Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: AfBaRcrwtMQL3nsX6+Q3ELDA3ViwO8f7vHWNCr9QbvY=
Subject key identifier: FB:7D:3D:28:87:30:30:B5:09:CB:6C:64:A2:37:84:6E:56:2C:70:FF
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 0196760BE8B7AD7FECF45AB9D2F9AC29B32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 03E4
Signing time: Sun 27 Apr 2025 07:00:13 +0000
Manifest this update: Sun 27 Apr 2025 07:00:13 +0000
Manifest next update: Mon 28 Apr 2025 07:00:13 +0000
Files and hashes: 1: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: UCnTyA3HLjFhZG2gjbAaFNafzORHtfN68aEvweKw3zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:e8:b7:ad:7f:ec:f4:5a:b9:d2:f9:ac:29:b3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Apr 27 07:00:13 2025 GMT
Not After : Apr 28 07:00:13 2025 GMT
Subject: CN=fb7d3d28873030b509cb6c64a237846e562c70ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:95:f9:4c:a5:45:e0:c5:2b:4d:23:78:18:
e1:5c:e9:57:4e:39:88:c0:cc:7b:6f:d2:b6:9b:be:
6e:53:7b:02:25:17:c5:ad:b9:cc:46:dd:f8:ff:f4:
7b:88:b8:b5:45:8c:d6:ec:7e:d1:42:8e:66:cf:5e:
c5:2c:5c:14:c9:bf:01:dd:e5:33:e2:9b:15:42:a0:
74:b4:52:c1:7f:0f:36:bd:20:ff:fe:5f:d3:7b:53:
d7:82:0d:b9:22:29:00:0d:fa:2d:64:e7:5a:c2:67:
82:00:c1:05:b6:38:fe:65:15:ba:01:aa:7d:83:9b:
1a:2e:1b:76:ee:1b:29:a3:6d:55:2e:e8:16:b9:33:
1d:96:99:42:1c:d4:97:08:05:f0:b7:88:a1:76:4a:
c6:5b:0e:36:69:97:81:fd:c3:e2:a3:2c:db:d7:cd:
94:e1:6b:99:fe:df:fd:89:47:25:4e:bf:32:3b:e8:
c1:76:f7:5d:92:44:8b:eb:2c:0f:3c:8c:8a:72:a2:
f0:5e:1e:51:4e:71:65:cb:7f:ce:2f:3c:72:2b:25:
c7:da:b0:b8:c3:2c:51:16:d4:14:b3:56:74:48:6c:
b0:ce:35:2a:61:b7:ed:47:bf:06:c7:7a:ac:2a:48:
47:7f:e1:54:2a:aa:3e:5d:f1:1e:d2:df:d8:44:8f:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7D:3D:28:87:30:30:B5:09:CB:6C:64:A2:37:84:6E:56:2C:70:FF
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:d4:82:b1:86:38:7c:ad:67:81:cb:55:3d:f9:e2:36:98:b0:
be:d6:06:fd:f1:51:a5:41:75:9c:ba:35:2c:96:b9:70:9a:63:
c3:a5:4d:4f:e3:ea:ea:76:a7:89:3b:cf:d1:d8:18:82:4e:58:
48:ee:c9:d9:15:ea:8a:0a:0c:de:e3:29:0d:6c:95:68:3c:e2:
9a:2e:43:7a:20:a6:6c:ba:22:af:a1:4f:07:a7:3e:27:43:4e:
88:c3:77:c5:9e:68:d9:4c:d5:1c:97:6f:a0:e7:75:5b:f4:92:
35:96:3f:c6:21:e4:d2:21:74:ad:67:4e:bb:6e:e4:8a:d9:6f:
46:c4:aa:cf:96:21:e3:3f:66:00:02:95:a0:54:ce:3c:66:5d:
90:45:c7:5a:22:52:cd:b7:ef:b2:ce:73:4f:c2:ce:71:73:3f:
07:7d:51:26:1b:e9:1a:24:46:65:96:d1:ed:28:70:1c:2f:07:
e9:32:81:ad:fb:22:98:d6:70:9f:30:eb:e9:d3:32:81:3e:7d:
1a:2c:3c:d2:df:cc:ee:87:a9:21:58:00:b1:ef:8a:76:30:d5:
48:76:7c:78:fb:81:f5:f8:bd:a3:8a:db:29:58:84:06:8c:6f:
a1:eb:be:3b:f7:0a:e1:8a:50:32:a0:f4:fc:24:8b:25:4e:28:
9e:42:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:40:58 2025 by rpki-client