77:37:87:3E:B6:49:96
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f5:ca:5a:bb:aa:d0:d3:0a:8a:27:cd:ec:ce:e5:15:e9:97:
43:fc:d0:0e:31:ea:c2:27:5f:e0:10:1f:fd:61:bb:be:44:96:
74:09:e4:81:c9:52:10:f0:60:ab:d0:eb:39:57:6d:22:47:57:
f9:f0:2b:5d:a0:2b:9c:db:95:f3:08:fa:43:20:7e:c5:9c:a2:
65:28:64:83:99:8c:88:01:fc:2d:e1:27:03:cc:a7:ae:03:e2:
2a:36:38:74:0b:91:ec:a7:32:da:6c:a7:f1:d1:a5:31:64:d4:
03:5b:8d:25:61:5e:f3:3f:57:24:3a:66:06:03:05:ef:02:01:
16:8f:56:10:6b:19:d1:b9:d3:c9:19:85:14:66:43:58:c4:82:
df:50:d4:24:34:05:9c:c6:ce:a0:e2:77:0b:ed:dd:f2:99:b7:
24:fa:96:4c:dd:8f:43:cf:c9:9c:c0:b5:99:35:75:fb:6d:25:
85:95:bc:55:da:f1:84:71:70:de:6d:60:b7:76:5b:cb:e9:1d:
28:ef:5b:39:01:50:b9:d8:42:59:17:ee:28:bc:7c:4d:02:3d:
38:01:6b:e4:ec:77:6c:b7:b4:99:3a:5e:cb:f6:ed:82:18:38:
46:63:0d:2b:15:6b:c4:81:0b:b8:69:b8:d5:3a:d6:76:b9:e6:
ce:80:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:00:05 2025 by rpki-client