Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: m6gyJWi6nm1iVDQ+M1lUXTgfzggEbckiL273zqTluw8=
Subject key identifier: 76:0A:3B:26:7C:C0:AB:12:10:20:E3:6E:2E:73:F9:0C:E2:FA:81:DA
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 01967E33782E12E60E829A87DE129DA2B475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 08B8
Signing time: Mon 28 Apr 2025 21:00:24 +0000
Manifest this update: Mon 28 Apr 2025 21:00:24 +0000
Manifest next update: Tue 29 Apr 2025 21:00:24 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: OjvxMpeKqY9lkgJgx6TZHQZHsjolQXGpYNiqegJftxI=)
2: QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa (hash: N6OU5OMUXPa8ri34/Wuotfq2VOjXlYSfy+37I0hPZzM=)
3: qswjHcqLBQY9Z2nmcWTR62TphaY.roa (hash: p4pPSzszW4Gf4Jz9O3n/L0PF3Vv3naASMu8aongMgFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:78:2e:12:e6:0e:82:9a:87:de:12:9d:a2:b4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Apr 28 21:00:24 2025 GMT
Not After : Apr 29 21:00:24 2025 GMT
Subject: CN=760a3b267cc0ab121020e36e2e73f90ce2fa81da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:fe:d7:59:37:ba:99:76:2a:d2:43:e3:83:
89:03:2f:b7:b0:94:6d:d1:52:67:da:ae:a4:36:a8:
4a:28:35:47:6b:e0:9c:40:f3:1f:41:8b:a5:f6:47:
d2:b5:3b:5b:fd:d2:55:8a:07:b5:6a:1d:e9:6a:e4:
24:78:bb:26:b8:e0:fa:b8:46:8e:06:e8:12:28:63:
57:d3:c1:83:56:f5:f9:c4:d0:4f:83:a5:50:29:98:
45:cb:43:b0:f8:c7:46:a0:98:98:b4:03:3e:58:85:
91:55:bb:fa:da:55:2a:7e:66:9d:9a:6a:2b:88:0c:
8f:cf:5f:54:02:d1:87:80:db:97:13:c9:a4:b2:7b:
95:9e:21:c3:a0:09:56:3a:dc:2a:0e:58:89:c4:e5:
f1:8d:d1:09:aa:93:65:89:84:80:3c:c5:30:ff:23:
4f:e0:47:a9:11:7a:38:08:7b:ae:d6:02:93:4e:c1:
53:cd:ef:75:ae:0b:5c:68:f1:26:43:26:a5:d3:4e:
09:b2:bb:e9:75:70:57:48:33:ec:f1:b7:54:df:81:
52:88:79:4d:58:a2:3a:63:ad:0f:9a:a1:03:f4:77:
d4:51:55:1c:7f:c4:96:7d:a5:90:54:a2:7c:15:64:
39:06:e6:6b:40:59:1a:4c:65:54:91:1a:59:c0:af:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0A:3B:26:7C:C0:AB:12:10:20:E3:6E:2E:73:F9:0C:E2:FA:81:DA
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a5:57:ad:ed:bf:8a:72:04:31:20:6a:f8:f0:a7:e5:8c:b3:
5b:85:14:1d:f7:3d:ab:cc:53:00:41:a7:45:94:49:e5:3b:b4:
f0:45:f7:db:bb:df:46:ad:d0:6b:c2:4f:44:96:cc:4d:2f:21:
03:50:f7:32:a3:0b:26:2f:61:2e:63:f2:fe:61:bd:cb:1e:5d:
12:58:b9:bc:d3:13:18:fa:65:b4:25:05:e5:64:2d:81:bd:17:
b1:03:d1:68:23:15:9c:3e:4f:f3:fe:67:c6:69:97:59:ae:8f:
71:b1:b6:dd:f1:d2:3b:fe:7a:c8:da:f3:a4:1c:31:6c:7c:7e:
57:d5:d3:5d:7a:e9:c2:0b:1b:06:88:be:1f:33:4a:2f:0b:18:
3c:c7:0c:40:ab:ef:48:33:0d:97:7f:4d:ab:b1:ff:12:95:ca:
99:7c:d3:32:7b:95:8f:6b:90:f6:18:3b:8c:eb:e1:75:93:62:
2e:55:7f:30:b5:ab:0a:89:8a:88:35:cb:e7:23:9b:c4:18:e9:
e8:32:fe:b4:bc:c6:63:bc:2b:26:01:e9:46:6b:f9:32:29:4c:
5c:41:c7:2c:93:dd:eb:ac:76:8c:14:8d:55:8c:d0:b0:b1:c2:
c3:3b:81:07:13:32:35:d3:b8:2f:07:46:68:73:55:7a:be:03:
46:27:19:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:12:18 2025 by rpki-client