Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
File: e4mF-uoIWYwFzDC4LigjBq95MxY.mft (raw, json)
Hash identifier: hrzt0BoK1x7jKPxpiw1L0O211SJRCXLA80b5tJWe6RY=
Subject key identifier: 8A:11:82:FA:A8:E2:95:FD:7E:26:2B:B9:B9:A1:43:18:59:9A:E1:A2
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 019674C274A4E8D9A266632A784A67C4F200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
Manifest number: 0DA9
Signing time: Sun 27 Apr 2025 01:00:23 +0000
Manifest this update: Sun 27 Apr 2025 01:00:23 +0000
Manifest next update: Mon 28 Apr 2025 01:00:23 +0000
Files and hashes: 1: e4mF-uoIWYwFzDC4LigjBq95MxY.crl (hash: Mw3GQvsVTDs/71jCLkWpT6bLNM2Mpf/s1oIEZsqFJ6c=)
2: wezzDoLmoG44JNaFHHcOefdwrnE.roa (hash: feMtqmKbJF8l19fJuaMh5zzlgwe36jwzuX192DfrtQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:74:a4:e8:d9:a2:66:63:2a:78:4a:67:c4:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Apr 27 01:00:23 2025 GMT
Not After : Apr 28 01:00:23 2025 GMT
Subject: CN=8a1182faa8e295fd7e262bb9b9a14318599ae1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:c7:6d:8f:26:d6:20:78:50:8b:a9:98:8f:
28:3c:80:2f:c4:cc:98:4f:ef:c9:03:20:bc:83:02:
22:20:83:a5:bf:43:64:61:e0:ae:64:a7:1e:93:b8:
76:dc:b4:9e:cd:87:ec:c6:18:31:fc:9a:87:85:89:
00:30:b0:43:52:32:aa:73:77:2b:4c:20:17:fa:4a:
f8:62:de:24:35:02:e4:fd:16:e0:80:14:79:43:7e:
04:d7:41:f0:9a:59:b8:e9:e3:88:7f:41:7e:16:bd:
89:67:89:7a:7f:2f:bb:8f:8e:c2:3c:f1:1b:2e:4f:
da:41:d1:e2:6e:85:d6:b6:aa:95:42:dd:0c:76:79:
98:a1:2a:26:e0:d8:22:9e:03:17:7d:c7:be:32:76:
dd:26:50:95:f2:2f:d0:ec:93:2a:ef:82:f7:8f:7f:
18:87:ea:c3:26:9a:28:cb:c9:b9:e7:39:1b:d4:e0:
cc:84:f5:30:40:26:dd:8f:62:93:58:a4:38:1b:77:
0b:e6:5f:d5:b9:96:88:13:1a:c0:00:35:aa:aa:5d:
80:8f:93:a0:f7:62:fa:fd:59:b6:c2:f0:1a:e6:aa:
b6:28:12:df:65:58:b1:58:77:5c:c9:a6:22:eb:b9:
0e:cc:e5:67:1f:c2:d3:da:f8:86:c2:31:a4:d4:c7:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:82:FA:A8:E2:95:FD:7E:26:2B:B9:B9:A1:43:18:59:9A:E1:A2
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:79:1f:26:ce:34:23:49:27:b8:2d:4e:7d:ff:3d:57:3f:9e:
9a:81:3c:2d:df:89:8f:51:49:3d:5f:ea:2b:7c:65:8d:db:08:
0c:ef:4b:8c:c8:4d:b4:6d:6c:75:8e:f6:be:0d:2d:2e:b7:73:
e9:b9:05:ed:dc:28:81:7b:84:50:c5:c1:b7:3f:1c:54:f4:80:
d0:b7:a2:ec:99:91:44:f8:a4:a2:72:58:b2:01:fc:77:94:69:
4b:85:93:c6:db:22:56:02:4e:c4:56:35:47:74:eb:17:7d:4c:
11:62:71:8b:23:47:c7:78:43:d7:ca:65:b4:00:c6:5b:1a:60:
07:f3:ec:d4:0d:71:0c:85:07:6b:84:7f:28:5c:fe:b6:a5:56:
e6:20:da:e0:e5:b8:b5:01:98:ea:34:da:2d:c7:50:36:90:70:
00:f5:7e:a7:a6:ac:fb:f4:f3:a2:e0:1e:7d:29:b2:a8:b6:27:
a4:65:1c:28:d5:05:ce:64:62:6d:8c:28:77:3e:84:2e:74:d0:
41:3e:c2:b0:3c:90:2c:7d:b0:3d:65:10:4e:77:cf:db:3c:29:
d6:cd:e4:e1:ae:ff:fc:dc:09:b9:73:d0:85:03:70:bb:fb:da:
b6:4f:3d:bf:64:c7:d9:25:7a:55:a3:d8:dc:e6:ae:9c:e8:51:
2c:fe:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:55 2025 by rpki-client