Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: ZW7ry5Z8HWpPMRRzxq15dSbVkLOY8PMgSxytaYshPLg=
Subject key identifier: CE:24:B2:00:15:E1:C3:CE:32:C6:9B:B2:15:B5:B3:8D:62:BF:AC:06
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 019680FD6CE56EE5A248F72D8A2592EB1514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 10:00:14 +0000
Manifest this update: Tue 29 Apr 2025 10:00:14 +0000
Manifest next update: Wed 30 Apr 2025 10:00:14 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: xNiWgXhVihd/CGykuyeXc4MfB7vprstMgj853FS2yco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:6c:e5:6e:e5:a2:48:f7:2d:8a:25:92:eb:15:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Apr 29 10:00:14 2025 GMT
Not After : Apr 30 10:00:14 2025 GMT
Subject: CN=ce24b20015e1c3ce32c69bb215b5b38d62bfac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:e1:c5:79:1b:b1:a1:6b:30:6e:e3:88:9c:
64:c6:79:d9:82:15:6e:7e:11:82:29:6e:52:e9:e1:
48:7e:b8:97:4a:1d:15:a9:06:ae:2d:d1:c4:ae:c7:
e3:31:60:6b:30:b9:d7:a2:b6:e4:b7:d0:9c:7b:4f:
32:7f:c5:06:37:26:50:60:48:53:bf:09:8d:65:f5:
f1:4a:d0:8b:e3:10:c8:f4:ba:6a:b0:b7:eb:6c:30:
75:98:45:cc:58:c7:1e:20:ae:36:dd:d1:5b:15:2d:
3a:7d:fa:ed:1b:ad:c3:da:d9:27:cc:24:e3:7a:b9:
7d:cf:d1:ad:59:78:ff:7f:82:89:c8:1f:51:4a:56:
2f:05:b1:20:d0:3a:95:61:51:bc:f4:66:4d:47:65:
93:7d:52:47:86:18:92:55:98:7c:dc:28:c9:e1:5c:
85:40:e3:d2:e3:ee:14:a8:77:01:08:a8:51:f0:db:
ff:a8:37:e3:0a:23:bd:6e:f1:40:92:eb:4e:ab:1c:
de:f7:15:a6:73:70:e5:d0:61:d4:48:2c:4a:bd:3b:
d7:f2:a8:31:53:41:2c:9b:2d:8c:ee:2e:29:67:9a:
a3:87:6e:04:e4:7a:6b:4a:08:d0:7d:33:e3:2f:aa:
6f:4d:9c:58:cf:ad:f7:14:f2:e6:98:fe:cb:45:d8:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:24:B2:00:15:E1:C3:CE:32:C6:9B:B2:15:B5:B3:8D:62:BF:AC:06
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:71:6c:cc:e1:08:c0:5e:eb:d6:e5:83:50:9d:fa:c5:26:89:
f0:c0:18:be:55:56:0e:51:65:c5:11:b4:20:49:b4:08:d4:59:
78:82:06:58:09:4f:a5:55:a3:08:c6:11:f7:47:65:c0:69:e3:
be:1d:2f:ab:50:04:84:99:6d:45:b5:de:a5:ec:1f:25:b8:92:
85:30:48:20:96:7f:42:1e:43:2d:4e:73:8a:64:cd:ef:47:7e:
f0:72:0b:e7:17:b1:ab:0e:93:47:a5:c1:ae:39:7c:f9:bf:0e:
e9:59:4d:f5:f1:07:36:f5:05:43:6d:14:a9:a9:4c:aa:4a:c5:
ec:39:f5:43:19:46:cc:bb:0a:f4:24:1b:18:2d:62:3f:77:74:
43:99:91:47:25:df:a0:8d:22:f7:5d:ae:85:72:e9:b3:84:f4:
c3:b2:7a:62:db:93:d7:b5:6b:89:21:6d:36:c0:aa:f7:35:25:
a2:36:77:d5:16:31:0e:0e:42:2d:e7:6e:14:23:2b:b0:b8:78:
d4:1d:d5:fd:28:48:45:87:79:50:09:94:3e:67:96:7a:75:9a:
f2:53:5a:dd:20:58:71:0c:91:55:77:d3:75:11:5a:73:e2:41:
c9:2e:b3:72:8b:5a:71:c3:fd:26:27:bf:e7:a3:a8:1c:da:2e:
6d:5b:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:00:30 2025 by rpki-client