Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: +FMNSlkvGsXzRaDq9BZabZHlioMLa1ch5Bnxt1dSDIE=
Subject key identifier: 2E:C0:03:72:FD:25:43:F5:62:C0:EA:6C:42:AE:57:87:D6:4A:9D:8A
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 019679E9A9994FEEE6A4686F534C28990854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 14E4
Signing time: Mon 28 Apr 2025 01:01:18 +0000
Manifest this update: Mon 28 Apr 2025 01:01:18 +0000
Manifest next update: Tue 29 Apr 2025 01:01:18 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: zOXqpY4Qoy+QJe3pjzpgZDp4vx2iae9TqT50Y9/MMXs=)
2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:a9:99:4f:ee:e6:a4:68:6f:53:4c:28:99:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Apr 28 01:01:18 2025 GMT
Not After : Apr 29 01:01:18 2025 GMT
Subject: CN=2ec00372fd2543f562c0ea6c42ae5787d64a9d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:02:36:ba:e3:2e:a2:fb:57:df:34:d7:82:
c7:5f:0f:1b:56:f8:b2:0d:00:6f:ef:36:0c:fd:1d:
e2:81:b8:1f:61:9b:70:48:f0:26:11:74:e9:5c:e3:
3f:9e:dc:4d:0e:09:46:0f:25:d3:5c:40:3b:31:4d:
8b:b7:e8:02:50:41:e1:dd:bb:5b:ad:af:ba:69:ae:
f6:99:d6:5a:71:a7:7c:3f:94:5d:cc:63:f2:3a:ef:
67:96:d4:16:f9:a7:0c:76:57:d2:d1:a6:74:11:1e:
b5:3a:a7:a1:dd:ca:8c:c7:07:d9:39:b3:4d:33:16:
48:6a:a3:d3:73:25:de:f7:11:75:59:58:8d:43:a7:
b7:25:ad:96:bd:7b:61:b4:7b:a2:3d:9d:33:e5:33:
22:98:45:47:5d:32:0c:9a:f8:ff:ac:53:98:8d:9f:
f1:f0:32:8b:10:fc:f1:85:08:b7:a0:a5:8f:a1:b7:
50:1e:39:73:87:6d:8e:1b:c1:77:fa:b5:3b:71:86:
7b:6e:22:4b:d0:60:3d:92:5e:8a:f3:46:19:af:2c:
08:5f:75:7c:1f:c6:ae:46:0c:34:93:e6:3d:81:ac:
4e:94:ef:9b:4a:eb:52:e0:67:bc:50:02:dc:41:d5:
77:11:43:f8:7b:af:cf:96:5f:70:70:60:aa:3d:41:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C0:03:72:FD:25:43:F5:62:C0:EA:6C:42:AE:57:87:D6:4A:9D:8A
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:70:36:23:b6:86:2b:a1:a4:ff:87:d2:ce:5c:f0:8f:18:42:
75:48:85:ed:24:28:e0:27:c6:77:25:d3:3f:8e:2b:3e:aa:df:
4d:01:f7:3b:c1:a2:ed:f1:bf:19:1a:97:6a:f7:93:1a:fc:6a:
a2:bb:ed:ef:12:c9:30:30:a2:1d:8c:4d:e4:45:0a:5f:c5:fd:
ca:36:e7:e9:97:11:a2:94:b8:21:09:8c:69:60:7f:b3:ff:39:
05:9a:b2:d1:11:07:ec:81:54:36:fd:12:72:1d:a6:80:6c:74:
5b:a8:a9:dc:20:b5:86:9f:d4:3d:c1:6a:3c:6c:a2:93:53:4a:
b0:17:cc:36:53:3c:14:5f:4d:fe:17:0b:67:02:d5:6f:ae:16:
e6:35:5f:cd:9f:44:cb:27:a2:a7:40:d3:94:c8:4f:8c:ef:01:
ee:93:27:14:31:3d:75:8a:0a:52:f3:68:1b:ea:ff:25:3c:50:
de:51:68:dd:9b:e9:0d:94:04:75:40:28:ad:cb:03:22:1d:1b:
53:8d:71:7c:be:35:dc:1f:2c:61:7c:63:a2:36:f7:87:04:22:
ae:98:51:9e:04:16:0f:ad:56:a8:29:ee:79:02:5f:9c:a3:6a:
c9:1b:51:5f:91:a6:01:b5:22:0d:e3:ed:de:29:7a:39:2a:53:
c0:40:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:42 2025 by rpki-client