Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: dVdhlJ2G0KZz+H8L51YINZjAQPBqsY/ztmrmcjghaqU=
Subject key identifier: DB:BD:71:54:E5:F9:B9:5B:03:48:E4:0A:D6:61:73:C7:A3:F7:3C:92
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 019694BB2A2F5F11670686B31EF4A25AB95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 0411
Signing time: Sat 03 May 2025 06:00:16 +0000
Manifest this update: Sat 03 May 2025 06:00:16 +0000
Manifest next update: Sun 04 May 2025 06:00:16 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: ewjdiGYpWoBTsOmKhz5XtGHWxUOqlNiT+vfrrDf/j4w=)
2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:bb:2a:2f:5f:11:67:06:86:b3:1e:f4:a2:5a:b9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: May 3 06:00:16 2025 GMT
Not After : May 4 06:00:16 2025 GMT
Subject: CN=dbbd7154e5f9b95b0348e40ad66173c7a3f73c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:a1:2e:e3:99:65:1e:0b:bd:05:c0:57:3a:
ff:dc:1b:d7:18:1b:1a:4f:bf:28:48:1a:78:47:0e:
0c:46:9f:31:ac:bf:98:9c:91:32:2b:db:a8:13:aa:
a0:6c:74:bb:1f:bd:84:a8:9d:0b:55:f1:81:41:b8:
a4:d5:dd:e9:63:ea:f1:a0:27:0b:5f:30:29:66:6a:
d7:3e:31:36:18:1b:35:d3:0b:4d:2c:52:35:c2:c6:
a2:80:2b:4f:09:55:09:db:ff:b8:62:c3:68:c2:11:
e4:f5:36:4e:8b:e1:f7:b3:09:37:a6:1d:1f:7d:95:
3b:07:9b:31:2a:02:4a:3e:21:ce:c6:c6:2e:e0:fa:
71:58:79:02:1c:a2:0d:42:52:b3:65:61:fe:ee:f1:
66:5b:c8:fc:ed:cd:e2:b9:08:7f:3b:94:4c:14:54:
0f:a4:8d:6b:42:5a:9e:dc:e3:7f:fb:13:7f:0b:b7:
f3:43:4a:82:a6:36:3c:88:20:70:de:c0:64:f9:4b:
69:f6:50:82:ab:02:54:ea:9b:a1:43:4d:a9:18:5b:
01:49:61:25:ad:41:74:e1:38:fc:b7:cc:fe:8b:63:
8d:16:5c:42:f4:a5:1b:a2:d3:7c:f9:3a:4c:45:3f:
63:ab:71:4c:d4:17:34:fe:1a:1d:6a:b5:3a:60:db:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BD:71:54:E5:F9:B9:5B:03:48:E4:0A:D6:61:73:C7:A3:F7:3C:92
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3b:80:7d:4d:47:d5:5b:ab:b9:1d:0e:c2:6c:0a:8f:53:56:
04:a7:74:b9:e2:36:a0:2c:9f:08:60:03:ad:ea:50:47:76:81:
87:6f:67:6f:25:34:a0:89:b9:0b:2a:db:8d:dc:23:eb:a2:21:
6c:a0:d3:6e:4f:e2:61:6e:20:78:13:78:cb:99:71:eb:1a:22:
32:5f:5b:87:10:ed:eb:2c:58:e4:92:d1:b2:a1:8d:eb:dd:8d:
06:fc:f6:65:b1:65:49:c9:55:25:08:9e:85:85:95:d6:e9:86:
d2:68:99:ca:10:a0:19:ad:cf:dd:91:fa:c7:1f:24:97:fe:4c:
5d:d7:54:73:73:3a:e5:d7:ce:d6:3f:e8:ca:3d:54:0b:2e:ea:
c4:73:52:2f:f9:fc:4b:ee:a8:c0:2f:f5:fd:58:09:1a:bc:bf:
29:59:33:a5:ee:f4:32:63:75:3c:64:be:7c:81:ec:50:bb:03:
35:a8:d4:fc:e1:8e:20:04:41:2a:92:e1:13:05:77:f4:fa:7b:
ac:3d:cd:a3:a5:b0:fd:5d:e0:7c:aa:17:6f:c7:aa:43:a2:3b:
c7:2c:7c:64:3f:bc:33:4a:c1:42:d2:c6:e4:27:49:1b:bd:63:
41:fb:cb:12:fa:cd:56:21:b3:52:f5:5d:f6:0a:d5:3d:30:c7:
ef:75:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:22 2025 by rpki-client