Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: 1BJGGKW4XQ27d46nTrf9PnMbzeySDt49B/8TB+b4La4=
Subject key identifier: 5F:F8:46:B7:4F:03:F3:62:3A:F9:B7:05:53:02:78:BA:0E:F5:17:16
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 01967C454CB0AD6F01B8C90B5F33291739F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 01E6
Signing time: Mon 28 Apr 2025 12:00:38 +0000
Manifest this update: Mon 28 Apr 2025 12:00:38 +0000
Manifest next update: Tue 29 Apr 2025 12:00:38 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: Ye1iiWGdQMClfWGgsUloZ6g83EyMfj1r4fRNVi7sNR8=)
2: sQlDLD71rwuQKEk9z1_BmhFOeQE.roa (hash: nNqb64nCN8cpCLQ5+ALkkO+gwOA+NXq21TqlMFS9bWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:4c:b0:ad:6f:01:b8:c9:0b:5f:33:29:17:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Apr 28 12:00:38 2025 GMT
Not After : Apr 29 12:00:38 2025 GMT
Subject: CN=5ff846b74f03f3623af9b705530278ba0ef51716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:02:5a:43:4f:2b:36:c7:e5:24:4b:58:48:
f5:90:ce:35:33:2c:54:2b:14:fd:c8:3c:0f:70:88:
3c:4c:eb:2c:e4:e5:62:6c:00:79:72:92:94:bb:e8:
99:d1:86:31:13:1f:7d:7d:49:c2:0d:d7:71:13:4e:
8f:dd:3a:95:74:9e:34:c9:b3:37:af:1d:47:35:06:
09:da:af:ad:20:7f:25:1e:e2:d4:1d:d4:3e:14:49:
c3:91:2c:0a:23:7f:ee:86:e1:6a:1c:7d:08:fa:fc:
18:79:21:a5:38:39:4d:ed:c2:c5:e2:9f:fa:70:92:
a8:03:8e:24:c8:92:86:61:b8:65:d5:5a:c2:f1:71:
f9:c1:ee:58:94:a1:61:5c:7f:fd:00:0b:c1:63:12:
1f:53:34:33:c8:b9:a3:17:65:a3:b0:a3:d6:3c:81:
22:f6:07:b0:93:65:c4:d0:67:75:5c:5a:17:42:fa:
d0:b5:69:f2:d2:fc:ee:e3:bf:76:7c:90:94:8b:e2:
b5:0a:71:11:dc:b1:16:8a:4a:0b:8b:bc:6c:e7:b7:
19:1d:f2:d1:67:c4:e4:57:32:c9:3c:39:a7:b2:aa:
a9:2d:1d:92:fa:27:1e:2f:17:ff:74:27:16:d4:ff:
61:30:cb:0a:48:2c:44:d0:3c:81:b6:48:76:73:c5:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F8:46:B7:4F:03:F3:62:3A:F9:B7:05:53:02:78:BA:0E:F5:17:16
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8c:f2:12:8b:d8:27:63:d1:86:aa:6d:b2:00:82:5d:de:e6:
f6:f1:27:cc:fe:6d:ba:f6:9a:4b:12:7c:df:36:20:9a:5a:d9:
3a:f8:d2:f5:e6:5a:7c:e2:44:87:ef:70:17:2f:7d:4b:49:ab:
73:c3:82:79:bd:45:b0:8d:26:59:b2:2f:94:86:d9:f1:c1:9d:
02:f4:d4:b0:d9:81:b6:0f:e3:1a:3b:17:bb:09:08:c8:f4:41:
0a:63:5d:d4:79:fb:6f:72:e9:94:0a:d6:cb:d5:93:35:96:d5:
95:1d:63:7b:83:b3:3f:55:45:3a:3b:18:e3:37:d4:0d:8c:9a:
51:2d:80:0f:87:33:9d:bd:b3:79:3e:41:8e:ad:d4:b1:7d:08:
22:b1:6b:8f:68:0a:c8:70:60:3d:d6:e8:38:da:86:7b:bc:71:
ce:23:84:e4:dd:5b:97:2f:90:45:b1:c7:f9:c6:88:41:fa:37:
18:c4:13:a9:e7:5c:29:c9:00:73:15:93:30:80:3a:31:08:39:
f4:85:5d:ec:80:ff:5d:7b:a6:ff:66:af:f7:fd:4d:1b:d1:3d:
13:b8:56:42:d7:9b:0d:32:47:e8:33:16:7a:5c:63:47:5b:04:
74:8e:d5:8e:f7:43:e6:4e:e0:25:4b:5c:43:98:ef:62:fd:ce:
2a:8c:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:04:10 2025 by rpki-client