Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: 3BNI8M5auwK+3Td1mHimS3HM/1eqA7kFO62EGwwrbCg=
Subject key identifier: 13:D2:79:3E:1B:18:F5:92:AA:CE:C5:E9:78:CD:50:8F:54:1A:E6:08
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 0196900345E7845A8ADAEBCB25793530C7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 0C04
Signing time: Fri 02 May 2025 08:00:55 +0000
Manifest this update: Fri 02 May 2025 08:00:55 +0000
Manifest next update: Sat 03 May 2025 08:00:55 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: 6ttplEJCRu3WKrvYKT8xfbs1kCBldiGGFa777negoeU=)
2: Q3-HdEPCyjZHl-Sg4_PuJRYIuT8.roa (hash: XEPQxkckVuIQ5rwgxJmegps237sKjQ4AEXFUBlmNa1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:45:e7:84:5a:8a:da:eb:cb:25:79:35:30:c7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: May 2 08:00:55 2025 GMT
Not After : May 3 08:00:55 2025 GMT
Subject: CN=13d2793e1b18f592aacec5e978cd508f541ae608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:df:4d:9e:fd:62:4f:03:0b:45:84:bc:d6:
c1:a7:5f:c2:8d:41:2c:9d:d1:7f:0c:b3:87:79:41:
8d:19:65:a8:5f:bc:1f:d2:03:5d:5b:29:a1:4b:22:
a6:e8:8c:b4:4a:f5:15:5d:64:ac:92:8f:75:33:13:
e7:1d:63:86:60:b2:2d:d4:8e:ee:c7:8c:5c:88:b8:
a2:7a:3b:0c:14:c0:9d:a8:5a:62:ed:8a:d6:fb:01:
3e:fa:13:49:a5:8a:7b:44:bc:0e:ac:22:9d:ab:89:
2f:6c:e3:6f:4f:ca:1b:83:96:96:07:31:c2:02:38:
72:05:2e:d9:71:13:67:66:02:80:55:51:d1:20:95:
e3:ac:55:27:73:b3:52:e2:6f:d4:63:3c:2a:8f:67:
09:53:af:1e:e3:39:b6:9f:eb:4f:9a:af:a4:87:12:
78:42:b5:7b:bf:7c:1d:84:17:eb:2d:18:94:fe:2f:
94:7a:f3:cb:67:0d:ae:ce:7e:21:39:c1:05:db:04:
95:c5:fd:76:07:c2:f8:8e:be:d3:5c:2d:df:1e:e9:
da:3a:9d:ef:cc:5d:9f:c8:08:b4:50:f2:04:4b:3b:
f9:a0:a0:74:e1:08:46:fe:4e:81:44:06:e9:94:81:
5a:42:89:42:60:49:6d:ee:51:cd:85:e0:d9:31:b3:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:79:3E:1B:18:F5:92:AA:CE:C5:E9:78:CD:50:8F:54:1A:E6:08
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5b:09:a4:c7:c6:04:74:18:d6:00:44:f6:33:75:b6:49:60:
2c:75:54:7f:02:88:08:b9:eb:80:63:53:1b:dc:29:c1:53:0b:
48:82:c6:21:79:58:e4:b4:7e:4d:c5:e4:6c:7b:dc:1b:e8:3a:
2a:67:51:87:a3:dd:b4:03:8d:8b:9e:34:91:5a:c6:f8:65:69:
ee:6d:97:94:09:8f:b8:15:20:b5:d4:b7:fd:00:d6:d3:a4:c1:
28:06:3c:68:bf:00:55:31:f2:d4:12:26:95:c6:e0:56:bb:8c:
30:14:d4:53:9a:36:8b:6d:7c:ff:bf:58:38:a3:e9:53:54:7d:
8d:3a:58:db:98:ca:ca:aa:1d:48:91:7b:60:05:a3:e2:c4:ae:
87:57:02:8b:97:b3:95:e4:e6:32:3a:69:98:a1:a3:b0:06:da:
2c:27:e4:ef:72:46:ae:50:4b:d5:74:25:fa:77:ef:34:8f:c9:
57:b7:5e:ff:93:78:46:74:85:c5:40:2a:63:bd:64:df:29:cc:
c5:47:ad:50:3e:4e:0b:cd:f3:e1:4b:bf:40:ca:b1:e1:6f:b8:
eb:93:76:a7:02:07:f5:5d:b7:4b:84:e2:6d:32:b7:ea:c8:c7:
c7:68:b1:bd:d1:5b:35:25:51:7d:d4:39:dd:b9:11:5a:42:d3:
a5:b6:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:34:36 2025 by rpki-client