Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: A5D/VhEaoUfk2pLjOLOEOSzC951xGrz27UZ5PZbclEY=
Subject key identifier: 2E:AE:47:07:63:1F:D0:A5:EC:D3:E8:F5:DD:29:04:EB:35:27:52:E6
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 019680FDE56710A1ADAF81178EEC582F51DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 13E6
Signing time: Tue 29 Apr 2025 10:00:45 +0000
Manifest this update: Tue 29 Apr 2025 10:00:45 +0000
Manifest next update: Wed 30 Apr 2025 10:00:45 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: bmAdoVThdqPtL7PtgimbkQFfl0eYFd5SwBY8cN7fSfw=)
2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:e5:67:10:a1:ad:af:81:17:8e:ec:58:2f:51:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Apr 29 10:00:45 2025 GMT
Not After : Apr 30 10:00:45 2025 GMT
Subject: CN=2eae4707631fd0a5ecd3e8f5dd2904eb352752e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:30:61:3f:88:6b:f4:fe:78:40:ad:06:4d:
ac:fa:3c:26:60:7e:9c:40:10:c2:08:71:b4:99:44:
23:03:d4:38:88:84:2b:b0:02:c6:fd:3d:67:57:e0:
77:4d:e5:83:a6:38:b4:64:f2:2c:60:fa:d0:ea:91:
1b:1c:eb:10:37:05:24:e2:67:0f:9f:a2:7c:64:2e:
6f:1c:ed:3b:65:08:eb:8c:26:8a:3c:89:d3:26:4f:
3b:2d:fc:21:c7:fe:3d:b1:62:bb:9d:7a:3e:a2:9a:
d0:31:95:f5:26:e4:ec:e6:c5:ab:f6:a5:67:c9:b6:
f4:4b:dc:e2:e2:3c:c8:c5:75:22:b1:39:0a:f7:31:
f5:fe:ff:5f:a8:26:b2:3d:f3:20:20:73:a6:e1:e4:
24:9f:e5:19:73:c5:c5:ff:d8:4c:80:55:24:9c:0c:
1a:2b:cb:46:59:70:30:b1:38:20:08:f9:13:82:5e:
18:f6:c6:a5:ac:41:80:de:47:0f:9f:a3:5a:27:05:
13:07:5f:59:0a:89:9b:b8:b7:c0:df:e7:c0:4f:0d:
30:10:83:2e:3b:af:cf:c4:38:17:52:75:87:c6:ef:
b3:fe:f0:1d:24:19:83:b3:8e:8f:21:e3:f7:0e:e2:
9a:70:8f:5b:81:c4:bc:99:26:94:de:81:9f:27:db:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AE:47:07:63:1F:D0:A5:EC:D3:E8:F5:DD:29:04:EB:35:27:52:E6
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a3:d9:2b:f3:43:f0:d8:c5:64:74:b6:14:4b:00:71:f9:a7:
65:4f:30:12:32:03:55:0f:2c:b5:50:a4:37:5a:37:5e:dd:57:
ca:6b:6e:f7:32:9c:71:ed:8c:f7:3c:1e:9e:be:e0:a6:eb:a8:
a9:e1:2e:ad:e0:6e:3e:b5:57:ee:c2:87:4b:f2:fa:59:17:44:
ea:3b:28:eb:ce:af:a3:1f:06:65:b9:6b:e5:fb:a7:7f:32:ee:
00:54:26:fd:88:f2:c6:10:ff:96:c2:f6:44:a4:cd:78:2f:9c:
f1:34:6b:75:07:62:77:72:fd:23:72:cb:cb:74:e5:51:ce:d2:
4c:14:41:8f:68:b1:0e:fd:69:d4:03:a8:b1:73:67:7f:82:3f:
62:57:40:51:49:9a:e0:83:ee:b2:ea:8a:99:d1:67:18:81:d1:
4d:83:23:35:de:68:c9:af:cb:75:db:d8:dc:3d:2c:08:e8:0a:
83:84:73:32:24:fc:ef:e9:62:db:3d:97:ba:79:75:9b:10:68:
31:ff:33:60:62:79:db:47:01:3c:c1:ce:e9:5a:71:0a:57:38:
dc:34:8d:c3:d9:5d:cb:ab:75:c6:95:22:94:8d:6f:84:9e:d4:
36:42:30:97:dc:f3:8a:65:f2:e4:44:80:e4:37:23:06:60:69:
9c:68:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:37:55 2025 by rpki-client