Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: dQoAj1h4AEmHYV9aqoh40MO8FYjjm0HWMwvAeRPueLE=
Subject key identifier: 5A:BB:7F:80:AE:60:15:25:0F:B7:C6:29:5D:80:7F:59:8B:F5:51:F8
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 01967B6994F825DFD6DA6CC6154F228826BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 151B
Signing time: Mon 28 Apr 2025 08:00:39 +0000
Manifest this update: Mon 28 Apr 2025 08:00:39 +0000
Manifest next update: Tue 29 Apr 2025 08:00:39 +0000
Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: 53969MXRtGDbse8N+qw25tqoMCc1eFjLoLifPD55F8Y=)
3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=)
4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=)
5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:94:f8:25:df:d6:da:6c:c6:15:4f:22:88:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Apr 28 08:00:39 2025 GMT
Not After : Apr 29 08:00:39 2025 GMT
Subject: CN=5abb7f80ae6015250fb7c6295d807f598bf551f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:f9:cd:cc:5d:f3:4f:9e:ec:e7:a9:f6:09:
a8:d3:c7:a3:7a:c0:f1:fb:c1:e6:7a:35:27:88:9b:
7c:17:c6:74:e8:7a:42:39:a7:5b:99:85:ab:9c:23:
63:44:66:d7:a6:66:6a:ad:31:6e:67:32:8b:4a:f9:
8d:05:9f:5b:8b:7d:9e:56:20:0c:8c:0b:8d:92:b7:
88:35:6c:f8:be:2b:ad:4d:27:8f:31:2d:c6:3f:9f:
29:61:44:e4:50:ca:bb:d8:8e:18:e4:c7:9d:8e:68:
cd:8e:89:f8:16:df:e0:23:d4:3e:07:1f:7b:cb:a5:
f3:d3:65:fa:5b:e8:68:ab:22:3a:c7:f7:6a:f2:0d:
8a:bb:31:eb:38:34:a6:74:5c:d5:35:bc:ee:93:0e:
b6:d2:c2:09:11:f4:aa:84:d3:dd:5c:c6:a7:de:62:
3f:d7:65:78:66:81:d1:9e:76:85:cc:52:34:8d:24:
82:72:24:df:29:67:f0:b5:38:c1:83:b3:16:a8:07:
df:3f:5a:67:c9:c6:ea:69:92:85:ce:20:65:52:a3:
cc:08:3f:be:6b:24:8d:1c:e5:5b:f2:67:4d:7f:1a:
f6:87:67:72:92:c8:71:50:cb:d4:3c:35:24:ab:1a:
fb:fa:5c:24:09:e1:f1:7e:19:4c:a8:e7:16:ee:20:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BB:7F:80:AE:60:15:25:0F:B7:C6:29:5D:80:7F:59:8B:F5:51:F8
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b4:e4:8a:f0:de:b1:03:0c:19:85:e7:db:c5:fc:87:e5:af:
c3:ac:60:7d:e2:71:b1:fe:ca:ac:22:7c:78:b0:6b:35:b2:f1:
d2:bb:53:65:2e:65:3e:24:03:75:05:02:7c:ea:38:87:3e:79:
09:84:ce:26:a4:1c:fc:be:07:fe:72:c7:df:68:4e:fb:49:cf:
18:26:73:de:33:14:d5:88:35:6e:49:a3:2f:5f:87:83:48:ef:
bd:4b:f6:96:a9:0d:ab:aa:44:df:d3:39:47:0f:f1:1d:e5:ee:
66:31:85:64:f0:d2:b9:3b:68:28:25:6f:06:a6:90:93:ea:b8:
6d:46:77:77:73:05:50:22:85:7a:08:a6:6f:81:66:67:c0:5c:
06:44:44:a1:bb:02:00:fb:78:78:7d:7c:9d:7c:a1:fd:d7:07:
08:40:b1:bc:7a:92:bd:19:ba:56:21:3c:c9:7f:d3:d2:77:96:
49:a3:0d:44:fe:a6:8c:7f:76:d3:55:11:2a:ae:cc:dd:76:38:
02:70:89:a0:ff:29:e2:9e:b7:5b:41:64:bd:fb:30:00:9e:8b:
4b:57:42:27:18:1c:0c:05:51:6f:aa:7e:fd:f5:a5:78:5e:9c:
92:34:e8:3e:b1:e7:c5:85:99:a0:10:f1:7b:2c:b0:b1:88:c2:
09:82:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:35:35 2025 by rpki-client