Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: xSJn1Z67wCs+Q5Vwoo0M3jX8FiwUBVOpCZGke2A45Mc=
Subject key identifier: E4:99:42:22:FD:8A:59:06:E6:E5:A0:89:88:DA:E5:68:08:5F:99:36
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 0196771EE7197D4981358725622AD1575E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 0795
Signing time: Sun 27 Apr 2025 12:00:36 +0000
Manifest this update: Sun 27 Apr 2025 12:00:36 +0000
Manifest next update: Mon 28 Apr 2025 12:00:36 +0000
Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=)
2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: GdFakd+YKDbf55fQWgPZ80JfmNrHXTPGxROQi9c+Icg=)
3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:e7:19:7d:49:81:35:87:25:62:2a:d1:57:5e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Apr 27 12:00:36 2025 GMT
Not After : Apr 28 12:00:36 2025 GMT
Subject: CN=e4994222fd8a5906e6e5a08988dae568085f9936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:03:a1:1c:59:7d:6e:46:94:c0:af:f9:9d:
9a:58:8f:f6:8e:88:1f:84:30:6e:17:e7:f4:54:ea:
a1:29:16:f0:3d:00:6d:cf:57:aa:d9:ba:80:b0:3d:
3c:c5:dc:6a:86:76:cf:6d:61:74:8e:10:e3:6f:76:
38:85:12:a7:79:bd:cd:c5:4b:e9:9a:5c:34:88:f8:
42:2d:49:9e:c2:65:56:7d:fa:cd:24:1f:ae:de:7b:
bd:2c:26:c7:3d:58:56:bf:6d:bc:03:ca:fb:e1:d7:
f2:3b:07:11:ce:e8:07:ea:87:58:6f:e7:9c:5f:4d:
e4:8d:12:6d:f2:d3:9c:71:12:15:1e:aa:a1:b7:ed:
b0:d4:c7:37:66:c4:3a:82:68:7a:9f:6d:57:76:64:
47:f9:6b:ac:fd:85:de:7d:a9:d1:1a:3d:5e:97:76:
af:36:45:56:2b:34:dd:31:15:19:0d:0c:67:56:3f:
50:a5:07:2f:c8:6e:9f:0c:aa:1c:53:b5:cb:b1:d7:
6c:00:98:2c:fd:29:f2:06:2c:e6:71:c3:3c:48:d0:
bd:11:3b:ef:ce:61:2f:c7:00:0e:cd:7f:be:4b:60:
59:c8:da:73:8a:17:a3:29:fa:92:7b:67:01:7e:67:
62:f3:c7:4b:fc:9c:9d:bc:88:31:d1:86:70:76:96:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:99:42:22:FD:8A:59:06:E6:E5:A0:89:88:DA:E5:68:08:5F:99:36
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ed:2a:b1:65:0b:81:a3:1f:3e:29:65:9a:00:b7:7b:30:9a:
29:33:84:c3:62:28:f0:b3:55:dd:01:58:00:2f:98:49:73:0e:
85:f8:e6:d6:83:ad:ac:95:4a:3d:a7:89:e9:9f:47:60:02:6e:
0c:ea:27:1d:26:31:03:1a:8a:ca:8a:bc:2b:c0:ad:30:65:ee:
e4:50:bb:da:00:b9:c2:5f:d0:77:ab:37:9e:5c:c6:6f:e8:da:
c0:47:5e:1a:a5:4a:41:cc:fc:0f:ee:30:b5:64:5a:27:20:08:
d0:d3:5d:5f:d4:d0:33:56:d1:01:13:af:6b:2e:bc:01:86:23:
fa:d4:28:b3:23:40:77:f3:27:83:a8:a2:bb:cb:68:1b:af:63:
9a:53:78:d6:72:84:e7:cb:2c:5d:45:71:4b:9f:ba:66:2f:1e:
1c:7c:ef:b3:c9:ba:b0:27:d5:bb:46:85:8f:b7:2b:c7:a6:54:
26:0a:98:c9:ce:21:59:d6:97:c6:95:4c:5b:35:b2:fd:91:82:
84:7b:79:88:ac:39:54:89:10:cd:9d:b4:b7:58:4e:7a:a2:c1:
f2:2f:96:3d:7a:e6:34:89:c7:99:fc:55:70:b5:2d:2e:1b:23:
a6:03:cc:ba:7f:16:1a:ce:8c:f4:e4:5d:5d:02:33:c7:a1:6e:
10:fb:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:56 2025 by rpki-client