Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
File: 4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json)
Hash identifier: 7urQNQFDURp7xsgeirM4epQbXPArI6NkLWofpy7uGQQ=
Subject key identifier: 5C:B8:9A:77:37:A8:C4:11:FA:A7:CA:0E:B9:72:DE:46:E3:0C:16:8D
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial: 0196789FA4BA1DB1A35F4413844BA01AA112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
Manifest number: 0721
Signing time: Sun 27 Apr 2025 19:00:50 +0000
Manifest this update: Sun 27 Apr 2025 19:00:50 +0000
Manifest next update: Mon 28 Apr 2025 19:00:50 +0000
Files and hashes: 1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: FooVIPydcVBXX/egZH/tqbdW+BSTFXkyVW4W+Xf0F4c=)
2: XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa (hash: Yd4FhLWqP85JzI7J+m2iFxGbkWfW5fOZQ9iT2O1gqws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:a4:ba:1d:b1:a3:5f:44:13:84:4b:a0:1a:a1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Validity
Not Before: Apr 27 19:00:50 2025 GMT
Not After : Apr 28 19:00:50 2025 GMT
Subject: CN=5cb89a7737a8c411faa7ca0eb972de46e30c168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:85:76:90:d3:a2:31:11:4b:70:4b:29:96:
5a:77:3a:1a:67:fa:a1:af:69:01:c4:15:85:9b:b7:
fc:b6:dd:bf:6b:d1:ac:f1:f0:45:05:46:f7:16:34:
4a:6f:82:ea:08:db:08:0d:d2:43:d6:46:81:e9:c6:
57:0d:3b:46:ee:4c:83:6c:63:b5:cd:8c:67:92:7f:
27:85:d8:3b:7f:2c:2b:33:11:47:8a:b8:51:23:9c:
ef:16:c7:57:e1:df:81:59:57:81:d2:22:e6:9b:ef:
f5:05:80:d4:1c:cb:d2:b5:e9:9b:ea:63:9a:b7:a4:
86:a6:8b:99:0b:2e:09:88:56:ea:a2:dc:f8:51:74:
0e:e6:70:92:dc:34:83:b2:4a:9b:6a:d1:f6:2e:96:
bc:a1:5c:09:90:9f:fe:96:3e:ac:5d:a2:75:01:6a:
93:94:47:6b:98:88:f0:2f:9c:e4:69:53:8e:b6:37:
69:c4:6d:98:d7:19:fb:82:88:0c:f9:90:b0:ea:f2:
2b:61:a1:95:82:4f:ef:c9:fd:52:75:c6:72:8f:fc:
a4:73:6f:0c:9b:8b:ad:08:f7:07:4a:b5:a6:83:0f:
2c:2f:df:2a:20:99:65:5a:07:31:69:de:9d:ed:5e:
d5:b5:b7:80:5a:01:6e:13:0c:95:8e:13:04:18:2e:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B8:9A:77:37:A8:C4:11:FA:A7:CA:0E:B9:72:DE:46:E3:0C:16:8D
X509v3 Authority Key Identifier:
keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6e:88:bd:81:bc:c3:6d:31:46:0b:c9:c5:5d:cb:de:82:d3:
e6:1f:00:8f:d2:f5:75:b6:92:aa:85:f4:67:92:68:4d:dc:7d:
08:4f:d1:43:76:8c:a1:4b:f1:3f:57:32:f3:9b:01:ad:56:6f:
e9:79:0e:a8:c3:c0:ad:fc:fc:be:93:49:b9:66:17:96:e8:e6:
56:ea:99:ce:db:37:a3:74:87:80:b5:a3:d2:8c:58:86:54:39:
72:eb:06:2e:2e:69:88:de:78:ce:8a:36:0b:81:c2:02:0f:ec:
ed:a7:e3:96:77:25:41:aa:39:ba:09:77:1c:17:3b:88:88:b7:
0c:1b:18:93:63:1a:b0:de:a2:51:67:32:cd:4d:9c:08:53:c2:
a0:04:47:0c:fb:0b:c8:0e:86:98:e2:09:4a:32:2b:85:9d:f0:
7b:04:b8:18:7d:f1:8d:c7:a8:cb:42:31:e9:2c:82:73:8c:e0:
26:92:7b:0b:ec:62:9d:67:1b:40:43:cb:16:35:e9:25:c0:e2:
29:da:a8:03:73:ea:9c:82:27:09:59:e3:96:cc:cf:28:4c:f0:
55:e1:bc:fc:9d:96:42:74:f0:02:28:f5:46:08:f1:d8:f9:a0:
d2:cb:9b:ca:72:48:c5:a5:7f:22:ed:24:4b:4a:81:cf:cd:6d:
1a:eb:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:57:59 2025 by rpki-client