Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier: MpXuJ+7eakMPGFt7WA+eisVOj7jg4Ssl5txadQrjW8A=
Subject key identifier: D1:F2:84:44:77:E0:CC:49:B6:8E:F0:A6:E1:02:77:43:94:33:98:B1
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 0196753037E67B68CB6FE10D36A089508FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 03:00:16 +0000
Manifest this update: Sun 27 Apr 2025 03:00:16 +0000
Manifest next update: Mon 28 Apr 2025 03:00:16 +0000
Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: i2/RsKvRIlCK/HmhD0UjkfSHkZGbWlnU3O5PYlQCinM=)
2: Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa (hash: 9oeY/MAa6lvwYN19OiXxeJ1LVR37sI0FzCd1Eq/rgTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:37:e6:7b:68:cb:6f:e1:0d:36:a0:89:50:8f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: Apr 27 03:00:16 2025 GMT
Not After : Apr 28 03:00:16 2025 GMT
Subject: CN=d1f2844477e0cc49b68ef0a6e1027743943398b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:e2:24:07:4b:a2:4d:3e:8d:e3:4f:d6:29:
91:ab:92:cc:29:f7:61:d7:fb:d5:c8:39:4d:69:88:
c8:64:5d:a0:a5:60:38:d8:90:a1:bb:54:d2:56:f3:
b5:a0:b6:92:18:00:01:b9:23:7b:52:40:71:55:60:
00:f3:2c:cb:3f:f1:60:cb:77:c9:34:e2:be:56:e0:
61:06:69:d0:48:06:c6:d0:50:47:b9:6c:da:0e:c8:
22:01:28:fc:2a:6a:3c:71:6a:95:d3:30:21:d1:4c:
03:f2:31:c9:2b:3c:1a:d8:fe:0c:9e:ac:c5:61:e8:
72:0b:44:3e:4b:bd:ae:04:08:04:f1:5f:7f:19:dd:
21:e3:db:8c:4b:62:78:fd:75:38:6d:75:a2:0d:43:
05:11:68:9f:08:b5:33:3e:13:83:20:24:9a:2a:6b:
92:79:aa:36:6d:41:0f:18:8d:83:d4:d8:8b:b2:85:
1c:de:d6:fc:d8:4c:ea:30:cc:96:a4:d7:52:c1:dd:
7c:bf:d0:cb:fb:60:91:87:fa:c4:97:9c:a0:b2:61:
70:c6:91:29:1e:b7:d4:11:5e:11:b7:9d:2a:4d:dc:
90:df:da:bf:7b:ff:a4:c9:d6:15:ac:12:cc:53:f2:
e2:4f:1b:6b:37:a1:48:1f:73:81:d7:41:db:b9:85:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F2:84:44:77:E0:CC:49:B6:8E:F0:A6:E1:02:77:43:94:33:98:B1
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:38:37:84:3c:1e:95:de:1c:6a:04:75:a1:5a:7b:79:07:cc:
dd:6f:a5:64:0b:09:63:39:27:21:ff:96:b3:92:cd:a9:61:57:
35:fc:d5:5b:ec:cf:42:08:ec:0e:14:77:b7:51:bd:c9:c5:26:
39:52:25:50:c4:16:40:bb:ef:c5:b3:04:41:7c:dc:a2:67:13:
71:d2:96:a8:f4:ab:e4:1a:d5:4a:b4:fc:68:83:72:71:24:8e:
57:af:9e:ac:73:77:e9:07:d0:ef:84:aa:5e:f0:cd:10:44:e9:
51:26:7b:13:f1:0a:a8:a4:d7:af:2e:d9:2f:59:1a:50:18:d0:
30:49:95:06:61:a4:76:f6:f5:19:40:70:19:fb:34:f1:8b:fe:
80:55:4b:cb:42:02:e1:3a:b3:f3:5c:66:a3:f1:46:fc:16:b3:
f6:6e:25:02:25:d5:4e:08:a5:cb:08:75:a7:a6:a4:ac:be:76:
f1:ff:f5:4c:d1:b9:a6:da:2d:0b:b0:3c:57:e8:d8:1d:8d:7d:
7a:7d:53:91:c4:5a:38:27:a6:d8:b3:4d:a9:00:85:4a:68:69:
9a:39:45:c3:62:14:48:6d:56:6e:ec:8d:0b:4e:ef:57:bb:ac:
1e:7b:75:e7:bd:7d:ed:ff:4f:c5:c7:5e:10:68:e4:1a:4f:4e:
f1:4c:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:00 2025 by rpki-client