Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: 8WmpLgK04HuIHS3f0/CB1UkgtdPGddjmuGIvC3903yk=
Subject key identifier: 5D:C2:77:A5:72:FA:58:C5:AD:C6:C5:68:98:8F:A7:9F:F6:9F:D9:D5
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 019683C78555982FC18CEBA82F8A4ACC0E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 1396
Signing time: Tue 29 Apr 2025 23:00:13 +0000
Manifest this update: Tue 29 Apr 2025 23:00:13 +0000
Manifest next update: Wed 30 Apr 2025 23:00:13 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: gPejhBIkIUqy6QJMgUdGRIWycc5iqCgfoKtmkmZvhvo=)
2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:85:55:98:2f:c1:8c:eb:a8:2f:8a:4a:cc:0e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Apr 29 23:00:13 2025 GMT
Not After : Apr 30 23:00:13 2025 GMT
Subject: CN=5dc277a572fa58c5adc6c568988fa79ff69fd9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:90:1f:c2:8b:56:fe:df:2e:41:89:a1:83:
46:05:63:83:43:58:89:e3:5f:2d:13:ed:af:b2:b5:
ff:8d:9a:e2:00:3a:1e:7a:43:b9:41:a8:ef:43:53:
25:59:9e:52:ae:7e:83:8e:3a:72:6d:a4:7f:c4:72:
78:fe:9a:80:17:d9:18:3a:bf:25:e4:b8:5c:0d:f6:
ad:04:1d:08:39:19:fb:39:13:14:fd:33:cb:74:f0:
3c:e6:1f:15:10:2a:6c:d9:c3:6b:3a:7c:95:7c:03:
4a:a3:e0:31:7f:c1:c2:1e:70:14:29:26:b2:54:fc:
5a:30:a9:3e:11:5c:bc:8a:c1:d5:1a:7e:1a:82:9c:
f4:a8:36:e9:c4:bc:fb:8d:a4:fb:9b:08:7e:81:1c:
f9:25:d0:70:2f:88:f3:e5:d9:8e:af:9c:75:4d:67:
65:ae:71:90:11:59:09:53:03:ea:ab:54:f6:14:e0:
af:e3:b4:96:fe:8e:83:bc:e8:5a:ce:e6:f1:33:34:
4e:72:17:a7:b0:b1:b0:b2:1f:8e:5f:b5:eb:3e:a2:
dc:b1:e3:74:e9:69:10:ed:37:4c:36:97:19:de:c8:
7c:39:e8:34:80:a3:ad:11:6b:35:6b:53:aa:c9:ba:
7c:28:96:80:8f:0c:45:51:ff:1f:72:6e:cf:a1:9b:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C2:77:A5:72:FA:58:C5:AD:C6:C5:68:98:8F:A7:9F:F6:9F:D9:D5
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8c:48:60:6a:33:04:80:0d:63:7d:7a:e4:35:fe:ee:0e:c6:
07:7e:15:5a:4a:08:ea:cb:5d:ec:2c:48:0f:b7:dd:78:85:74:
fb:d0:ce:46:c5:9b:66:a5:fd:d6:24:f7:0f:a9:7e:ea:f3:8a:
7e:88:5e:c4:80:a4:d4:f3:17:c6:70:05:87:54:fc:cf:6d:73:
12:be:37:9c:c9:ff:92:e7:42:03:e9:3f:f9:9d:47:08:8e:16:
5f:56:20:8d:fa:ae:46:1f:e7:ff:c9:60:89:8d:ff:8b:01:ca:
2e:bf:b2:1a:33:d4:55:fd:df:76:bc:99:42:57:bc:70:ff:82:
dc:d7:4c:c4:9f:89:c8:4e:b1:b8:18:dc:04:ee:4c:32:b0:cf:
35:b0:2a:2e:da:03:7c:78:01:80:92:2a:ba:c9:59:fa:08:0c:
a9:47:ba:f1:14:26:6d:18:a6:b7:da:36:4c:c1:93:b8:94:d6:
43:3f:0b:94:80:f3:a6:40:5b:84:7b:0f:32:e1:29:53:be:33:
02:69:b2:6a:53:f5:8b:7b:8e:f7:fe:e8:31:4e:93:b7:48:5d:
45:b5:6c:d7:0f:2a:5c:64:86:91:b6:7d:b6:68:64:de:0b:f3:
84:09:06:3b:cf:15:d0:02:55:60:a0:0e:24:d4:6c:7a:9e:7c:
ee:b0:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:54:46 2025 by rpki-client