Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: pWnu7THIsVD0LVXtkexBFaUGBFek0tdklvXKMJ17rMg=
Subject key identifier: ED:A4:25:39:24:FE:AE:FD:4B:A0:FF:8B:19:02:CB:B6:C8:AB:91:12
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 0196767A72E8E3E8251D0EC413905754C5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 09:00:58 +0000
Manifest this update: Sun 27 Apr 2025 09:00:58 +0000
Manifest next update: Mon 28 Apr 2025 09:00:58 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: zMAgmG6yUTESfrtFBq14ZP/7yNG6QG5zr4GB72yLa5w=)
2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:72:e8:e3:e8:25:1d:0e:c4:13:90:57:54:c5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Apr 27 09:00:58 2025 GMT
Not After : Apr 28 09:00:58 2025 GMT
Subject: CN=eda4253924feaefd4ba0ff8b1902cbb6c8ab9112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:b0:49:f5:19:79:bf:c9:8b:e6:28:cb:75:
70:ad:ed:04:31:15:34:87:6c:a7:ae:69:74:38:64:
28:57:72:52:03:72:c0:19:7e:a8:50:ed:7b:e3:ec:
51:36:b8:4e:60:f8:d7:80:d1:ac:c8:00:75:34:7d:
c5:b9:23:2b:13:8e:e8:cb:da:4f:33:04:28:1e:33:
9e:2a:1d:0f:da:02:7b:3b:58:f2:be:71:e7:70:89:
8f:ed:bc:2c:30:b4:70:5f:08:8c:48:ba:83:35:ae:
e4:cb:3d:5b:f5:14:65:d4:06:b0:1b:3f:92:41:fc:
bc:07:9e:82:f3:5a:3d:11:89:ea:9c:69:6c:ac:ee:
ff:38:be:f9:80:0a:51:99:42:8a:04:a0:28:4b:c3:
9c:5f:f8:df:a0:65:57:69:0a:a7:58:5c:c9:06:41:
d6:dd:29:e7:4e:f9:98:5a:49:b9:7d:6d:d4:de:b3:
39:a4:c5:f2:85:f8:31:4f:86:68:c0:e9:30:e5:de:
1a:87:78:b1:ca:d0:80:e3:c2:56:74:44:a8:3b:22:
bb:9a:b6:47:7e:9a:c6:5e:f8:ad:04:93:73:c3:f9:
cb:75:4a:fb:a0:a7:fe:2c:1d:51:8e:eb:16:05:40:
76:44:71:05:01:c1:d5:e9:1b:fc:76:10:a6:18:40:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A4:25:39:24:FE:AE:FD:4B:A0:FF:8B:19:02:CB:B6:C8:AB:91:12
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:58:e1:9f:9a:2e:2b:f3:db:b1:30:fa:2f:79:27:8e:ba:
b2:03:ba:0b:89:fa:d6:cf:27:84:3c:9d:d1:ac:8b:94:10:fc:
45:da:2c:00:a3:e3:3a:b8:47:dd:83:c4:54:c0:f2:fc:c5:4b:
38:8b:0f:5b:65:7e:20:ca:f4:72:00:11:ed:e3:0f:2a:d3:4b:
35:3d:d5:bb:13:ca:89:02:2c:6d:0e:86:c4:23:b0:fa:3e:58:
2d:84:6e:7d:34:29:a7:b1:7f:d4:a7:6b:58:df:5e:a0:43:98:
e4:1d:65:82:1a:01:a0:66:74:e7:78:72:01:e1:bc:12:c7:cd:
f8:d4:8d:0c:34:0d:3b:6b:9c:af:5b:21:8d:7c:87:84:fe:cd:
ba:e7:ed:ea:a6:53:bb:b7:12:c2:2a:ef:c9:81:24:a0:c8:6c:
ad:bc:89:67:55:cc:48:de:b6:a7:41:2c:bf:a6:49:13:53:e2:
f9:98:6e:0e:90:bf:4b:cb:fe:f2:96:b8:86:75:46:51:a2:86:
6d:5f:00:77:24:9e:e6:21:9b:93:c9:1c:81:ce:f2:f6:d1:1c:
92:9b:b3:04:4a:b5:34:fe:c2:70:fe:3d:a4:a0:27:15:04:82:
34:5f:47:1f:96:09:92:8f:13:78:51:3f:8a:25:27:d0:b3:8f:
90:f1:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:10 2025 by rpki-client