Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: y+AM8t0/qC7gLmpcXLEwIRmLeqJ1He6G1fuefTJm5Q4=
Subject key identifier: 62:9A:65:AC:3D:1B:A6:3D:08:CA:1B:04:8A:E9:4E:5C:0E:25:AA:34
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 0196A5AF68EAEAD26A2C597B5E0C0438CC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 08E7
Signing time: Tue 06 May 2025 13:00:58 +0000
Manifest this update: Tue 06 May 2025 13:00:58 +0000
Manifest next update: Wed 07 May 2025 13:00:58 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: wTqzSo2r6EQa3FYL1PNiPTeKhj8diM1soGTx+I2qYp0=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:af:68:ea:ea:d2:6a:2c:59:7b:5e:0c:04:38:cc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: May 6 13:00:58 2025 GMT
Not After : May 7 13:00:58 2025 GMT
Subject: CN=629a65ac3d1ba63d08ca1b048ae94e5c0e25aa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:13:ab:ea:be:e0:db:55:31:ed:7b:9b:35:
68:91:0f:b8:ac:ac:a8:f2:cc:d1:1f:8c:c6:a6:03:
2e:f0:b3:8b:4b:9a:be:93:74:6b:e3:71:10:09:4e:
61:dc:83:2f:49:bd:f0:1c:07:b3:a3:66:3b:02:2b:
c1:72:81:34:24:70:a1:94:94:5e:df:54:bb:d6:33:
04:d1:5a:d9:71:f1:f2:85:b1:25:f2:35:d3:b5:c5:
d8:3f:25:61:ca:77:87:92:fe:51:73:7b:81:54:be:
12:60:01:1d:91:e6:ff:69:f4:15:4b:87:4c:ae:b2:
71:30:c9:50:6a:2a:6a:14:bb:fa:b2:96:b3:eb:5b:
4b:b5:7c:27:b8:fc:87:67:18:26:3b:84:bd:9f:87:
12:e8:69:7c:b6:82:9f:b9:17:51:8e:4b:d7:77:41:
a3:85:00:12:58:a8:cd:a7:2f:05:fb:b5:2b:70:11:
5d:9f:f6:05:79:4e:fb:b5:ea:e2:81:90:b3:01:12:
64:f3:59:1e:65:e8:3c:12:e1:76:1a:2a:b9:ce:b9:
69:66:d4:3f:77:59:1d:5b:5f:77:6a:70:b6:10:ec:
ea:c1:95:87:d6:f0:ff:21:a9:07:45:4e:e5:47:5f:
13:60:4c:0c:20:08:96:0e:23:a6:bd:99:80:92:fe:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:65:AC:3D:1B:A6:3D:08:CA:1B:04:8A:E9:4E:5C:0E:25:AA:34
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f1:dc:b1:02:85:8e:56:c5:b3:c1:5c:1e:66:60:49:1f:e1:
38:4b:54:ac:41:95:e9:6f:2c:8a:43:40:1e:8d:f0:71:b0:70:
ff:95:bd:f8:27:d0:79:b3:44:66:92:b4:9c:67:94:f1:d9:c1:
d1:d3:13:72:d9:0a:c7:e5:4b:00:2a:e8:8a:4d:13:d2:f8:4e:
8a:bf:3a:83:9e:09:a5:5b:5e:65:79:cd:d1:18:31:d7:c8:d9:
1b:aa:61:49:97:c4:7b:f3:46:e4:63:01:a2:7c:aa:30:78:29:
f3:f3:52:1a:85:d0:22:b6:17:43:9f:3b:df:27:7d:95:05:a4:
8d:e2:32:23:6c:4d:3a:93:60:25:75:a0:ba:77:fc:d4:45:cb:
6a:e1:b2:e5:a4:35:cc:28:ee:c9:1e:a2:bc:d1:42:24:23:98:
b2:07:eb:7c:2b:df:b6:b8:fd:be:d9:54:38:93:3a:bf:67:5c:
fd:ee:e2:a1:2a:ea:e5:ee:87:d8:5b:58:66:e8:49:6a:1f:8d:
9e:62:83:f6:c2:2f:8b:3c:bf:ca:40:91:cd:ba:e1:86:67:da:
12:05:73:54:db:d9:d9:71:d5:ee:e4:17:7b:88:f0:8e:02:35:
35:64:d1:e0:00:73:18:d4:03:6c:50:d7:72:93:c6:02:29:27:
a6:ca:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:52:39 2025 by rpki-client